urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://4ywu-njqg-3jbh-ksrih.b-cdn.net/
Submitted IP / ASN
Sweden 195.181.166.158 AS60068 · Datacamp Limited
Final URL
https://4ywu-njqg-3jbh-ksrih.b-cdn.net/
Final IP / ASN
Sweden 195.181.166.158 AS60068 · Datacamp Limited

Final page

Page title
Dropbox - Shared Folder
Final DOM MIME
text/html; charset=utf-8
Final DOM size
9.5 KB (9710 bytes)

Detections

URLQuery
2
IDS
0
TDS
0

Activity

HTTP requests
27
Observed hosts
3
Script records
2

Estimated HTTP data

Sent
~13.5 KB
Received
~37.8 KB

Page capture

Final browser state

Recorded title

Dropbox - Shared Folder

9.5 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - EvilTokens Phishing Kit

VerdictPhishing
Severityhigh

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
4ywu-njqg-3jbh-ksrih.b-cdn.net 25 alertsN/A2016-04-252026-08-212026-08-2112.4 KB26.0 KBSweden 195.181.166.158
logo.debounce.com N/A2004-03-252026-01-252026-08-19557 B11.4 KBCountry unknown 172.67.129.54
fonts.googleapis.com 3132005-01-252012-05-232026-08-16552 B508 BUnited States 142.250.178.106
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot