urlquery.net
WEBSITE ANALYSIS REPORT

https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fstorage.googleapis.com%2Fuz-zg8311%2Fhs789fil&data=05%7C02%7Cbackground.screening-us%40fadv.com%7C0aa91272dbfb45607de708df09414217%7C6c4b33465ad44991b51ebb35a33065b0%7C1%7C0%7C639239848210258359%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=IvixDU122Mc3V2bKMpt0hVq8lhjw2gWK%2FmXY0mrq1jo%3D&reserved=0

public
Submit tags
Request review
Phishing detected

4 detections · review the detection signals

Review evidence →

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium
Triggered on HTTP #19

Threat Detection Systems

2

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium
Triggered on JavaScript #5
Matched indicatoroat.tavrenix.it.com/?p=ottqd0gfrx

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #8
Matched indicatorgrchristian.screenconnect.com
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot