urlquery.net
WEBSITE ANALYSIS REPORT

http://freedomescapexcelerator.com/5k-a-day

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET403document5.7 KB58 ms1 alerts
GET403document5.6 KB17 ms1 alerts
GET200script215.0 KB29 ms1 alerts
GET403img5.7 KB11 ms1 alerts
GET200script73.3 KB40 ms—
GET403img5.7 KB16 ms1 alerts

Transaction #74

Request / response

URL

GET HTTP
http://freedomescapexcelerator.com/favicon.ico

IP / ASN

Country unknown 104.16.14.194

AS13335 · CLOUDFLARENET

Requested by
http://freedomescapexcelerator.com/5k-a-day

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: freedomescapexcelerator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate
Referer: http://freedomescapexcelerator.com/5k-a-day
Sec-GPC: 1
Connection: keep-alive
Priority: u=4, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 403 Forbidden
Date: Thu, 16 Jul 2026 20:34:02 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Accept-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cf-Mitigated: challenge
Content-Security-Policy: default-src 'none'; script-src 'nonce-UmJEQaOu8plDxf2dIjREMA' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self'
Server: cloudflare
Critical-Ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
Cross-Origin-Embedder-Policy: require-corp
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Origin-Agent-Cluster: ?1
Permissions-Policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=*
Referrer-Policy: same-origin
Server-Timing: chlray;desc="a1c3c9100c8d5a0f"
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Vary: accept-encoding
set-cookie: __cf_bm=nDcSAU53zGda3yoVI8K2.OrOOuOAIXQNOcZQo02mk6M-1784234042.8854475-1.0.1.1-lCzgoUd8cvbcHDEwJxTIdUBTGr.WnQPF162R3d4tb9CIYK91eSY09l01HCbn.j15wEVkOefI0nrw4Qw52dg0xtyqVlCCCkcTmZQFk8m_Kf9PzrVbforD5yBC1VQUQTLEfBOVjGL_B7TBjrHJv28ECw; HttpOnly; Path=/; Domain=freedomescapexcelerator.com; Expires=Thu, 16 Jul 2026 21:04:02 GMT
Content-Encoding: gzip
CF-RAY: a1c3c9100c8d5a0f-OSL
alt-svc: h2=":443"; ma=60

POST200xhr98.4 KB40 ms1 alerts
GET200subdocument259.0 KB25 ms—
POST200xhr486.6 KB322 ms—
GETNo responsefetch0 B0 ms—
POST301document0 B301 ms1 alerts
GET200document274.3 KB386 ms1 alerts
GET200stylesheet429.8 KB29 ms1 alerts
GET200stylesheet54.7 KB46 ms—
GET200stylesheet26.0 KB62 ms—
GET200stylesheet62.2 KB100 ms—
GET200script5.1 KB28 ms1 alerts
GET200script401.8 KB239 ms—
GET200script418.5 KB436 ms—
GET200script401.8 KB439 ms—
GET200script401.8 KB435 ms—
GET200script401.8 KB272 ms—
GET200script399.8 KB269 ms—
GET200script401.8 KB187 ms—
GET200script401.8 KB187 ms—
GET200script399.6 KB175 ms—
GET200script401.8 KB183 ms—
GET200script399.5 KB180 ms—
GET200script429.6 KB176 ms—
GET200script403.7 KB176 ms—
GET200script399.6 KB183 ms—
GET200script401.8 KB208 ms—
GET200script404.1 KB191 ms—
GET200script403.8 KB208 ms—
GET200script443.6 KB195 ms—
GET200script403.6 KB194 ms—
GET200script400.2 KB201 ms—
GET200stylesheet3.1 KB55 ms—
GET200stylesheet7.3 KB66 ms—
GET200stylesheet7.4 KB55 ms—
GET200script2.22 MB27 ms1 alerts
GET403script0 B0 ms—
GET403script0 B0 ms—
GET200script637 B29 ms1 alerts
GET200img35 B2181 ms—
GET301img0 B59 ms—
GET200img242.2 KB153 ms1 alerts
GET200script385.4 KB201 ms2 alerts
GET200script400.0 KB87 ms—
GET200script399.8 KB73 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot