urlquery Phishing - Ghost Phishing Kit
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
http://johnmccallcouk-shared.cloud-storage-l30492.workers.dev
public
Phishing detected
Review evidence →1 detection · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://johnmccallcouk-shared.cloud-storage-l30492.workers.dev
- Submitted IP / ASN
104.21.16.199 AS13335 · Cloudflare, Inc.
- Final URL
- https://johnmccallcouk-shared.cloud-storage-l30492.workers.dev/dd895d11-043c-4c04-815b-30734bfe863b
- Final IP / ASN
- 104.21.16.199 AS13335 · CLOUDFLARENET
Final page
- Page title
- Sign in – Microsoft & OneDrive
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 113.2 KB (115962 bytes)
Detections
Activity
- HTTP requests
- 2
- Observed hosts
- 2
- Script records
- 6
Estimated HTTP data
- Sent
- ~1.1 KB
- Received
- ~20.2 KB
Page capture
Final browser state
johnmccallcouk-shared.cloud-storage-l30492.workers.dev
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| upload.wikimedia.org | 4329 | 2003-03-16 | 2012-05-21 | 2026-10-13 | 646 B | 16.6 KB |  185.15.59.240 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Apache Traffic Server:9.2.15 Web servers Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features. |
| johnmccallcouk-shared.cloud-storage-l30492.workers.dev 1 alerts | N/A | N/A | N/A | N/A | 523 B | 3.6 KB | 104.21.16.199 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |