urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://eevfv9.com/
Submitted IP / ASN
Thailand 130.94.25.203 AS154177 · LIGHT NODE LIMITED
Final URL
https://eevfv9.com/
Final IP / ASN
United States 130.94.25.203 AS2914 · NTT-LTD-2914

Final page

Page title
FedEx
Final DOM MIME
text/html; charset=utf-8
Final DOM size
19.6 KB (20072 bytes)

Detections

URLQuery
2
IDS
0
TDS
10

Activity

HTTP requests
31
Observed hosts
5
Script records
4

Estimated HTTP data

Sent
~16.0 KB
Received
~1.61 MB

Page capture

Final browser state

Recorded title

FedEx

19.6 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - FedEx

VerdictPhishing
Severitymedium

Threat Detection Systems

5

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium

OpenDNS Phishing Block

VerdictPhishing
Severitymedium

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

CIRA Canadian Shield DNS Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
lf-cdn.trae.com.cn 61302172024-12-192025-04-072026-10-182.2 KB0 BNot recorded
127.0.0.1 N/AN/AN/AN/A499 B0 BNot recorded
trae-api-cn.mchost.guru 28593072024-03-282026-05-072026-10-182.8 KB3.8 KBHong Kong 101.47.85.10
api.eevfv9.com 10 alertsN/A2026-01-032026-10-192026-10-191003 B3.9 KBUnited States 130.94.25.203
eevfv9.com 120 alertsN/A2026-01-032026-10-192026-10-199.6 KB1.60 MBUnited States 130.94.25.203
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot