urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://docsewallet.com/Adobe_Installer.html
Submitted IP / ASN
United States 66.116.209.139 AS31898 · Oracle Corporation
Final URL
https://docsewallet.com/Adobe_Installer.html
Final IP / ASN
United Arab Emirates 66.116.209.139 AS394695 · PUBLIC-DOMAIN-REGISTRY

Final page

Page title
PDF Viewer
Final DOM MIME
text/html; charset=utf-8
Final DOM size
2.18 MB (2285064 bytes)

Detections

URLQuery
4
IDS
0
TDS
3

Activity

HTTP requests
13
Observed hosts
6
Script records
4

Estimated HTTP data

Sent
~7.0 KB
Received
~1.17 MB

Page capture

Final browser state

Recorded title

PDF Viewer

2.18 MB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Phishing - Adobe

VerdictPhishing
Severitymedium
VerdictPhishing
Severityhigh

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium

Threat Detection Systems

3

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium

OpenDNS Phishing Block

VerdictPhishing
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
docsewallet.com 14 alertsN/A2025-09-172026-10-162026-10-161.9 KB1.15 MBUnited Arab Emirates 66.116.209.139
t3.gstatic.com 1 alertsN/A2008-02-112013-05-062026-10-14593 B1014 BUnited States 142.250.178.100
www.google.com 221997-09-152015-05-102026-10-112.2 KB1.8 KBUnited States 142.251.155.119
t1.gstatic.com 1 alertsN/A2008-02-112013-05-062026-10-09590 B1.5 KBUnited States 142.250.178.36
www.softwareworld.co 1 alerts18643742017-11-212019-02-132026-10-14579 B15.8 KBCountry unknown 172.67.68.67
t0.gstatic.com 2 alertsN/A2008-02-112013-05-062026-10-121.2 KB4.5 KBUnited States 142.250.178.100
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot