urlquery.net

Report summary

Submitted and final observations · captured HTTP activity

Submitted URL
http://r.echelonssupply.com/
Submitted IP / ASN
Country unknown 104.21.48.217 AS13335 · Cloudflare, Inc.
Final URL
https://good2loads.com/?fWEnAgvF
Final IP / ASN
Country unknown 172.67.129.49 AS13335 · CLOUDFLARENET

Final page

Page title
One more step before you proceed...
Final DOM MIME
text/html; charset=utf-8
Final DOM size
2.3 KB (2353 bytes)

Detections

URLQuery
1
IDS
0
TDS
2

Activity

HTTP requests
16
Observed hosts
4
Script records
69

Estimated HTTP data

Sent
~263.8 KB
Received
~2.32 MB

Page capture

Final browser state

Recorded title

One more step before you proceed...

2.3 KB final DOM

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

1

urlquery Phishing - Gcore Phishing Kit

VerdictPhishing
Severityhigh

Threat Detection Systems

2

OpenDNS Phishing Block

VerdictPhishing
Severitymedium

DNS4EU Sinkholed

VerdictMalicious
Severitymedium

Host infrastructure

Observed hosts are context, not independent maliciousness verdicts

HostRankRegisteredFirst seenLast seenSentReceivedIPFingerprints
brunhild.challenges.cloudflare.com N/A2009-02-172026-06-242026-09-30628 B0 BNot recorded
r.echelonssupply.com 2 alertsN/A2025-12-012026-09-302026-09-30489 B693 BCountry unknown 104.21.48.217
challenges.cloudflare.com 113932009-02-172021-10-202026-09-2710.8 KB2.31 MBCountry unknown 104.18.94.41
good2loads.com 3 alertsN/A2025-12-012026-09-302026-09-301.5 KB4.1 KBCountry unknown 172.67.129.49
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot