urlquery.net
WEBSITE ANALYSIS REPORT

http://mfrederick.net/

public
Report tags
Submit tags
Request review

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

6

Nextron YARA rules Unique code from Jetriz, Swid & Jeniva of the Tetris framework

Verdictmalware
Severitymedium

Public Nextron YARA rules

Matched indicatormfrederick.net/js/conversion-v1.min.js

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #4 HTTP #6 HTTP #9 HTTP #10 HTTP #11 HTTP #14 HTTP #15 HTTP #16 HTTP #17 HTTP #18 HTTP #19 HTTP #20 HTTP #22 HTTP #24 HTTP #25 HTTP #26 HTTP #27 HTTP #28 HTTP #29 HTTP #30 HTTP #33 HTTP #34 HTTP #35 HTTP #36 HTTP #37 HTTP #39 HTTP #45 HTTP #46 HTTP #48 HTTP #49 HTTP #50 HTTP #52 HTTP #55 HTTP #56 HTTP #58 HTTP #59 HTTP #61 HTTP #62 HTTP #63 HTTP #64 HTTP #65 HTTP #66 HTTP #70 HTTP #71 HTTP #73 HTTP #75 HTTP #76 HTTP #77 HTTP #78 HTTP #79 HTTP #82 HTTP #83 HTTP #84 HTTP #87 HTTP #90 HTTP #92 HTTP #93 HTTP #94 HTTP #95 HTTP #97 HTTP #98 HTTP #100 HTTP #101 HTTP #102 HTTP #103 HTTP #104 HTTP #105 HTTP #106 HTTP #110 HTTP #111 HTTP #112 HTTP #113 HTTP #114 HTTP #117 HTTP #118 HTTP #119 HTTP #120 HTTP #124 HTTP #125 HTTP #128 HTTP #129 HTTP #134 HTTP #136 HTTP #137 HTTP #138 HTTP #143 HTTP #144 HTTP #145 HTTP #149 HTTP #150 HTTP #151 HTTP #152 HTTP #154 HTTP #155 HTTP #157 HTTP #158 HTTP #160 HTTP #164 HTTP #166 HTTP #167 HTTP #168 HTTP #169 HTTP #170 HTTP #171 HTTP #174 HTTP #175 HTTP #176 HTTP #177 HTTP #180 HTTP #181 HTTP #182 HTTP #184 HTTP #185 HTTP #187 HTTP #188 HTTP #189 HTTP #190 HTTP #191 HTTP #192 HTTP #193 HTTP #195 HTTP #196 HTTP #197 HTTP #200 HTTP #203 HTTP #204 HTTP #207 HTTP #208 HTTP #209
Matched indicatormfrederick.net

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #4 HTTP #6 HTTP #9 HTTP #10 HTTP #11 HTTP #14 HTTP #15 HTTP #16 HTTP #17 HTTP #18 HTTP #19 HTTP #20 HTTP #22 HTTP #24 HTTP #25 HTTP #26 HTTP #27 HTTP #28 HTTP #29 HTTP #30 HTTP #33 HTTP #34 HTTP #35 HTTP #36 HTTP #37 HTTP #39 HTTP #45 HTTP #46 HTTP #48 HTTP #49 HTTP #50 HTTP #52 HTTP #55 HTTP #56 HTTP #58 HTTP #59 HTTP #61 HTTP #62 HTTP #63 HTTP #64 HTTP #65 HTTP #66 HTTP #70 HTTP #71 HTTP #73 HTTP #75 HTTP #76 HTTP #77 HTTP #78 HTTP #79 HTTP #82 HTTP #83 HTTP #84 HTTP #87 HTTP #90 HTTP #92 HTTP #93 HTTP #94 HTTP #95 HTTP #97 HTTP #98 HTTP #100 HTTP #101 HTTP #102 HTTP #103 HTTP #104 HTTP #105 HTTP #106 HTTP #110 HTTP #111 HTTP #112 HTTP #113 HTTP #114 HTTP #117 HTTP #118 HTTP #119 HTTP #120 HTTP #124 HTTP #125 HTTP #128 HTTP #129 HTTP #134 HTTP #136 HTTP #137 HTTP #138 HTTP #143 HTTP #144 HTTP #145 HTTP #149 HTTP #150 HTTP #151 HTTP #152 HTTP #154 HTTP #155 HTTP #157 HTTP #158 HTTP #160 HTTP #164 HTTP #166 HTTP #167 HTTP #168 HTTP #169 HTTP #170 HTTP #171 HTTP #174 HTTP #175 HTTP #176 HTTP #177 HTTP #180 HTTP #181 HTTP #182 HTTP #184 HTTP #185 HTTP #187 HTTP #188 HTTP #189 HTTP #190 HTTP #191 HTTP #192 HTTP #193 HTTP #195 HTTP #196 HTTP #197 HTTP #200 HTTP #203 HTTP #204 HTTP #207 HTTP #208 HTTP #209
Matched indicatormfrederick.net

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #4 HTTP #6 HTTP #9 HTTP #10 HTTP #11 HTTP #14 HTTP #15 HTTP #16 HTTP #17 HTTP #18 HTTP #19 HTTP #20 HTTP #22 HTTP #24 HTTP #25 HTTP #26 HTTP #27 HTTP #28 HTTP #29 HTTP #30 HTTP #33 HTTP #34 HTTP #35 HTTP #36 HTTP #37 HTTP #39 HTTP #45 HTTP #46 HTTP #48 HTTP #49 HTTP #50 HTTP #52 HTTP #55 HTTP #56 HTTP #58 HTTP #59 HTTP #61 HTTP #62 HTTP #63 HTTP #64 HTTP #65 HTTP #66 HTTP #70 HTTP #71 HTTP #73 HTTP #75 HTTP #76 HTTP #77 HTTP #78 HTTP #79 HTTP #82 HTTP #83 HTTP #84 HTTP #87 HTTP #90 HTTP #92 HTTP #93 HTTP #94 HTTP #95 HTTP #97 HTTP #98 HTTP #100 HTTP #101 HTTP #102 HTTP #103 HTTP #104 HTTP #105 HTTP #106 HTTP #110 HTTP #111 HTTP #112 HTTP #113 HTTP #114 HTTP #117 HTTP #118 HTTP #119 HTTP #120 HTTP #124 HTTP #125 HTTP #128 HTTP #129 HTTP #134 HTTP #136 HTTP #137 HTTP #138 HTTP #143 HTTP #144 HTTP #145 HTTP #149 HTTP #150 HTTP #151 HTTP #152 HTTP #154 HTTP #155 HTTP #157 HTTP #158 HTTP #160 HTTP #164 HTTP #166 HTTP #167 HTTP #168 HTTP #169 HTTP #170 HTTP #171 HTTP #174 HTTP #175 HTTP #176 HTTP #177 HTTP #180 HTTP #181 HTTP #182 HTTP #184 HTTP #185 HTTP #187 HTTP #188 HTTP #189 HTTP #190 HTTP #191 HTTP #192 HTTP #193 HTTP #195 HTTP #196 HTTP #197 HTTP #200 HTTP #203 HTTP #204 HTTP #207 HTTP #208 HTTP #209
Matched indicatormfrederick.net

IDS

2

Suricata IDS ET HUNTING Possible Obfuscator io JavaScript Obfuscation

VerdictVerdict not recorded
Severityhigh

Suricata /w Emerging Threats Pro

Suricata IDS ET INFO Abused Hosting Domain (azurewebsites .net) in TLS SNI

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot