urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
https://psyrusec.com/wildlan
Submitted IP / ASN
United States 50.31.174.181 AS23352 · DEFT.COM
Final URL
https://wildlands.acltci.com/
Final IP / ASN
United States 216.24.57.16 AS397273 · RENDER

Final page

Page title
Sign in to your account
Final DOM MIME
text/html; charset=utf-8
Final DOM size
80.8 KB (82703 bytes)

Detections

URLQuery
2
IDS
0
TDS
3

Activity

HTTP requests
6
Observed hosts
4
Script records
165

Estimated HTTP data

Sent
~3.4 KB
Received
~5.3 KB

Page capture

Final browser state

Recorded title

Sign in to your account

80.8 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - Microsoft

VerdictPhishing
Severitymedium

Threat Detection Systems

3

Cloudflare DNS Sinkholed

VerdictMalicious
Severitymedium

CIRA Canadian Shield DNS Sinkholed

VerdictMalicious
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
login.microsoftonline.com 522002-07-092017-02-192026-09-21552 B0 BNot recorded
portal.microsoftonline.com 2228622002-07-092014-01-232026-09-04590 B1.8 KBUnited States 150.171.73.13
psyrusec.com N/AN/AN/AN/A488 B237 BUnited States 50.31.174.181
wildlands.acltci.com 12 alertsN/A2010-09-282026-09-242026-09-241.8 KB3.2 KBUnited States 216.24.57.16
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot