urlquery.net
Investigate/Report/ed5a0163-b2d9-44fd-b3c6-eace71059655
WEBSITE ANALYSIS REPORT

http://exxy.ca

public
Report tags
Submit tags
Request review

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

8

YARAhub by abuse.ch Detects SocGholish obfuscated variant first observed in July 2022

Verdictmalware
Severitymedium
Triggered on HTTP #3 JavaScript #9
Matched indicatorexxy.ca/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #2
Matched indicatorpolygon-public.nodies.app

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #5 HTTP #9
Matched indicator1rpc.io

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #12 HTTP #13
Matched indicatorinterseq.at

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #12 HTTP #13
Matched indicatorinterseq.at

DNS4EU Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #12 HTTP #13
Matched indicatorinterseq.at

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium
Triggered on HTTP #12 HTTP #13
Matched indicatorinterseq.at
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot