urlquery.net

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document1.89 MB1983 ms4 alerts
GET302document0 B734 ms4 alerts

Transaction #08

Request / response

URL

Navigation request GET HTTPS
https://p7v3w.airodyneqwerty.top/2743248b60dc?_r=kOyFGAc

IP / ASN

Singapore 18.142.249.243

AS16509 · AMAZON-02

Requested by
Not recorded

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
urlquery Phishing - Evilginx MitM ProxyhighPhishing
OpenDNS Phishing BlockmediumPhishing
DNS4EU SinkholedmediumMalicious
Quad9 DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /2743248b60dc?_r=kOyFGAc HTTP/1.1
Host: p7v3w.airodyneqwerty.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://p7v3w.airodyneqwerty.top/2743248b60dc
Cookie: 8dd7-2d51=3732189100feab46ef0d0884c7e2972e278bffa0bc9b485336e2847e4dbd5e0a
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 302 Found
Cache-Control: no-cache, no-store
Connection: close
Content-Type: text/html
Location: https://bphkxnap.airodyneqwerty.top/login
Transfer-Encoding: chunked

GET302document0 B791 ms3 alerts
GET200document60.9 KB1237 ms5 alerts
GET200stylesheet111.5 KB1183 ms3 alerts
GET200script575.4 KB1580 ms3 alerts
GET200script60.8 KB1083 ms3 alerts
GET200script6.9 KB736 ms5 alerts
GET200script0 B570 ms5 alerts
GET200script185.6 KB1392 ms3 alerts
GET200script116.8 KB1197 ms3 alerts
GET200img16.8 KB811 ms3 alerts
GET200script11.7 KB852 ms3 alerts
GET200script9.2 KB820 ms3 alerts
GET200script399.0 KB1654 ms3 alerts
POST200xhr293 B767 ms5 alerts
GET200script15.4 KB804 ms3 alerts
GET200img2.6 KB802 ms3 alerts
GET200img3.5 KB879 ms3 alerts
GET200img45.5 KB1006 ms3 alerts
GET200img3.6 KB812 ms3 alerts
GET200subdocument3.4 KB1047 ms3 alerts
GET200img1.6 KB815 ms3 alerts
GET200img1.4 KB813 ms3 alerts
GET200img932 B888 ms3 alerts
POST200xhr28.1 KB1157 ms5 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot