urlquery.net
WEBSITE ANALYSIS REPORT

http://onyc.finance

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET403document5.6 KB111 ms2 alerts
GET403document5.5 KB31 ms2 alerts
GET200script215.8 KB43 ms2 alerts

Transaction #02

Request / response

URL

GET HTTP
http://onyc.finance/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=a1a2c88b9f93a41f

IP / ASN

Country unknown 172.67.191.143

AS13335 · CLOUDFLARENET

Requested by
http://onyc.finance/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Hagezi Threat Feed SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=a1a2c88b9f93a41f HTTP/1.1
Host: onyc.finance
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate
Referer: http://onyc.finance/?__cf_chl_rt_tk=Q6vm.Y_U0Qf_.kBLWqoovM3fWtnBjmtazX1680sku_s-1783887991-1.0.1.1-gGExt33BsvBr4nW3GhjoC.y8QzU9StB7AIemRzws7Is
Sec-GPC: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Date: Sun, 12 Jul 2026 20:26:31 GMT
Content-Type: application/javascript; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Encoding: gzip
Server: cloudflare
CF-RAY: a1a2c88c6f45b4f7-OSL
alt-svc: h2=":443"; ma=60

GET403img5.6 KB11 ms2 alerts
GET200script73.3 KB26 ms—
POST200xhr98.8 KB24 ms2 alerts
GET403img5.6 KB7 ms2 alerts
GET200subdocument255.5 KB17 ms—
POST200xhr478.0 KB147 ms—
GET200img3.4 KB4 ms—
POST200xhr111.9 KB39 ms—
POST200document43.5 KB282 ms2 alerts
GET200stylesheet20.5 KB284 ms2 alerts
GET200stylesheet2.5 KB287 ms2 alerts
GET200script987.8 KB588 ms2 alerts
GET200img535 B551 ms2 alerts
GET200img1.6 KB563 ms2 alerts
GET200img37.5 KB613 ms2 alerts
GET200font47.1 KB405 ms2 alerts
GET200font47.1 KB404 ms2 alerts
GET200stylesheet9.9 KB82 ms—
GET200fetch1 B323 ms2 alerts
GET200fetch212 B520 ms2 alerts
GET200font47.4 KB84 ms—
GET200font47.4 KB82 ms—
POST200fetch2 B315 ms2 alerts
GET200img481 B262 ms2 alerts
GET200fetch212 B188 ms2 alerts
GET200fetch212 B269 ms2 alerts
GET200fetch212 B193 ms2 alerts
GET200fetch212 B183 ms2 alerts
GET200fetch212 B188 ms2 alerts
GET200fetch212 B198 ms2 alerts
GET200fetch212 B205 ms2 alerts
GET200fetch212 B199 ms2 alerts
GET200fetch212 B183 ms2 alerts
GET200fetch212 B184 ms2 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot