urlquery

@urlquery

http://urlquery.net - a service for detecting and analyzing malicious websites.

urlquery.net

Joined March 2011

159Posts 3KFollowers 47Following

You might like

@Shadowserver

@volatility

@virusbtn

@virustotal

@joe4security

@bartblaze

@Xylit0l

@xme

@StopMalvertisin

@OpenMalware

@mal_share

@HybridAnalysis

@iMHLv2

@abuse_ch

@sempersecurus

urlquery

@urlquery

Jul 10

That is one nice open redirect urlquery.net/report/dc6f6d7… #phishing #rockstar2fa

urlquery

@urlquery

Feb 3

#phishing For the last weeks there as been quite a few domains detected related to #tycoon at least a few hundred daily. Mostly towards Microsoft

urlquery

@urlquery

Jan 28

This was a triumph. I'm making a note here: HUGE SUCCESS.

urlquery reposted

and another ~10k are being send today. Keep a eye out on this urlquery.net/search?q=submi… to find urls with a sample giving 1+ Positive as a minimum The hits are giving a strong indication of malware/source does being shared for either educational purposes or malicious intend!

banthisguy9349's tweet image. and another ~10k are being send today. Keep a eye out on this urlquery.net/search?q=submi… to find urls with a sample giving 1+ Positive as a minimum

The hits are giving a strong indication of malware/source does being shared for either educational purposes or malicious intend!

Fox_threatintel

@banthisguy9349

Dec 16

5k more github urls being send! awesome work @urlquery

urlquery reposted

Fox_threatintel

@banthisguy9349

Dec 16

5k more github urls being send! awesome work @urlquery

Fox_threatintel

@banthisguy9349

Dec 15

In collab with @urlquery 9.6k github urls are being send that are potentially used for malicious purposes! Detection rules are hunted over the urls/samples that are discovered! You can find the datastream under the following query/tag: urlquery.net/search?q=submi…

banthisguy9349's tweet image. In collab with @urlquery 9.6k github urls are being send that are potentially used for malicious purposes! Detection rules are hunted over the urls/samples that are discovered!

You can find the datastream under the following query/tag: urlquery.net/search?q=submi…

urlquery reposted

Fox_threatintel

@banthisguy9349

Dec 15

urlquery reposted

Fox_threatintel

@banthisguy9349

Dec 10

Did you know that you can Utileze @urlquery to search for body results? urlquery.net/search?q=%22po… cc: @RacWatchin8872

Salman

@salmanvsf

Dec 10

More Domains showing similar behavior!! hxxps[://]lab[.]adversarygroup[.]com/loader2[.]ps1 hxxps[://]travelwithandrew[.]xyz/assets/in[.]txt hxxps[://]restoindia[.]me/recaptcha/in[.]txt hxxps[://]marimarbahamas[.]me/downloads/in[.]txt urlscan.io/search/#page.t…

salmanvsf's tweet image. More Domains showing similar behavior!!

hxxps[://]lab[.]adversarygroup[.]com/loader2[.]ps1
hxxps[://]travelwithandrew[.]xyz/assets/in[.]txt
hxxps[://]restoindia[.]me/recaptcha/in[.]txt
hxxps[://]marimarbahamas[.]me/downloads/in[.]txt

urlscan.io/search/#page.t…

urlquery

@urlquery

Dec 9

Make your browser look like a sandbox and you'll get free anti-phishing

urlquery reposted

RussianPanda 🐼 🇺🇦

@RussianPanda9xx

Nov 18

Check out the new blog I wrote on #Gabagool AiTM Phishing we discovered at @TRACLabs_ 🐟 targeting corporate and government employees. medium.com/@traclabs_/ait…

RussianPanda9xx's tweet card. Case study

AiTM Phishing, Hold the Gabagool: Analyzing the Gabagool Phishing Kit

Source: medium.com

urlquery reposted

Fox_threatintel

@banthisguy9349

Nov 6, 2024

#lummastealer is still heavily using b-cdn[.]net domains IOC's hxxps://privatebin.net/?d92c797cbe6e4c07#GZwqvzUKVzRRQrr1CuVLLKwXFQVdAQwAy1BV2HJk1dB2

banthisguy9349's tweet image. #lummastealer is still heavily using b-cdn[.]net domains

IOC's
hxxps://privatebin.net/?d92c797cbe6e4c07#GZwqvzUKVzRRQrr1CuVLLKwXFQVdAQwAy1BV2HJk1dB2

urlquery reposted

Fox_threatintel

@banthisguy9349

Oct 29, 2024

I have had a big pleasure exploring @urlquery dataflow and existing IDS/YARA rules. I have used scraping methods in order to send IOC's/malware towards @abuse_ch and I am willing to share my hunting rules in the following bin. privatebin.net/?150eba485218d…

urlquery reposted

Fox_threatintel

@banthisguy9349

Oct 14, 2024

Secret sauce how i ended up @ this ransomware IOC. urlquery.net/search?q=senso… within @urlquery you have the ability to scan URLS but also IDS/YARA rules get triggered on the file download. This is very essential to hunt malicious files.