urlquery Phishing - CloakGuard Phishing Kit
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
https://lionluxurysuitesng.com/wp-content/hanwha
public
Phishing detected
Review evidence →3 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://lionluxurysuitesng.com/wp-content/hanwha
- Submitted IP / ASN
162.241.123.66 AS46606 · Unified Layer
- Final URL
- https://login.microsoftonline.com/common/oauth2/deviceauth
- Final IP / ASN
- Not recorded
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 31.1 KB (31802 bytes)
Detections
Activity
- HTTP requests
- 19
- Observed hosts
- 5
- Script records
- 5
Estimated HTTP data
- Sent
- ~10.7 KB
- Received
- ~573.2 KB
Page capture
Final browser state
login.microsoftonline.com
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
3urlquery Phishing - Debull Phishing Kit
VerdictPhishing
Severityhigh
urlquery Suspicious - Anti-debugging code
VerdictSuspicious
Severitylow
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-10-18 | 1.7 KB | 354.7 KB |  104.17.25.14 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| api-proxy-170-4e68ed8d.f9986e958c5b355ad790e909.workers.dev | N/A | N/A | 2026-07-09 | 2026-07-09 | 4.1 KB | 5.3 KB | 104.21.39.32 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| lionluxurysuitesng.com 9 alerts | N/A | 2021-10-28 | 2026-10-20 | 2026-10-20 | 2.1 KB | 52.5 KB | 162.241.123.66 | Nginx:1.29.8 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. PHP Programming languages PHP is a general-purpose scripting language used for web development. WordPress CMS, Blogs WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system. MySQL Databases MySQL is an open-source relational database management system. Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-10-18 | 1.0 KB | 16.1 KB | 142.251.9.95 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-10-18 | 1.7 KB | 144.6 KB | 142.250.178.67 |