urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://p7v3w.airodyneqwerty.top/2743248b60dc
Submitted IP / ASN
Singapore 18.142.249.243 AS16509 · AMAZON-02
Final URL
https://office.airodyneqwerty.top/common/oauth2/v2.0/authorize?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&redirect_uri=https%3A%2F%2Fwww.office.com%2Flandingv2&response_type=code%20id_token&scope=openid%20profile%20https%3A%2F%2Fwww.office.com%2Fv2%2FOfficeHome.All&response_mode=form_post&nonce=639241302888833983.ZGViMjU2OGUtZTA4My00NjQ3LTkxZDYtOGZkNTdiZjU3YTJhYzhiMWRiZDYtMDY1NS00Mzc1LWFjZTItYTBmYzUxNGExM2Vh&ui_locales=en-US&mkt=en-US&client-request-id=1144c515-388d-42c6-bf66-6616bf168a7c&siwa=1&siwg=1&state=FPLnGFYbYpEG7Z0Y4AAb3v7pdENV0rYQxu3Zyk3tDCjyrYyb7wh0y7NxIUQTnEMQnh8U4HBEB3hVJPdL48ApuWyp55ucLYPZvLokAc9EPNb4vcMoXnHLKto4K1jg7qkgzeEwtebY8vx3z9CPNZ7gGZVTtuTG2auEGdfyw_Jiue0juAzhfg6bQCstlfsDIBdsaD8pNJT5Cswa0zQ4BNehymbhwh92aE9RG-zNKAFDoIDRjFGlBYskgh97oRW2dzqxVL2fJ0j-_yKT6AB6PjvxuL4I2lkglyrLzwv2SVjNor9D-d1mRv0coEwxJMLZP8KgmdLUMQI9Qij3LLZySIqE26hTbqdcBywDjYtH7HWzRFCQa-5v5kicgmiMEmsS7Mau4qUBY7v0v2Kha4Q3vLwUKBSw7Rk4uS-rLKB2s4T6e5MaGTPAaFdqLXkznElRBKbZ&x-client-SKU=ID_NET8_0&x-client-ver=8.16.0.0
Final IP / ASN
Singapore 18.142.249.243 AS16509 · AMAZON-02

Final page

Page title
Sign in to your account
Final DOM MIME
text/html; charset=utf-8
Final DOM size
102.6 KB (105104 bytes)

Detections

URLQuery
4
IDS
0
TDS
11

Activity

HTTP requests
26
Observed hosts
5
Script records
192

Estimated HTTP data

Sent
~26.6 KB
Received
~3.53 MB

Page capture

Final browser state

Recorded title

Sign in to your account

102.6 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

3

urlquery Phishing - Microsoft

VerdictPhishing
Severitymedium

urlquery Phishing - Evilginx MitM Proxy

VerdictPhishing
Severityhigh

urlquery Phishing - Microsoft Outlook

VerdictPhishing
Severitymedium

Threat Detection Systems

3

OpenDNS Phishing Block

VerdictPhishing
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Quad9 DNS Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
office.airodyneqwerty.top 25 alertsN/AN/A2026-09-032026-09-0314.0 KB101.0 KBSingapore 18.142.249.243
ebqprupn.airodyneqwerty.top 3 alertsN/A2026-08-172026-09-032026-09-03635 B4.1 KBSingapore 18.142.249.243
bphkxnap.airodyneqwerty.top 3 alertsN/A2026-08-172026-09-042026-09-04634 B2.9 KBSingapore 18.142.249.243
cdn-1.airodyneqwerty.top 51 alertsN/A2026-08-172026-09-032026-09-0310.3 KB1.54 MBSingapore 18.142.249.243
p7v3w.airodyneqwerty.top 8 alertsN/A2026-08-172026-09-042026-09-041.1 KB1.89 MBSingapore 18.142.249.243
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot