urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://calagprop.com/tr.html
Submitted IP / ASN
United States 65.74.189.156 AS17018 · QTS-SAC
Final URL
https://clearjames22.com/?qkbznEbe
Final IP / ASN
Country unknown 172.67.185.181 AS13335 · CLOUDFLARENET

Final page

Page title
One more step before you proceed...
Final DOM MIME
text/html; charset=utf-8
Final DOM size
2.3 KB (2355 bytes)

Detections

URLQuery
2
IDS
0
TDS
0

Activity

HTTP requests
16
Observed hosts
4
Script records
66

Estimated HTTP data

Sent
~267.2 KB
Received
~2.47 MB

Page capture

Final browser state

Recorded title

One more step before you proceed...

2.3 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - Gcore Phishing Kit

VerdictPhishing
Severityhigh

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
challenges.cloudflare.com 113932009-02-172021-10-202026-08-2310.8 KB2.46 MBCountry unknown 104.18.95.41
brunhild.challenges.cloudflare.com N/A2009-02-172026-06-242026-08-26628 B0 BNot recorded
clearjames22.com 1 alertsN/AN/AN/AN/A1.6 KB4.1 KBCountry unknown 172.67.185.181
calagprop.com N/AN/AN/AN/A489 B5.1 KBUnited States 65.74.189.156
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot