urlquery Phishing - Ghost Phishing Kit
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
http://portal-verify-ws7p4.b-cdn.net
public
Phishing detected
Review evidence →1 detection · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://portal-verify-ws7p4.b-cdn.net
- Submitted IP / ASN
195.181.166.158 AS60068 · Datacamp Limited
- Final URL
- https://portal-verify-ws7p4.b-cdn.net/?_a=1&_t=2026-10-15T13%3A11%3A51.472Z&_n=KJICNCZC&_r=direct
- Final IP / ASN
- 195.181.166.158 AS60068 · Datacamp Limited
Final page
- Page title
- Q4_Report_Final.docx
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 82.9 KB (84841 bytes)
Detections
Activity
- HTTP requests
- 9
- Observed hosts
- 3
- Script records
- 6
Estimated HTTP data
- Sent
- ~5.7 KB
- Received
- ~124.5 KB
Page capture
Final browser state
portal-verify-ws7p4.b-cdn.net
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-12 | 2.3 KB | 9.6 KB | 20.231.128.67 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| ehrnijahkn-b666c1.hi-6e0.workers.dev | N/A | N/A | 2026-10-02 | 2026-10-12 | 2.6 KB | 3.3 KB |  172.67.168.129 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| portal-verify-ws7p4.b-cdn.net 1 alerts | N/A | 2016-04-25 | 2026-10-15 | 2026-10-15 | 498 B | 111.6 KB | 195.181.166.158 | Bunny CDN Not recorded |