urlquery.net
Investigate/Report/149cd38e-2aeb-4a3f-9fca-7d08d6ff4fb0
WEBSITE ANALYSIS REPORT

https://ueya.mx/tress/4/?user=renik1@veltobox.net

public
Report tags
wetransfer phishing financial
Submit tags
openphish
Request review
Phishing detected

3 detections · review the detection signals

Review evidence →

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://ueya.mx/tress/4/?user=renik1@veltobox.net
Submitted IP / ASN
Mexico 108.179.194.83 AS31898 · Oracle Corporation
Final URL
https://ueya.mx/tress/4/?user=renik1@veltobox.net
Final IP / ASN
United States 108.179.194.83 AS19871 · NETWORK-SOLUTIONS-HOSTING

Final page

Page title
WeTransfer
Final DOM MIME
text/html; charset=utf-8
Final DOM size
22.2 KB (22757 bytes)

Detections

URLQuery
2
IDS
0
TDS
1

Activity

HTTP requests
4
Observed hosts
2
Script records
1

Estimated HTTP data

Sent
~2.0 KB
Received
~65.2 KB

Page capture

Final browser state

ueya.mx
Final browser screenshot
Recorded title

WeTransfer

22.2 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - WeTransfer

VerdictPhishing
Severitymedium

Threat Detection Systems

1

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
ueya.mx 6 alertsN/AN/AN/AN/A1.4 KB24.1 KBUnited States 108.179.194.83
cdn.wetransfer.net N/A2009-02-022016-11-172026-09-26604 B41.1 KBUnited States 143.204.238.79
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot