urlquery Phishing - GhostFrame Phishing kit
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
https://choiendodonticsencrypt.s3.us-east-2.amazonaws.com/Encrypted+Redirect.html
public
Phishing detected
Review evidence →2 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://choiendodonticsencrypt.s3.us-east-2.amazonaws.com/Encrypted+Redirect.html
- Submitted IP / ASN
3.5.129.106 AS16509 · AMAZON-02
- Final URL
- https://secured-delivery-q5lt.w-umzb1y.workers.dev/ea7126b8-1856-4cb1-9f35-872175b23bc4
- Final IP / ASN
172.67.182.70 AS13335 · CLOUDFLARENET
Final page
- Page title
- Secured Delivery
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 21
- Observed hosts
- 11
- Script records
- 6
Estimated HTTP data
- Sent
- ~11.4 KB
- Received
- ~815.3 KB
Page capture
Final browser state
secured-delivery-q5lt.w-umzb1y.workers.dev
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| secured-delivery-q5lt.w-umzb1y.workers.dev 2 alerts | N/A | N/A | 2026-08-25 | 2026-08-25 | 1.1 KB | 44.9 KB | 172.67.182.70 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-08-23 | 1.0 KB | 928 B | 142.251.156.119 | |
| actions.google.com | 3834690 | 1997-09-15 | 2025-06-28 | 2026-08-22 | 1.6 KB | 76.3 KB | 142.250.178.110 | |
| status.search.google.com | 776353 | 1997-09-15 | 2022-06-27 | 2026-08-22 | 588 B | 29.1 KB | 216.58.201.238 | |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-08-23 | 1.1 KB | 10.5 KB | Not recorded | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| secured-delivery-q5lt-2.w-umzb1y.workers.dev | N/A | N/A | 2026-08-25 | 2026-08-25 | 1013 B | 397.0 KB | 172.67.182.70 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| unbrackish.hfistty.top | N/A | 2026-07-01 | 2026-07-12 | 2026-08-22 | 616 B | 651 B | 172.67.169.12 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. WebSocket Miscellaneous WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers. |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-08-23 | 489 B | 100.6 KB | 104.17.25.14 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-08-23 | 1.8 KB | 144.6 KB | 142.250.178.99 | |
| t2.gstatic.com | N/A | 2008-02-11 | 2013-05-07 | 2026-08-21 | 1.1 KB | 4.2 KB | 216.58.201.196 | |
| choiendodonticsencrypt.s3.us-east-2.amazonaws.com | N/A | 2005-08-18 | 2026-08-25 | 2026-08-25 | 1.1 KB | 6.6 KB | 3.5.129.54 | Amazon S3 CDN Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |