urlquery.net
WEBSITE ANALYSIS REPORT

https://s4kj0dxrmdfybkpc46qcltq.pages.dev/index.php/

public
Submit tags
Request review
Phishing detected

8 detections · review the detection signals

Review evidence →

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://s4kj0dxrmdfybkpc46qcltq.pages.dev/index.php/
Submitted IP / ASN
Country unknown 172.66.47.29 AS13335 · CLOUDFLARENET
Final URL
https://s4kj0dxrmdfybkpc46qcltq.pages.dev/index.php/
Final IP / ASN
Country unknown 188.114.97.1 AS13335 · CLOUDFLARENET

Final page

Page title
Outlook
Final DOM MIME
text/html; charset=utf-8
Final DOM size
76.6 KB (78426 bytes)

Detections

URLQuery
3
IDS
1
TDS
4

Activity

HTTP requests
3
Observed hosts
2
Script records
2

Estimated HTTP data

Sent
~1.4 KB
Received
~241.8 KB

Page capture

Final browser state

Recorded title

Outlook

76.6 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Phishing - Microsoft

VerdictPhishing
Severitymedium

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious
Severitymedium

Threat Detection Systems

3

YARAhub by abuse.ch Detects file containing Telegram Bot API

Verdictmalware
Severitymedium

OpenDNS Phishing Block

VerdictPhishing
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

IDS

1

Suricata IDS ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)

VerdictVerdict not recorded
Severitylow

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
s4kj0dxrmdfybkpc46qcltq.pages.dev 9 alertsN/A2020-09-022025-11-042025-12-08995 B154.7 KBCountry unknown 188.114.97.1
ajax.googleapis.com 36912005-01-252012-05-222026-04-05462 B87.0 KBUnited States 142.250.74.10
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot