urlquery Suspicious - Suspicious Javascript code
VerdictSuspicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://lritech.shop/mx/ver1/wm.html
public
Phishing detected
Review evidence →5 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://lritech.shop/mx/ver1/wm.html
- Submitted IP / ASN
104.21.47.136 AS13335 · CLOUDFLARENET
- Final URL
- https://lritech.shop/mx/ver1/wm.html
- Final IP / ASN
- 104.21.47.136 AS13335 · CLOUDFLARENET
Final page
- Page title
- Webmail Login
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 301.7 KB (308976 bytes)
Detections
Activity
- HTTP requests
- 24
- Observed hosts
- 8
- Script records
- 10
Estimated HTTP data
- Sent
- ~14.1 KB
- Received
- ~833.1 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Phishing - Known Phishing Kit detected
VerdictPhishing
Severityhigh
Threat Detection Systems
2Quad9 DNS Sinkholed
VerdictMalicious
Severitymedium
DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-08-24 | 462 B | 68.6 KB |  151.101.65.155 | Varnish Caching Varnish is a reverse caching proxy. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-08-23 | 982 B | 30.1 KB | 104.17.25.14 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| sh001.webhostbox.net 15 alerts | N/A | 2010-02-11 | 2020-01-26 | 2026-08-22 | 9.9 KB | 305.1 KB | 162.241.27.10 | |
| maxcdn.bootstrapcdn.com | 6807 | 2012-05-25 | 2014-06-18 | 2026-08-24 | 481 B | 48.7 KB | 104.18.10.207 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| ajax.googleapis.com | 3691 | 2005-01-25 | 2012-05-22 | 2026-08-24 | 483 B | 84.5 KB | 142.250.178.106 | |
| lritech.shop 3 alerts | N/A | N/A | 2026-07-10 | 2026-07-10 | 496 B | 204.1 KB | 104.21.47.136 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| stackpath.bootstrapcdn.com | 21970 | 2012-05-25 | 2018-04-05 | 2026-08-24 | 489 B | 50.8 KB | 104.18.11.207 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| unpkg.com | 1093 | 2016-01-06 | 2016-01-07 | 2026-08-24 | 946 B | 41.2 KB | 104.18.0.22 | Fly.io PaaS Fly is a platform for running full stack apps and databases. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |