urlquery.net
Investigate/Report/c43cb5ec-e81d-4217-8d4d-845f36d12e69
WEBSITE ANALYSIS REPORT

http://porneec.com

public
Report tags
Submit tags
Request review

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

14

Nextron YARA rules Detects hex encoded code that has been base64 encoded

Verdictmalware
Severitymedium

Public Nextron YARA rules

Triggered on HTTP #25 JavaScript #118
Matched indicatorporneec.com/wp-content/litespeed/js/83889a79169e7472247aa29fe3aea7e9.js?ver=ea7e9

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #2 HTTP #3 HTTP #5 HTTP #9 HTTP #12 HTTP #13 HTTP #17 HTTP #18 HTTP #20 HTTP #21 HTTP #22 HTTP #29 HTTP #32 HTTP #33 HTTP #35 HTTP #36 HTTP #41 HTTP #42 HTTP #43 HTTP #47 HTTP #48 HTTP #49 HTTP #54 HTTP #55 HTTP #56 HTTP #63 HTTP #64 HTTP #66 HTTP #67 HTTP #71 HTTP #72 HTTP #78 HTTP #79 HTTP #82 HTTP #83 HTTP #84 HTTP #86 HTTP #87 HTTP #88 HTTP #91 HTTP #93 HTTP #95 HTTP #96 HTTP #97 HTTP #99 HTTP #102 HTTP #103 HTTP #104 HTTP #106 HTTP #108 HTTP #111 HTTP #112 HTTP #113 HTTP #115 HTTP #116 HTTP #117 HTTP #120 HTTP #123 HTTP #124 HTTP #125 HTTP #126 HTTP #133 HTTP #135 HTTP #138 HTTP #139 HTTP #140 HTTP #142 HTTP #144 HTTP #147 HTTP #148 HTTP #149 HTTP #152 HTTP #153 HTTP #155 HTTP #156 HTTP #157 HTTP #162 HTTP #163 HTTP #164 HTTP #165 HTTP #166 HTTP #169 HTTP #171 HTTP #175 HTTP #177 HTTP #178 HTTP #179 HTTP #181 HTTP #183 HTTP #184 HTTP #188 HTTP #190 HTTP #191 HTTP #193 HTTP #194 HTTP #196 HTTP #197 HTTP #198 HTTP #200 HTTP #201 HTTP #205 HTTP #206 HTTP #207
Matched indicatorourdream.ai

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #14 HTTP #160
Matched indicatorstatic.ourdream.ai

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #59
Matched indicatordisplayvertising.com

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #60 HTTP #105
Matched indicatorposthog-flags.svc.ourdream.ai

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #114
Matched indicatorwww.displayvertising.com

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #187
Matched indicatorusrpubtrk.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #187
Matched indicatorusrpubtrk.com

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #187
Matched indicatorusrpubtrk.com

IDS

2

Suricata IDS ET INFO Session Traversal Utilities for NAT (STUN Binding Request)

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level

Suricata IDS ET INFO Session Traversal Utilities for NAT (STUN Binding Response)

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot