urlquery Phishing - Microsoft
VerdictPhishing
Severitymedium
WEBSITE ANALYSIS REPORT
https://inhwawatelier-my.sharepoint.com/:f:/g/personal/michael_l_watelier_com/IgBRM3_4yqFXQ5ZRi2Xav-1nAePwaa1nq6oY-k6rg2jFCCA?e=K1E7na
public
Phishing detected
Review evidence →3 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://inhwawatelier-my.sharepoint.com/:f:/g/personal/michael_l_watelier_com/IgBRM3_4yqFXQ5ZRi2Xav-1nAePwaa1nq6oY-k6rg2jFCCA?e=K1E7na
- Submitted IP / ASN
13.107.136.10 AS8075 · Microsoft Corporation
- Final URL
- https://efzbiwzgno.hillstreetgrocers.com/lion9_seed10_dog8_mouse7_milk1_cow4_turtle7_turtle8_salt3_thunder3_door7_desert2_shadow2_valley7_pepper5_lightning10_jungle4_cow1_ceiling2_train10
- Final IP / ASN
172.67.200.64 AS13335 · CLOUDFLARENET
Final page
- Page title
- Sign in to your account
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 128.8 KB (131912 bytes)
Detections
Activity
- HTTP requests
- 10
- Observed hosts
- 6
- Script records
- 7
Estimated HTTP data
- Sent
- ~7.9 KB
- Received
- ~916.0 KB
Page capture
Final browser state
efzbiwzgno.hillstreetgrocers.com
Screenshot unavailableNo screenshot pixels areavailable for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
2urlquery Phishing - Dark Knight Tools Phishing Kit
VerdictPhishing
Severityhigh
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| efzbiwzgno.hillstreetgrocers.com 8 alerts | N/A | 2026-08-25 | 2026-10-08 | 2026-10-08 | 3.3 KB | 728.1 KB | 172.67.200.64 | PHP:8.3.31 Programming languages PHP is a general-purpose scripting language used for web development. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. jQuery CDN CDN jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder. cdnjs CDN cdnjs is a free distributed JS library delivery service. jQuery:4.0.0 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. jsDelivr CDN JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration. Socket.io JavaScript frameworks Not recorded Bootstrap:5.3.8 UI frameworks Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. |
| inhwawatelier-my.sharepoint.com | N/A | 1998-08-10 | 2026-10-08 | 2026-10-08 | 2.3 KB | 3.7 KB | 13.107.136.10 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Microsoft SharePoint:16.0.0.27723 CMS SharePoint is a cloud-based collaborative platform to manage and share content. Microsoft ASP.NET:4.0.30319 Web frameworks ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages. |
| cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-10-04 | 508 B | 59.9 KB | 151.101.1.229 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-10-05 | 482 B | 77.5 KB | 151.101.1.155 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Varnish Caching Varnish is a reverse caching proxy. |
| res.public.onecdn.static.microsoft | 930 | 2023-05-05 | 2024-03-21 | 2026-10-05 | 546 B | 0 B | 104.18.18.203 | |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-10-04 | 510 B | 46.7 KB | 104.17.24.14 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |