urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://primemarketingindia.in/fresh/je.html
Submitted IP / ASN
United States 199.79.62.126 AS46606 · Unified Layer
Final URL
https://mysoftinc.com/?JRdTNFld
Final IP / ASN
Country unknown 172.67.147.128 AS13335 · CLOUDFLARENET

Final page

Page title
One more step before you proceed...
Final DOM MIME
text/html; charset=utf-8
Final DOM size
2.3 KB (2352 bytes)

Detections

URLQuery
2
IDS
0
TDS
0

Activity

HTTP requests
17
Observed hosts
4
Script records
48

Estimated HTTP data

Sent
~184.5 KB
Received
~2.28 MB

Page capture

Final browser state

Recorded title

One more step before you proceed...

2.3 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Malicious - Anti-Analysis Loader

VerdictMalicious
Severitymedium

urlquery Phishing - Gcore Phishing Kit

VerdictPhishing
Severityhigh

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
primemarketingindia.in 1 alertsN/AN/A2026-09-182026-09-18504 B5.1 KBUnited States 199.79.62.126
challenges.cloudflare.com 113932009-02-172021-10-202026-09-1311.2 KB2.27 MBCountry unknown 104.18.95.41
mysoftinc.com 3 alertsN/A2026-09-142026-09-182026-09-181.6 KB4.1 KBCountry unknown 172.67.147.128
brunhild.challenges.cloudflare.com N/A2009-02-172026-06-242026-09-161.2 KB0 BNot recorded
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot