urlquery.net
WEBSITE ANALYSIS REPORT

http://mangaomega.com/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document128.1 KB180 ms—
GET200stylesheet57.6 KB46 ms—
GET200stylesheet1.0 KB32 ms—
GET200stylesheet42.1 KB45 ms—
GET200stylesheet113.6 KB73 ms—
GET200script166.8 KB97 ms1 alerts
GET200script6 B280 ms4 alerts
GET200script5 B270 ms1 alerts

Transaction #09

Request / response

URL

GET HTTPS
https://dr.sephiraasperly.com/rQXo9atWEBydZjqZ/128179

IP / ASN

The Netherlands 172.255.106.53

AS7979 · SERVERS-COM

Requested by
https://mangaomega.com/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Hagezi Threat Feed SinkholedmediumMalicious

HTTP headers

Request headers

GET /rQXo9atWEBydZjqZ/128179 HTTP/1.1
Host: dr.sephiraasperly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mangaomega.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Sun, 30 Nov 2025 23:18:19 GMT
content-type: application/javascript; charset=utf-8
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
access-control-allow-credentials: true
access-control-allow-origin: https://mangaomega.com
access-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires
access-control-max-age: 600
access-control-allow-methods: GET, POST, OPTIONS
set-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Mon, 01-Dec-2025 23:18:19 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwViD0LglAYRu99ESGS4gGHRpdW0VLBJSTndGhoaBILEcRXrtrH1F9pb4r%2BVWtTWzacA%2BcIIcicgsoGRujaoWN7C9v1PcgClKSgvIaesDpnV0gFcpYgVWOcthVbMfd1N%2Fwc2r8hS0zWVXmxtlz1Xcl1CxoYxawaVll3hGx0Cer47%2FZgCsiTPgNVmRFtPu9Xcf8OwUY0vz33u9UD1LTQHD8IfrcSKq4%3D; expires=Mon, 01-Dec-2025 23:18:19 GMT; Max-Age=86400; path=/; secure; SameSite=None
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

GET200imageset9.5 KB58 ms—
GET200img23.0 KB97 ms—
GET200img32.8 KB74 ms—
GET200img38.2 KB163 ms—
GET200img20.2 KB92 ms—
GET200stylesheet2.6 KB46 ms—
GET200script23.1 KB50 ms—
GET200script1.5 KB56 ms—
GET200script85.5 KB68 ms—
GET200script13.3 KB69 ms—
GET200script13.0 KB71 ms—
GET200fetch390 B222 ms1 alerts
GET200script18.8 KB28 ms—
POST204beacon0 B228 ms5 alerts
GET200img14.9 KB29 ms—
GET200img4.8 KB28 ms—
GET200img4.8 KB28 ms—
GET200other128.2 KB36 ms—
GET200script44.8 KB12 ms1 alerts
GET200script40.7 KB12 ms1 alerts
GET200script56.7 KB12 ms1 alerts
GET200fetch978 B189 ms1 alerts
GET200fetch1.5 KB167 ms1 alerts
GET204img0 B141 ms1 alerts
GET301subdocument190.0 KB327 ms—
GET200subdocument190.0 KB277 ms—
GET200stylesheet5.1 KB239 ms—
GET200script16.9 KB22 ms—
GET200script240.3 KB332 ms—
GET200stylesheet192.7 KB394 ms—
GET200script332.1 KB334 ms—
GET200img14.0 KB157 ms—
GET200img1.5 KB154 ms—
GET200img28.4 KB148 ms—
GET200img37.9 KB141 ms—
GET200script32.1 KB90 ms—
GET200script25.3 KB89 ms—
GET200script716.3 KB811 ms—
GET200xhr10.3 KB18 ms—
GET200img27.5 KB3 ms—
GET200img582.2 KB34 ms—
GET200img82.4 KB9 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot