urlquery Scam - Fake AntiVirus / Security software
Verdictscam
Severitymedium
WEBSITE ANALYSIS REPORT
https://nhentai.net/
public
Suspicious activity
Review evidence →2 detections · review the detection signals
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://nhentai.net/
- Submitted IP / ASN
172.67.74.203 AS13335 · CLOUDFLARENET
- Final URL
- https://r.salegains.com/?cid=1166&mid=86872&url=https://www.vybuss.no/
- Final IP / ASN
- 172.67.206.191 AS13335 · CLOUDFLARENET
Final page
- Page title
- System Error
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 4.9 KB (5009 bytes)
Detections
Activity
- HTTP requests
- 161
- Observed hosts
- 15
- Script records
- 75
Estimated HTTP data
- Sent
- ~138.5 KB
- Received
- ~3.55 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
URLQuery
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| inspiradaily.com | N/A | 2025-08-19 | 2025-08-27 | 2026-07-28 | 13.9 KB | 1.35 MB |  160.153.0.39 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. Divi:4.27.7 Page builders, WordPress themes, WordPress plugins Divi is a WordPress Theme and standalone WordPress plugin from Elegant themes that allows users to build websites using the visual drag-and-drop Divi page builder. Easy Pie Chart JavaScript libraries Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element. Google Analytics Analytics Google Analytics is a free web analytics service that tracks and reports website traffic. jQuery Mobile:4.27.7 Mobile frameworks jQuery Mobile is a HTML5-based user interface system designed to make responsive web sites and apps that are accessible on all smartphone, tablet and desktop devices. WordPress:6.9.5 CMS, Blogs WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system. PHP Programming languages PHP is a general-purpose scripting language used for web development. jQuery Migrate:3.4.1 JavaScript libraries Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. FitVids.JS:4.27.7 Widgets, Video players jQuery plugin for fluid width video embeds MySQL Databases MySQL is an open-source relational database management system. |
| nhentai.net | 1421 | 2014-06-26 | 2014-10-12 | 2026-07-28 | 42.5 KB | 537.1 KB | 172.67.74.203 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare Browser Insights Analytics, RUM Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users. |
| t1.nhentai.net | 509119 | 2014-06-26 | 2024-11-14 | 2026-07-28 | 4.4 KB | 114.3 KB | 77.247.178.1 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| t2.nhentai.net | 513517 | 2014-06-26 | 2020-06-13 | 2026-07-28 | 6.8 KB | 207.4 KB | 213.152.165.54 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| t3.nhentai.net | 1958705 | 2014-06-26 | 2022-03-04 | 2026-07-28 | 10.7 KB | 348.2 KB | 213.152.165.53 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| track.adpush.media | N/A | 2025-03-18 | 2025-06-24 | 2026-07-25 | 483 B | 0 B |  34.160.159.69 | |
| img1.wsimg.com | 58983 | 2008-03-17 | 2012-06-20 | 2026-07-27 | 958 B | 288 B |  95.101.11.152 | |
| r.salegains.com 9 alerts | 7239561 | 2023-12-23 | 2025-03-25 | 2026-07-26 | 5.6 KB | 64.7 KB | 172.67.206.191 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare Browser Insights Analytics, RUM Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users. |
| tsyndicate.com | 1289 | 2017-03-08 | 2017-03-16 | 2026-07-24 | 556 B | 1.5 KB |  45.138.130.135 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| www.inspiradaily.com | N/A | 2025-08-19 | 2026-06-04 | 2026-07-28 | 515 B | 898 B | 160.153.0.39 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-07-26 | 2.9 KB | 282.4 KB | 142.250.178.99 | |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-07-26 | 3.2 KB | 502.2 KB | 142.250.178.106 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-07-26 | 1.6 KB | 136.7 KB | 104.17.24.14 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| t4.nhentai.net | 512607 | 2014-06-26 | 2024-11-14 | 2026-07-28 | 3.4 KB | 60.0 KB | 109.202.100.218 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-07-26 | 479 B | 0 B | 142.250.178.104 |