urlquery.net

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET301document0 B285 ms1 alerts
GET200document1.3 KB123 ms1 alerts

Transaction #04

Request / response

URL

Navigation request GET HTTPS
https://inattention392.firstelm.de/testes146/

IP / ASN

Country unknown 172.67.169.113

AS13335 · CLOUDFLARENET

Requested by
Not recorded

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
urlquery Malicious - Cloaked Browser FingerprintingmediumMalicious

HTTP headers

Request headers

GET /testes146/ HTTP/1.1
Host: inattention392.firstelm.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
referrer-policy: origin, no-referrer-when-downgrade
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-type: text/html; charset=UTF-8
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: Accept-Encoding
server: cloudflare
date: Thu, 15 Oct 2026 00:40:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: default-src 'self' https:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' data: https:; connect-src 'self' https:; frame-ancestors 'none'; upgrade-insecure-requests;
priority: u=0,i
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=D5jCjBNXMPLSXRPf%2BL0ZlyH0s0FLRQh%2FKoSjucCfbuajxbbIeF%2F9%2ByRMj%2Bf9FPDISsDdCfBgWm8zWiHcTqT5A%2BdBWDPCv%2BXJHaK8A9eoKGN5pZjpJJ%2FHlXldUzo2OGcz6kDy%2FiGhpaCTYH5O8w%3D%3D"}]}
content-encoding: zstd
cf-ray: a4aac632ddefb509-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET200script4.3 KB213 ms1 alerts
GET200img136 B219 ms1 alerts
POST200document0 B0 ms1 alerts
GET200document6.0 KB102 ms—
GET200stylesheet3.0 KB24 ms—
GET200stylesheet437 B87 ms—
GET200script7.1 KB25 ms—
GET200script375.1 KB158 ms—
GET200script526.4 KB394 ms—
GET200font11.6 KB55 ms—
GET200script524.6 KB176 ms—
GET200script447.7 KB176 ms—
GET200img198 B26 ms—
GET200document4.7 KB248 ms—
GET200stylesheet11.9 KB24 ms—
GET200stylesheet1.2 KB146 ms—
GET200script1.6 KB28 ms—
GET200script7.3 KB24 ms—
GET200script762 B25 ms—
GET200script15.9 KB33 ms—
GET200script514.8 KB152 ms—
GET200img945 B24 ms—
GET200font29.7 KB44 ms—
GET200img615 B25 ms—
GET200script455.4 KB99 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot