urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://aerolinkafrica.com/
Submitted IP / ASN
United States 142.93.2.145 AS14061 · DIGITALOCEAN-ASN
Final URL
https://rejectkyc-reviewunder.142-93-2-145.cpanel.site/signin?c_ds_na=pP5SzvtaoXU1bTkfrPstYO5OTSZygncZtQiFImwfPk&c_ds_no=text%2Fhtml%2Capplication%2Fxhtml%2Bxml%2Capplication%2Fxml%3Bq%3D0.9%2C%2A%2F%2A%3Bq%3D0.8
Final IP / ASN
United States 142.93.2.145 AS14061 · DIGITALOCEAN-ASN

Final page

Page title
Coinbase - Sign In
Final DOM MIME
text/html; charset=utf-8
Final DOM size
46.9 KB (47978 bytes)

Detections

URLQuery
2
IDS
0
TDS
3

Activity

HTTP requests
15
Observed hosts
2
Script records
1

Estimated HTTP data

Sent
~9.7 KB
Received
~497.7 KB

Page capture

Final browser state

Recorded title

Coinbase - Sign In

46.9 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - Coinbase

VerdictPhishing
Severitymedium

Threat Detection Systems

2

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
rejectkyc-reviewunder.142-93-2-145.cpanel.site 39 alertsN/A2024-09-052026-08-032026-08-038.8 KB497.4 KBUnited States 142.93.2.145
aerolinkafrica.com 2 alertsN/A2026-08-022026-08-032026-08-03890 B242 BUnited States 142.93.2.145
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot