urlquery.net
WEBSITE ANALYSIS REPORT

https://pdalife.to/dwn/b0da78bb.html

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET301document9.7 KB199 ms—
GET200document9.7 KB140 ms1 alerts
GET200stylesheet9.1 KB17 ms1 alerts
GET200script24 B17 ms1 alerts
GET200script1010 B260 ms—
GET200script54.2 KB294 ms1 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://xk.chumpardale.com/rP2jffraWk7DW8k/233

IP / ASN

The Netherlands 23.109.253.53

AS7979 · SERVERS-COM

Requested by
https://mobdisc.com/dwb0da78bb/download.html

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /rP2jffraWk7DW8k/233 HTTP/1.1
Host: xk.chumpardale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://mobdisc.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Fri, 15 May 2026 14:03:57 GMT
content-type: application/javascript; charset=utf-8
accept-ch: sec-ch-ua-platform-version,sec-ch-ua-model,sec-ch-ua-full-version,sec-ch-ua-full-version-list
access-control-allow-credentials: true
access-control-allow-origin: https://mobdisc.com
access-control-allow-headers: content-type, gyfr29qt4j80vdr0zhsj, x-forwarded-for, x-requested-with, cache-control, pragma, expires
access-control-max-age: 600
access-control-allow-methods: GET, POST, OPTIONS
set-cookie: GL_UI4=eJw9jc1OhDAcB%2FkGddnkl%2FAA%2BwgtUtKrF1%2FBI2npn7UKdFMqq28v8eBtDjOZKIqSpka8FyekX0rgwrnsZSdaybpRqlZr2feCaSEZb8U0CTzYbQhKzxQyVNuifBjCniHXXq2mRr44Q3ONUnt338g3KbJVLYTy1Xqa3PdhqA%2FnkfLn7mC7HhwzJG5r0nOF8s2u5ijPj0g4O5%2BKCE%2B3WYXJ%2BWWwpoiRX70yhPgF1agCXZ3%2FQWlo%2BwzuBrjZDP%2F%2B3zi9c4bC0G5HQu7CO%2FlfoWNCFg%3D%3D; expires=Sat, 16-May-2026 14:03:57 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJwNx00KgkAYBmDnSyYEMV5wUbs2bU1LIXdSLUsJDxBmEQODI479Xqplt%2Bga0b4D1OJZPIZhkNsDiRp2HHix74UTL4hCsCMozUBlBZ6q5lLcwBqQPwU1FcxMSwVWOhaYgDOX4jrMlTy1QlUa9Gctip08jJf5CqzmDNQqTiC9dw2wM%2B%2BDZGEn6%2B%2B783h%2B%2FlF2MrpvBq%2FuFlRrmH40C35BkySM; expires=Sat, 16-May-2026 14:03:57 GMT; Max-Age=86400; path=/; secure; SameSite=None
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

GET200script439.4 KB286 ms—
GET200script97.2 KB38 ms1 alerts
GET200script4.0 KB46 ms1 alerts
GET200stylesheet9.1 KB17 ms1 alerts
POST200xhr1.4 KB144 ms—
GET200script856.0 KB328 ms—
GET200img5.2 KB19 ms1 alerts
GET200img33.7 KB21 ms1 alerts
OPTIONSNo responsefetch0 B48 ms—
OPTIONS200fetch5 B226 ms1 alerts
GET200img3.1 KB17 ms1 alerts
GET200img1.5 KB17 ms1 alerts
POST200fetch446 B160 ms1 alerts
GET200subdocument53.1 KB50 ms—
GET200img27.0 KB194 ms—
GET200script7.4 KB153 ms—
GET200img21.5 KB35 ms—
GET200img28.5 KB50 ms—
GET200img59.8 KB68 ms—
GET200img70.5 KB107 ms—
GET200img27.7 KB83 ms—
GET200img74.3 KB106 ms—
GET200img64.3 KB104 ms—
GET200img18.3 KB79 ms—
GET200img18.3 KB78 ms—
GET200img6.8 KB90 ms—
GET200img48.8 KB93 ms—
GET200img53.5 KB94 ms—
GET200stylesheet81.4 KB25 ms—
GET200script856.0 KB56 ms—
GET200font39.2 KB91 ms—
GET200font39.2 KB110 ms—
GET200script102 B34 ms—
GET200script856.0 KB35 ms—
GET200img2.2 KB9 ms—
POST200xhr2.6 KB82 ms—
POST200xhr170 B72 ms1 alerts
POST200fetch0 B37 ms—
POST200fetch0 B42 ms—
POST200fetch0 B32 ms—
POST200fetch0 B35 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot