urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://primemarketingindia.in/fresh/je.html
Submitted IP / ASN
United States 199.79.62.126 AS46606 · Unified Layer
Final URL
https://mysoftinc.com/?JRdTNFld
Final IP / ASN
Country unknown 172.67.147.128 AS13335 · CLOUDFLARENET

Final page

Page title
One more step before you proceed...
Final DOM MIME
text/html; charset=utf-8
Final DOM size
2.3 KB (2352 bytes)

Detections

URLQuery
2
IDS
0
TDS
0

Activity

HTTP requests
12
Observed hosts
4
Script records
42

Estimated HTTP data

Sent
~176.8 KB
Received
~1.25 MB

Page capture

Final browser state

Recorded title

One more step before you proceed...

2.3 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

2

urlquery Malicious - Anti-Analysis Loader

VerdictMalicious
Severitymedium

urlquery Phishing - Gcore Phishing Kit

VerdictPhishing
Severityhigh

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
brunhild.challenges.cloudflare.com N/A2009-02-172026-06-242026-09-16628 B0 BNot recorded
mysoftinc.com 3 alertsN/AN/AN/AN/A1.6 KB4.1 KBCountry unknown 172.67.147.128
primemarketingindia.in 1 alertsN/AN/AN/AN/A504 B5.1 KBUnited States 199.79.62.126
challenges.cloudflare.com 113932009-02-172021-10-202026-09-136.2 KB1.24 MBCountry unknown 104.18.95.41
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot