urlquery.net
WEBSITE ANALYSIS REPORT

https://1619a6a6.dffeefaaw.pages.dev/dlivery.html

public
Submit tags
Request review
Phishing detected

3 detections · review the detection signals

Review evidence →

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://1619a6a6.dffeefaaw.pages.dev/dlivery.html
Submitted IP / ASN
Country unknown 172.66.47.112 AS13335 · Cloudflare, Inc.
Final URL
https://1619a6a6.dffeefaaw.pages.dev/dlivery
Final IP / ASN
Country unknown 172.66.47.112 AS13335 · CLOUDFLARENET

Final page

Page title
WeTransfer
Final DOM MIME
text/html; charset=utf-8
Final DOM size
17.0 KB (17438 bytes)

Detections

URLQuery
2
IDS
0
TDS
1

Activity

HTTP requests
9
Observed hosts
3
Script records
3

Estimated HTTP data

Sent
~4.6 KB
Received
~2.55 MB

Page capture

Final browser state

Recorded title

WeTransfer

17.0 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - WeTransfer

VerdictPhishing
Severitymedium

Threat Detection Systems

1

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
1619a6a6.dffeefaaw.pages.dev 4 alertsN/A2020-09-022026-10-092026-10-091013 B18.8 KBCountry unknown 172.66.47.112
bbwtk.pages.dev N/A2020-09-022025-11-012026-10-093.2 KB2.53 MBCountry unknown 172.66.47.203
a41befc6.sssssssssseew.pages.dev N/A2020-09-022026-10-092026-10-09483 B6.2 KBCountry unknown 172.66.47.82
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot