urlquery.net
WEBSITE ANALYSIS REPORT

http://roslegacy.org

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document38.5 KB242 ms—
GET200stylesheet889.8 KB105 ms—
GET200script2.9 KB108 ms—
GET200script84.8 KB110 ms—
GET200img179.6 KB673 ms—
GET200script6.8 KB180 ms—
GET200img9.4 KB176 ms—
GET200font128.9 KB96 ms—
GET200font21.0 KB57 ms—
GET200font21.0 KB57 ms—
GET200font10.3 KB30 ms—
GET200font128.9 KB35 ms—
POST202fetch2 B328 ms—
GET200script39.2 KB38 ms—
GET200script82.5 KB118 ms—
GET200img0 B0 ms—
POST200fetch0 B97 ms—
GET200xhr76 B49 ms—
GET200script39.2 KB47 ms—
GET200img7.4 KB223 ms—
GET200img323 B210 ms—
GET200img0 B0 ms—
GET200img0 B0 ms—
GET200xhr6.6 KB159 ms—
POST200fetch0 B43 ms—
GET200xhr1.5 KB483 ms2 alerts

Transaction #01

Request / response

URL

GET HTTPS
https://cdn.show-sb.com/sb/au/8e/ff/66/8eff6635b7ed4954a8b4e92629e58a35/1698745384.html

IP / ASN

Country unknown 104.21.95.140

AS13335 · CLOUDFLARENET

Requested by
https://roslegacy.org/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious
Cloudflare DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /sb/au/8e/ff/66/8eff6635b7ed4954a8b4e92629e58a35/1698745384.html HTTP/1.1
Host: cdn.show-sb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://roslegacy.org
Sec-GPC: 1
Connection: keep-alive
Referer: https://roslegacy.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Mon, 05 Oct 2026 10:57:31 GMT
content-type: text/html
last-modified: Tue, 31 Oct 2023 09:43:09 GMT
vary: accept-encoding
priority: u=3,i=?0
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=1PP4QmJkGpwEI7rDv0hP4wB9%2Bj8V7ix9NTkXPNom7lhWjKr1SPXXRBw6fCcpDBhg2%2FVwPvkcSstUPIL9H2OKM4IVh0ym3BK6AsNr7fXL4i%2BB75luov%2BaKjylrPyiIEU9OVk%3D"}]}
cf-cache-status: MISS
content-encoding: zstd
cf-ray: a45be7e7db2956cb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET200img0 B0 ms—
GET200xhr76.8 KB489 ms—
GET200xhr5.2 KB494 ms—
GET200img0 B45 ms—
GET200stylesheet27.3 KB34 ms—
GET200img1.2 KB18 ms—
GET200script87.4 KB19 ms—
GET200img2.0 KB130 ms—
GET200xhr1.1 KB477 ms—
GET200img0 B40 ms—
GET200img0 B42 ms—
GET200img0 B46 ms—
POST200fetch0 B41 ms—
GET200img0 B0 ms—
GET200img0 B37 ms—
GET200img1.1 KB14 ms—
GET200font42.1 KB18 ms—
GET200font42.1 KB19 ms—
GET200font20.1 KB20 ms—
GET200font42.1 KB18 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot