urlquery.net
Investigate/Report/260c55cb-e82c-42cc-97a8-88d8e898dc8d
WEBSITE ANALYSIS REPORT

http://aniakruk.sidestep.one/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document361.6 KB3951 ms4 alerts

Transaction #02

Request / response

URL

Navigation request GET HTTPS
https://aniakruk.sidestep.one/

IP / ASN

Country unknown 104.21.90.149

AS13335 · CLOUDFLARENET

Requested by
Not recorded

Resource information

File type
HTML document, Unicode text, UTF-8 text, with very long lines (54392)
MIME type
text/html; charset=utf-8
First seen (UTC)
09 Sep 2026 · 19:01:55.435 UTC
Last seen (UTC)
09 Sep 2026 · 19:01:55.435 UTC
Times seen
1
Size
361.6 KB (370297 bytes)
MD5
f381e07d06e9be8daa3e860439088161
SHA1
3a161e96c33590670b962d10853defbf4efa0ce2
SHA256
3dd1565d8b21b6b3993ae15aed3a5f2cafc538b7222c46c66d7839359d861110

Certificate information

Issuer
Google Trust Services · WE1
Subject
aniakruk.sidestep.one
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
93:E4:24:39:71:61:BE:D8:20:F1:8E:10:1B:77:7F:21:5E:83:3F:C8
Valid from
Thu, 27 Aug 2026 06:30:21 GMT
Valid until
Wed, 25 Nov 2026 07:30:18 GMT

Technology fingerprints

  • Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Cloudflare DNS SinkholedmediumMalicious
Quad9 DNS SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: aniakruk.sidestep.one
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Wed, 09 Sep 2026 19:01:20 GMT
content-type: text/html; charset=utf-8
server: cloudflare
set-cookie: _aghfzg_vid=00134FB0-9635-DF66-8574-1B8A20BBBAAE; expires=Sat, 06-Sep-2036 19:01:20 GMT; Max-Age=315360000; path=/
_aghfzg_cvid=64B6DCB2-EBD2-DBD9-58F0-D4A3E13FF032; expires=Sat, 06-Sep-2036 19:01:20 GMT; Max-Age=315360000; path=/
_aghfzg_vs=4E1EEF78-12E5-5489-6C07-82858C27192C; expires=Thu, 10-Sep-2026 19:01:20 GMT; Max-Age=86400; path=/
utm_source=direct; expires=Fri, 09-Oct-2026 19:01:20 GMT; Max-Age=2592000; path=/
utm_medium=default; expires=Fri, 09-Oct-2026 19:01:20 GMT; Max-Age=2592000; path=/
utm_term=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
utm_campaign=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
utm_content=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/
order_utm_history=%5B%7B%22utm_source%22%3A%22direct%22%2C%22utm_medium%22%3A%22default%22%2C%22utm_term%22%3A%22%22%2C%22utm_campaign%22%3A%22%22%2C%22utm_content%22%3A%22%22%2C%22source_device%22%3A%22computer%22%2C%22create_time%22%3A1788980480%2C%22expire_time%22%3A1791572480%7D%5D; expires=Fri, 09-Oct-2026 19:01:20 GMT; Max-Age=2592000; path=/
landing_page=aHR0cHM6Ly9hbmlha3J1ay5zaWRlc3RlcC5vbmUv; expires=Thu, 09-Sep-2027 19:01:20 GMT; Max-Age=31536000; path=/
_aghfzg_ka=3CFCE1C8-A093-FE14-9755-8B61F7EB1568; expires=Wed, 09-Sep-2026 19:31:20 GMT; Max-Age=1800; path=/
first_http_referer=null; expires=Fri, 09-Oct-2026 19:01:20 GMT; Max-Age=2592000; path=/
first_visit_time=1788980480; expires=Sat, 06-Sep-2036 19:01:20 GMT; Max-Age=315360000; path=/
PHPSESSID=f77921af04c1121ab188cee1222409d2; path=/
__cf_bm=mk4jFJxuC5kNNTUM9NvAmNgH2zXWfme1JsHch.E4bUU-1788980480.0782459-1.0.1.1-EWN9opzS2yX4iDwF3_P2a_CmCDK4XwYa1g2GfufkcvTxgahAlkubxZ5LmWgcnGgcCepIG4iIZNCFX.SLFuFCeK2h1az8_G_6BdnAqr0WqCDX_7fB_JlhstMa_OHcIFe1; HttpOnly; SameSite=None; Secure; Path=/; Domain=aniakruk.sidestep.one; Expires=Wed, 09 Sep 2026 19:31:20 GMT
vary: Accept-Encoding
x-trace-id: 9050267B-55BB-CAF2-CD57-AFD36B29498F
execution-time: 0.0691750050
trace_id: 9050267B-55BB-CAF2-CD57-AFD36B29498F
content-encoding: gzip
cf-cache-status: DYNAMIC
cf-ray: a38870e07d315a94-CPH
X-Firefox-Spdy: h2
GET200script503.4 KB57 ms4 alerts
GET200stylesheet123.1 KB45 ms4 alerts
GET200font15.3 KB58 ms—
GET404img548 B54 ms4 alerts
5 visible / 5 matching / 5 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot