urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://r.echelonssupply.com/
Submitted IP / ASN
Country unknown 104.21.48.217 AS13335 · Cloudflare, Inc.
Final URL
https://good2loads.com/?fWEnAgvF
Final IP / ASN
Country unknown 172.67.129.49 AS13335 · CLOUDFLARENET

Final page

Page title
One more step before you proceed...
Final DOM MIME
text/html; charset=utf-8
Final DOM size
2.3 KB (2353 bytes)

Detections

URLQuery
1
IDS
0
TDS
2

Activity

HTTP requests
15
Observed hosts
3
Script records
70

Estimated HTTP data

Sent
~267.0 KB
Received
~2.33 MB

Page capture

Final browser state

Recorded title

One more step before you proceed...

2.3 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - Gcore Phishing Kit

VerdictPhishing
Severityhigh

Threat Detection Systems

2

OpenDNS Phishing Block

VerdictPhishing
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
challenges.cloudflare.com 113932009-02-172021-10-202026-09-2710.8 KB2.33 MBCountry unknown 104.18.94.41
r.echelonssupply.com 2 alertsN/A2025-12-012026-09-302026-09-30489 B691 BCountry unknown 172.67.138.15
good2loads.com 3 alertsN/A2025-12-012026-09-302026-09-301.5 KB4.1 KBCountry unknown 172.67.129.49
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot