urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://www.gwenet.org/office/
Submitted IP / ASN
Canada 66.175.58.9 AS30447 · INFB2-AS
Final URL
http://www.gwenet.org/office/
Final IP / ASN
Canada 66.175.58.9 AS30447 · INFB2-AS

Final page

Page title
Sign in to your account
Final DOM MIME
text/html; charset=utf-8
Final DOM size
1.1 KB (1104 bytes)

Detections

URLQuery
2
IDS
3
TDS
5

Activity

HTTP requests
18
Observed hosts
4
Script records
10

Estimated HTTP data

Sent
~8.0 KB
Received
~591.4 KB

Page capture

Final browser state

Recorded title

Sign in to your account

1.1 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - Microsoft

VerdictPhishing
Severitymedium

Threat Detection Systems

5

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium

OpenDNS Phishing Block

VerdictPhishing
Severitymedium

DigiCert UltraDNS Sinkholed

VerdictMalicious
Severitymedium

Hagezi Threat Feed Sinkholed

VerdictMalicious
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

IDS

2

Suricata IDS ET INFO TLS Handshake Failure

VerdictVerdict not recorded
Severitymedium

Suricata IDS ET PHISHING Office 365 Phishing Landing 2018-01-18

VerdictVerdict not recorded
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
www.gwenet.org 56 alertsN/A2006-11-282017-01-202026-05-113.4 KB382.3 KBCanada 66.175.58.9
secure.aadcdn.microsoftonline-p.com 877322010-07-132012-09-282026-05-052.6 KB205.6 KBUnited States 13.107.246.53
portal.microsoftonline.com 2228622002-07-092014-01-232026-05-051.1 KB3.5 KBUnited States 150.171.74.13
count.carrierzone.com 8800382004-07-212012-06-292026-05-04866 B0 BCountry unknown 0.0.0.0
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot