urlquery.net
Investigate/Report/306e24a8-89cb-4ef5-aba3-ae8a9b698e30
WEBSITE ANALYSIS REPORT

http://risevest-fr.fyi/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document11.4 KB548 ms2 alerts
GET200stylesheet11.7 KB84 ms—
GET200stylesheet10.9 KB104 ms—
GET200stylesheet24.4 KB127 ms2 alerts
GET200stylesheet20.2 KB127 ms2 alerts
GET200script4.4 KB127 ms2 alerts
GET200script1.9 KB127 ms2 alerts
GET200img68.2 KB373 ms2 alerts
GET200img3.5 KB372 ms2 alerts
GET200img9.5 KB372 ms2 alerts
GET200img6.6 KB371 ms2 alerts
GET200img11.8 KB490 ms2 alerts
GET200img9.7 KB489 ms2 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://risevest-fr.fyi/images/parking2/payments/ach.svg

IP / ASN

United States 209.196.146.115

AS394456 · EPIK-LLC

Requested by
https://risevest-fr.fyi/

Resource information

File type
SVG Scalable Vector Graphics image
MIME type
image/svg+xml
First seen (UTC)
13 Feb 2024 · 22:42:34.000 UTC
Last seen (UTC)
23 Oct 2026 · 12:58:16.889 UTC
Times seen
1228
Size
9.7 KB (9922 bytes)
MD5
1aeeeca9efd19cf90482d9a4e4010ac9
SHA1
e8086fe685ba0d5907aed7e9fb9d6a152f2401d7
SHA256
efcb8731964b2d071021c8d243ed3b435c88464a717cb395024f6cb84c254773

Certificate information

Issuer
Let's Encrypt · YR1
Subject
risevest-fr.fyi
Protocol / cipher
TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint
7D:74:11:C6:33:6A:63:D3:DB:BC:69:7D:8F:12:C5:EB:25:3B:49:8B
Valid from
Thu, 10 Sep 2026 04:35:28 GMT
Valid until
Wed, 09 Dec 2026 04:35:27 GMT

Technology fingerprints

  • Nginx:1.22.1 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing

HTTP headers

Request headers

GET /images/parking2/payments/ach.svg HTTP/1.1
Host: risevest-fr.fyi
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://risevest-fr.fyi/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx/1.22.1
date: Wed, 23 Sep 2026 19:52:51 GMT
content-type: image/svg+xml
content-length: 4088
last-modified: Wed, 07 Feb 2024 16:29:00 GMT
etag: "26c2-610cd313d0abe-gzip"
vary: Accept-Encoding
content-encoding: gzip
expires: Thu, 08 Oct 2026 19:52:51 GMT
cache-control: max-age=1296000
accept-ranges: bytes
X-Firefox-Spdy: h2
GET200img149.7 KB437 ms—
GET200img14.4 KB367 ms2 alerts
GET200font42.1 KB96 ms—
GET200font42.1 KB86 ms—
GET200font47.2 KB90 ms—
GET200font47.2 KB92 ms—
GET200img1.1 KB127 ms2 alerts
20 visible / 20 matching / 20 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot