urlquery.net
WEBSITE ANALYSIS REPORT

http://papartrade.xyz/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document40.2 KB367 ms—
GET200script76.9 KB44 ms—
GET200script16.7 KB215 ms—
POST200fetch70.4 KB499 ms—
OPTIONS200fetch0 B299 ms—
POST200fetch24.0 KB715 ms—
GET101websocket0 B522 ms—
OPTIONS200fetch0 B506 ms—
OPTIONS200fetch0 B503 ms—
POST200fetch486 B98 ms—
POST200fetch487 B50 ms—
OPTIONS200fetch0 B124 ms—
OPTIONS204fetch0 B75 ms—
POST200fetch486 B55 ms—
OPTIONSNo responsefetch0 B0 ms—
POST200fetch486 B127 ms1 alerts
OPTIONS204fetch0 B61 ms—
OPTIONS200fetch0 B144 ms1 alerts

Transaction #23

Request / response

URL

OPTIONS HTTPS
https://1rpc.io/base

IP / ASN

Country unknown 172.67.204.2

AS13335 · CLOUDFLARENET

Requested by
https://papartrade.xyz/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Quad9 DNS SinkholedmediumMalicious

HTTP headers

Request headers

OPTIONS /base HTTP/1.1
Host: 1rpc.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://papartrade.xyz/
Origin: https://papartrade.xyz
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
access-control-allow-credentials: true
access-control-allow-headers: content-type
access-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
alt-svc: h3=":443"; ma=86400
date: Mon, 19 Oct 2026 01:30:36 GMT
server: cloudflare
via: 1.1 Caddy
server-timing: cfExtPri
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=p6MyNpwYeB1BOK%2BOWwreXTbvR7TTKBuQDKOc%2BFICibGLFmI2aONsgSEryaTmv4WEgLwNTO01VrfaXHc1U2WRZNAirMuzNN7QDkEFGeKus%2BHCy96PMBU96tgu"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=4,i=?0
cf-ray: a4cc04b7298f56a5-OSL
content-length: 0

OPTIONS200fetch0 B3212 ms—
POST200fetch284.5 KB352 ms—
POST200fetch70.9 KB44 ms—
POST200fetch516.1 KB227 ms—
POST200fetch16.7 KB112 ms—
POST200fetch16.4 KB106 ms—
POST200fetch3.4 KB93 ms—
GET200fetch19.9 KB28 ms—
POST200fetch90 B723 ms—
POST200fetch11 B63 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot