urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://acetechnologies.org/xnn/pdfauto.html
Submitted IP / ASN
United States 199.79.62.16 AS46606 · Unified Layer
Final URL
https://acetechnologies.org/xnn/pdfauto.html
Final IP / ASN
United States 199.79.62.16 AS46606 · UNIFIEDLAYER-AS-1

Final page

Page title
ADOBE PDF
Final DOM MIME
text/html; charset=utf-8
Final DOM size
7.2 KB (7347 bytes)

Detections

URLQuery
3
IDS
0
TDS
4

Activity

HTTP requests
5
Observed hosts
4
Script records
1

Estimated HTTP data

Sent
~2.7 KB
Received
~932.2 KB

Page capture

Final browser state

Recorded title

ADOBE PDF

7.2 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Phishing - Adobe

VerdictPhishing
Severitymedium

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium

Threat Detection Systems

4

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium

OpenDNS Phishing Block

VerdictPhishing
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
gyazo.com 74742007-08-312012-05-202026-08-31572 B1.5 KBUnited States 34.120.149.37
acetechnologies.org 10 alertsN/A2012-08-062026-09-102026-09-10985 B8.3 KBUnited States 199.79.62.16
res-1.cdn.office.net 9901994-11-142020-12-082026-09-09601 B2.3 KBNorway 23.36.76.200
lametric.com 598602013-12-022014-06-202026-08-31579 B920.2 KBCountry unknown 172.67.131.180
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot