urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://linkscan.io/scan/ux/aHR0cHM6Ly91cmwtc2hpZWxkLnNlY3VyZW5jZS5jb20vP3A9MS4xJnI9YWNjb3VudDclNDBsbmNhcmVrbDIuY29tJnNpZD0xNzg1MzQ0NDAxNjY2LTA5MC0wMDAwNDA5NyZzPTRidHp0ZmJvJm49YnQ2eG5kbGJpJm1zPTMuNiUyQzMuNiUyQzAuMCUyQzAuMCZ1PWh0dHBzJTNBJTJGJTJGYWxxYWJhc2F1ZGl0aW5nLmNvbSUyRnNvbGQlMkZpbmRleC5odG1sJTIzJTNGZ2clM0Q=/A84ECE09DCB2D9306508CF38FBBBDB0E798FC923818ED23AB1E0057A9DFC1FDC?c=1&i=1&docs=1
public
Phishing detected
Review evidence →3 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://linkscan.io/scan/ux/aHR0cHM6Ly91cmwtc2hpZWxkLnNlY3VyZW5jZS5jb20vP3A9MS4xJnI9YWNjb3VudDclNDBsbmNhcmVrbDIuY29tJnNpZD0xNzg1MzQ0NDAxNjY2LTA5MC0wMDAwNDA5NyZzPTRidHp0ZmJvJm49YnQ2eG5kbGJpJm1zPTMuNiUyQzMuNiUyQzAuMCUyQzAuMCZ1PWh0dHBzJTNBJTJGJTJGYWxxYWJhc2F1ZGl0aW5nLmNvbSUyRnNvbGQlMkZpbmRleC5odG1sJTIzJTNGZ2clM0Q=/A84ECE09DCB2D9306508CF38FBBBDB0E798FC923818ED23AB1E0057A9DFC1FDC?c=1&i=1&docs=1
- Submitted IP / ASN
143.204.238.47 AS16509 · Amazon.com, Inc.
- Final URL
- https://rlpdafkzxq.povilanto.com/book2_computer5_city4_wall3_sugar8_cliff5_rabbit9_tiger10_pepper9_root7_morning6_space4_wall7_rabbit5_apple2_lightning8_door7_city9#
- Final IP / ASN
172.67.135.204 AS13335 · CLOUDFLARENET
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 128.8 KB (131892 bytes)
Detections
Activity
- HTTP requests
- 33
- Observed hosts
- 11
- Script records
- 10
Estimated HTTP data
- Sent
- ~24.3 KB
- Received
- ~1.60 MB
Page capture
Final browser state
rlpdafkzxq.povilanto.com
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Phishing - Dark Knight Tools Phishing Kit
VerdictPhishing
Severityhigh
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| linkscan.io | 884432 | 2014-04-30 | 2017-02-08 | 2026-10-02 | 3.2 KB | 270.8 KB | 143.204.238.16 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. Amazon S3 CDN Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. Amazon CloudFront CDN Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-10-04 | 1.1 KB | 95.9 KB | 142.250.178.35 | |
| cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-10-04 | 500 B | 59.9 KB | 151.101.193.229 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-10-04 | 1.5 KB | 43.8 KB | 142.250.178.106 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| alqabasauditing.com | N/A | 2021-03-31 | 2026-10-07 | 2026-10-07 | 540 B | 651 B | 104.21.89.144 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| rlpdafkzxq.povilanto.com 32 alerts | N/A | 2025-12-05 | 2026-10-07 | 2026-10-07 | 13.0 KB | 1.02 MB | 172.67.135.204 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. PHP:8.3.31 Programming languages PHP is a general-purpose scripting language used for web development. jQuery:4.0.0 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Bootstrap:5.3.8 UI frameworks Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. Socket.io JavaScript frameworks Not recorded cdnjs CDN cdnjs is a free distributed JS library delivery service. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. jsDelivr CDN JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration. jQuery CDN CDN jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder. PHP Programming languages PHP is a general-purpose scripting language used for web development. |
| fix-gas.com | N/A | 2026-06-27 | 2026-09-30 | 2026-09-30 | 621 B | 597 B | 104.21.90.141 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. WebSocket Miscellaneous WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers. |
| api-cn.linkscan.io | N/A | 2014-04-30 | 2025-04-03 | 2026-10-02 | 1.7 KB | 0 B | 52.84.50.10 | |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-10-04 | 502 B | 46.7 KB | 104.17.24.14 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| url-shield.securence.com | N/A | 2004-09-09 | 2022-06-02 | 2026-09-22 | 709 B | 258 B | 216.17.3.180 | Ubuntu Operating systems Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT. Apache HTTP Server:2.4.41 Web servers Apache is a free and open-source cross-platform web server software. |
| code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-10-05 | 474 B | 77.5 KB | 151.101.65.155 | Varnish Caching Varnish is a reverse caching proxy. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |