urlquery.net

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium
Triggered on HTTP #4

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium
Triggered on HTTP #4

Threat Detection Systems

5

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium
Matched indicatorbitbaink.web.app/main-es2015.js

IDS

1

Suricata IDS ET INFO External IP Address Lookup Domain (ipify .org) in TLS SNI

VerdictVerdict not recorded
Severitylow

Suricata /w Emerging Threats Pro

Triggered on Report-level
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot