urlquery.net
WEBSITE ANALYSIS REPORT

http://bombabyfashion.shop/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document287.4 KB779 ms1 alerts
GET200stylesheet120.4 KB172 ms1 alerts
GET200script3.6 KB170 ms1 alerts
GET200script164.5 KB171 ms1 alerts
GET200script171.7 KB170 ms1 alerts
GET200script534 B168 ms1 alerts
GET200script28.2 KB331 ms1 alerts
GET200script45.6 KB327 ms1 alerts
GET200script8.3 KB326 ms1 alerts
GET200script13.2 KB324 ms1 alerts
GET200script720.3 KB323 ms1 alerts
GET200script13.5 KB492 ms1 alerts
GET200script12.9 KB491 ms1 alerts
GET200script14.4 KB490 ms1 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://bombabyfashion.shop/_s/_next/static/chunks/253-da62e547742b6bee.js

IP / ASN

United States 195.96.131.106

AS199242 · Malakmadze Web LLC

Requested by
https://bombabyfashion.shop/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /_s/_next/static/chunks/253-da62e547742b6bee.js HTTP/1.1
Host: bombabyfashion.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bombabyfashion.shop/
Sec-GPC: 1
Connection: keep-alive
Cookie: _p47_cid=bd4c1d74-9623-4c23-a86f-5432d823684c; _p47_rg=us; _p47_rid=reg_01KMY6D9PN1W8AWQ6W5PBW0B9E; _site_domain=bombabyfashion.shop
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000
cache-control: public, max-age=31536000, immutable, public, max-age=31536000, immutable
content-encoding: gzip
content-type: application/javascript; charset=UTF-8
date: Thu, 22 Oct 2026 01:36:29 GMT
etag: W/"39af-1a07ba0987f"
last-modified: Mon, 07 Sep 2026 11:28:37 GMT
referrer-policy: strict-origin-when-cross-origin
vary: Accept-Encoding
via: 1.1 Caddy
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

GET200script24.2 KB489 ms1 alerts
GET200script17.1 KB488 ms1 alerts
GET200script10.9 KB489 ms1 alerts
GET200script6.7 KB489 ms1 alerts
GET200script19.0 KB488 ms1 alerts
GET200script9.7 KB489 ms1 alerts
GET200script15.0 KB485 ms1 alerts
GET200script3.2 KB483 ms1 alerts
GET200script214 B484 ms1 alerts
GET200script6.9 KB483 ms1 alerts
GET200script28.3 KB483 ms1 alerts
GET200script66.5 KB253 ms1 alerts
GET200stylesheet12.3 KB117 ms—
GET200img72.3 KB317 ms1 alerts
GET200img411.7 KB774 ms1 alerts
GET200font47.4 KB155 ms—
GET200font47.4 KB183 ms—
GET200font47.4 KB345 ms—
GET200font47.4 KB341 ms—
GET200font47.4 KB137 ms—
GET200lazy-img120.2 KB295 ms1 alerts
GET200lazy-img141.2 KB311 ms1 alerts
GET200lazy-img463.0 KB466 ms1 alerts
GET200lazy-img150.1 KB496 ms1 alerts
GET200lazy-img233.6 KB544 ms1 alerts
GET200lazy-img160.5 KB514 ms1 alerts
GET200lazy-img115.4 KB630 ms1 alerts
GET200script528 B346 ms1 alerts
GET200img150.1 KB396 ms1 alerts
GET200img155.0 KB448 ms1 alerts
GET200img157.4 KB357 ms1 alerts
GET200fetch219 B169 ms1 alerts
GET200fetch228 B179 ms1 alerts
GET200fetch237 B403 ms1 alerts
GET200fetch227 B397 ms1 alerts
GET200fetch244 B418 ms1 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot