urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://1619a6a6.dffeefaaw.pages.dev/dlivery
Submitted IP / ASN
Country unknown 172.66.47.112 AS13335 · Cloudflare, Inc.
Final URL
https://1619a6a6.dffeefaaw.pages.dev/dlivery
Final IP / ASN
Country unknown 172.66.44.144 AS13335 · CLOUDFLARENET

Final page

Page title
WeTransfer
Final DOM MIME
text/html; charset=utf-8
Final DOM size
17.0 KB (17438 bytes)

Detections

URLQuery
2
IDS
0
TDS
1

Activity

HTTP requests
8
Observed hosts
3
Script records
3

Estimated HTTP data

Sent
~4.1 KB
Received
~2.55 MB

Page capture

Final browser state

Recorded title

WeTransfer

17.0 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - WeTransfer

VerdictPhishing
Severitymedium

Threat Detection Systems

1

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
a41befc6.sssssssssseew.pages.dev N/A2020-09-022026-10-092026-10-09483 B6.2 KBCountry unknown 172.66.44.174
bbwtk.pages.dev N/A2020-09-022025-11-012026-08-023.2 KB2.53 MBCountry unknown 172.66.47.203
1619a6a6.dffeefaaw.pages.dev 2 alertsN/A2020-09-022026-10-092026-10-09504 B18.2 KBCountry unknown 172.66.44.144
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot