urlquery.net
WEBSITE ANALYSIS REPORT

http://flemmix.garden/serie-en-streaming/36509-secret-service.html

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document58.3 KB256 ms1 alerts
GET200script5 B182 ms1 alerts
GET200stylesheet47.5 KB9 ms1 alerts
GET200stylesheet30.3 KB8 ms1 alerts
GET200stylesheet96.1 KB14 ms1 alerts
GET200script6 B159 ms2 alerts

Transaction #96

Request / response

URL

GET HTTPS
https://retimeddoused.com/1clkn/35789

IP / ASN

The Netherlands 23.109.253.164

AS7979 · SERVERS-COM

Requested by
https://flemmix.garden/serie-en-streaming/36509-secret-service.html

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Hagezi Threat Feed SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /1clkn/35789 HTTP/1.1
Host: retimeddoused.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://flemmix.garden/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Sat, 11 Jul 2026 19:49:34 GMT
content-type: application/javascript; charset=utf-8
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
set-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Sun, 12-Jul-2026 19:49:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwNx0sOwUAcB%2BDOPwySBr%2BkC0s2lqX1CLt6LKlFDyCjhEbTaWZaj7iUOIiFo7gAXXyLzzAMshqgKEXdmY7s8dB2nIntjFywI8jfgMIE3JfqKu5gCtR3QSpBdXY%2BKH3KNViI8lrkSoBFqM%2Fj6NYOZJxnkUw0qFBbiF186C2DFVjKGSiTnEB6bxlgF94CxcL0%2FM67spWfItL0us3n9%2FH6gVKNktsfuH9DcSjB; expires=Sun, 12-Jul-2026 19:49:34 GMT; Max-Age=86400; path=/; secure; SameSite=None
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

GET200stylesheet3.4 KB7 ms1 alerts
GET200stylesheet1013 B10 ms1 alerts
GET200script2.6 KB65 ms—
GET200script143.2 KB95 ms—
GET200script5 B147 ms—
GET200script83.6 KB9 ms1 alerts
GET200script128.2 KB10 ms1 alerts
GET200script53.4 KB11 ms1 alerts
GET200script3.3 KB9 ms1 alerts
GET200script1.3 KB32 ms—
GET200script8.0 KB9 ms1 alerts
GET200script43.3 KB13 ms1 alerts
GET200script976 B55 ms—
GET200img17.8 KB169 ms1 alerts
GET200img15.9 KB161 ms1 alerts
GET200img13.3 KB165 ms1 alerts
GET200img17.1 KB166 ms1 alerts
GET200img14.1 KB168 ms1 alerts
GET200img14.7 KB166 ms1 alerts
GET200img15.9 KB167 ms1 alerts
GET200img9.4 KB114 ms1 alerts
GET200img23.6 KB167 ms1 alerts
GET200img22.5 KB164 ms1 alerts
GET200img15.9 KB160 ms1 alerts
GET200img17.4 KB166 ms1 alerts
GET200img16.8 KB111 ms1 alerts
GET200img20.1 KB162 ms1 alerts
GET200img25.6 KB167 ms1 alerts
GET200img25.7 KB163 ms1 alerts
GET200img15.4 KB163 ms1 alerts
GET200img25.6 KB162 ms1 alerts
GET200img25.3 KB164 ms1 alerts
GET200img24.1 KB162 ms1 alerts
GET200img19.5 KB162 ms1 alerts
GET200font65.1 KB10 ms1 alerts
GET200img8.9 KB7 ms1 alerts
GET200fetch64 B59 ms1 alerts
GET200script874.4 KB143 ms—
GET200img1.7 KB7 ms1 alerts
GET200subdocument56.0 KB289 ms—
GET200script145.1 KB51 ms—
GET200stylesheet48.2 KB7 ms—
GET200script163.5 KB43 ms2 alerts
GET200script84.9 KB10 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot