urlquery.net
Investigate/Report/cf05fa69-ffa5-4a3f-825e-c430d2cc4d72
WEBSITE ANALYSIS REPORT

http://maroyot2.github.io/myadaw2/

public
Report tags
Submit tags
Request review

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

7

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #1 HTTP #29
Matched indicatorjs.wpushsdk.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #13 HTTP #27
Matched indicatorjs.wpadmngr.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #16 HTTP #36
Matched indicatorna.nawpush.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #17 HTTP #37
Matched indicatorjs.capndr.com

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #38
Matched indicatornereserv.com

Hagezi Threat Feed Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #38
Matched indicatornereserv.com

IDS

3

Suricata IDS ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI

VerdictVerdict not recorded
Severitymedium

Suricata /w Emerging Threats Pro

Triggered on Report-level

Suricata IDS ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)

VerdictVerdict not recorded
Severitymedium

Suricata /w Emerging Threats Pro

Triggered on Report-level

Suricata IDS ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz)

VerdictVerdict not recorded
Severitymedium

Suricata /w Emerging Threats Pro

Triggered on Report-level
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot