urlquery Phishing - Ghost Phishing Kit
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
http://portal-verify-ws7p4.b-cdn.net
public
Phishing detected
Review evidence →1 detection · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://portal-verify-ws7p4.b-cdn.net
- Submitted IP / ASN
195.181.166.158 AS60068 · Datacamp Limited
- Final URL
- https://portal-verify-ws7p4.b-cdn.net/?_a=1&_t=2026-10-15T13%3A34%3A54.197Z&_n=94V9RHMR&_r=direct
- Final IP / ASN
- 195.181.166.158 AS60068 · Datacamp Limited
Final page
- Page title
- Q4_Report_Final.docx
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 82.9 KB (84841 bytes)
Detections
Activity
- HTTP requests
- 6
- Observed hosts
- 3
- Script records
- 6
Estimated HTTP data
- Sent
- ~3.6 KB
- Received
- ~118.8 KB
Page capture
Final browser state
portal-verify-ws7p4.b-cdn.net
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| portal-verify-ws7p4.b-cdn.net 2 alerts | N/A | 2016-04-25 | 2026-10-15 | 2026-10-15 | 1.0 KB | 112.3 KB | 195.181.166.158 | Bunny CDN Not recorded |
| ehrnijahkn-b666c1.hi-6e0.workers.dev | N/A | N/A | 2026-10-02 | 2026-10-12 | 1.3 KB | 1.7 KB |  104.21.26.197 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| login.microsoftonline.com | 52 | 2002-07-09 | 2017-02-19 | 2026-10-12 | 1.2 KB | 4.8 KB |  20.190.147.11 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |