urlquery.net
WEBSITE ANALYSIS REPORT

http://timber-quarry.com/niwevprtz/nxlffshd/ztoajplpv

public
Report tags
Submit tags
Request review

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://timber-quarry.com/niwevprtz/nxlffshd/ztoajplpv
Submitted IP / ASN
United States 65.9.46.23 Unknown
Final URL
https://everforge-thistledown.com/smp/m_box/u_recovery_m_box/k:r/m:21214834300bbc927df3e16733d90f6d/PC:93949966a3fd63824133/MC:21214834300bbc927df3e16733d90f6d/?
Final IP / ASN
Country unknown 104.21.58.139 AS13335 · CLOUDFLARENET

Final page

Page title
everforge-thistledown.com/smp/m_box/u_recovery_m_box/k:r/m:21214834300bbc927df3e16733d90f6d/PC:93949966a3fd63824133/MC:21214834300bbc927df3e16733d90f6d/?
Final DOM MIME
text/html; charset=utf-8
Final DOM size
6.7 KB (6910 bytes)

Detections

URLQuery
0
IDS
0
TDS
1

Activity

HTTP requests
13
Observed hosts
2
Script records
5

Estimated HTTP data

Sent
~8.5 KB
Received
~1.76 MB

Page capture

Final browser state

Recorded title

everforge-thistledown.com/smp/m_box/u_recovery_m_box/k:r/m:21214834300bbc927df3e16733d90f6d/PC:93949966a3fd63824133/MC:21214834300bbc927df3e16733d90f6d/?

6.7 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

Threat Detection Systems

1

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
everforge-thistledown.com 12 alertsN/A2026-06-292026-07-062026-07-068.0 KB1.76 MBCountry unknown 104.21.58.139
timber-quarry.com N/AN/AN/AN/A514 B441 BUnited States 3.167.2.50
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot