English
urlquery
159 posts
urlquery
@urlquery
https://t.co/pr28Ed4R2V - a service for detecting and analyzing malicious websites.
Beigetreten Mart 2011
47 Folgt3K Follower
@hetznerabuse @banthisguy9349 @AezaLTD @pigeonovv @spamhaus @abuse_ch @pfcloudio @correctiv_org @mxbernhard @RETNnet @Hetzner_Online just totally a random name then i guess, what a coincidence when reply in a thread about hosting providers.
English
Dear representatives of @spamhaus, @abuse_ch, @banthisguy9349,
@pfcloudio, @urlquery, @correctiv_org, and @mxbernhard, @RETNnet
I would like to address some pressing concerns regarding your activities and their impact on the hosting industry. [1/9]
English
urlquery retweetet
and another ~10k are being send today. Keep a eye out on this urlquery.net/search?q=submi… to find urls with a sample giving 1+ Positive as a minimum
The hits are giving a strong indication of malware/source does being shared for either educational purposes or malicious intend!
Fox_threatintel@banthisguy9349
5k more github urls being send! awesome work @urlquery
English
urlquery retweetet
5k more github urls being send! awesome work @urlquery
Fox_threatintel@banthisguy9349
In collab with @urlquery 9.6k github urls are being send that are potentially used for malicious purposes! Detection rules are hunted over the urls/samples that are discovered! You can find the datastream under the following query/tag: urlquery.net/search?q=submi…
English
urlquery retweetet
In collab with @urlquery 9.6k github urls are being send that are potentially used for malicious purposes! Detection rules are hunted over the urls/samples that are discovered!
You can find the datastream under the following query/tag: urlquery.net/search?q=submi…
English
urlquery retweetet
Did you know that you can Utileze @urlquery to search for body results?
urlquery.net/search?q=%22po…
cc: @RacWatchin8872
Salman@salmanvsf
@banthisguy9349 More Domains showing similar behavior!! hxxps[://]lab[.]adversarygroup[.]com/loader2[.]ps1 hxxps[://]travelwithandrew[.]xyz/assets/in[.]txt hxxps[://]restoindia[.]me/recaptcha/in[.]txt hxxps[://]marimarbahamas[.]me/downloads/in[.]txt #page.title.keyword%3A%22Verify%20You%20Are%20Human%22" target="_blank" rel="nofollow noopener">urlscan.io/search/#page.t…
English
@banthisguy9349 @abuse_ch urlquery.net/search?q=http.…
several common file extensions padded with .lnk in the recent days.
pdf, jpg and png being the most common
#lummastealer
payload:
urlquery.net/report/822930f…
English
pdf.lnk used by #lummastealer! Get your detection rules set on this file extension.
Currently scanning 700 pdf.lnk urls to see which ones are left online
33 pdf.lnk urls found. Time to analyze and report where needed
cc: @abuse_ch
English
urlquery retweetet
Check out the new blog I wrote on #Gabagool AiTM Phishing we discovered at @TRACLabs_ 🐟 targeting corporate and government employees.
@traclabs_/aitm-phishing-hold-the-gabagool-analyzing-the-gabagool-phishing-kit-531f5bbaf0e4" target="_blank" rel="nofollow noopener">medium.com/@traclabs_/ait…
English
@banthisguy9349 @lontze7 @500mk500 or if you want to keep the original expression:
urlquery.net/search?q=http.…
English
urlquery retweetet
#lummastealer is still heavily using b-cdn[.]net domains
IOC's
hxxps://privatebin.net/?d92c797cbe6e4c07#GZwqvzUKVzRRQrr1CuVLLKwXFQVdAQwAy1BV2HJk1dB2
English
urlquery retweetet
I have had a big pleasure exploring @urlquery dataflow and existing IDS/YARA rules.
I have used scraping methods in order to send IOC's/malware towards @abuse_ch and I am willing to share my hunting rules in the following bin.
#Cu7TkrL7V38DahjY8nH8QGhSpFK2embEF1mSTAaoVsxQ" target="_blank" rel="nofollow noopener">privatebin.net/?150eba485218d…
English
urlquery retweetet
Secret sauce how i ended up @ this ransomware IOC.
urlquery.net/search?q=senso…
within @urlquery you have the ability to scan URLS but also IDS/YARA rules get triggered on the file download. This is very essential to hunt malicious files.
Fox_threatintel@banthisguy9349
#ransomware IOC 107.175.75.38 was observed today (now taken down it seems) Malware urls / hash can be found here urlquery.net/report/19eb09f…
English
@urlquery is there anybody who has good contact with urlquery.net owner. Seems to be hard to get in contact
English
Looking for sites using coin-hive?
urlquery.net/search?q=%22ne…
or sites which uses a specific key:
urlquery.net/search?q=Yq2af…
English