urlquery Phishing - Gcore Phishing Kit
VerdictPhishing
Severityhigh
WEBSITE ANALYSIS REPORT
https://web.nevadabuilders.org/external/wcpages/referral.aspx?ProfileID=91891&ReferralType=SNOT&URL=http:%5Cr.echelonssupply.com/
public
Phishing detected
Review evidence →1 detection · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://web.nevadabuilders.org/external/wcpages/referral.aspx?ProfileID=91891&ReferralType=SNOT&URL=http:%5Cr.echelonssupply.com/
- Submitted IP / ASN
104.18.246.141 AS13335 · Cloudflare, Inc.
- Final URL
- https://good2loads.com/?fWEnAgvF
- Final IP / ASN
- 104.21.1.114 AS13335 · CLOUDFLARENET
Final page
- Page title
- One more step before you proceed...
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 2.3 KB (2353 bytes)
Detections
Activity
- HTTP requests
- 18
- Observed hosts
- 5
- Script records
- 75
Estimated HTTP data
- Sent
- ~265.4 KB
- Received
- ~2.33 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-09-27 | 10.8 KB | 2.33 MB | 104.18.94.41 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| brunhild.challenges.cloudflare.com | N/A | 2009-02-17 | 2026-06-24 | 2026-09-30 | 1.2 KB | 0 B | Not recorded | |
| good2loads.com 3 alerts | N/A | N/A | N/A | N/A | 1.5 KB | 4.1 KB | 104.21.1.114 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| web.nevadabuilders.org | N/A | 2015-04-06 | 2026-09-21 | 2026-09-30 | 589 B | 463 B | 104.18.247.141 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Microsoft ASP.NET:4.0.30319 Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| r.echelonssupply.com | N/A | 2025-12-01 | 2026-09-30 | 2026-09-30 | 489 B | 691 B | 104.21.48.217 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |