urlquery.net
WEBSITE ANALYSIS REPORT

http://ontech-customer-service.pages.dev/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document31.8 KB297 ms—
GET200stylesheet16.4 KB106 ms—
GET200script47.3 KB524 ms3 alerts
GET200script50.3 KB923 ms3 alerts
GET200stylesheet17.2 KB53 ms—
GET404img8.9 KB54 ms—
GET200subdocument137.9 KB125 ms—
GET200lazy-img69.3 KB54 ms—
GET200font42.1 KB104 ms—
GET200font42.1 KB102 ms—
GET200stylesheet508.4 KB29 ms—
GET200stylesheet406.7 KB30 ms—
GET200script430.6 KB38 ms—
GET200script1.47 MB45 ms—
GET200font39.2 KB20 ms—
GET200font39.2 KB20 ms—
GET200script678.8 KB13 ms—
GET200script5.0 KB374 ms1 alerts
GET200xhr40 B109 ms—
GET200script101.6 KB483 ms1 alerts
GET200script91.3 KB479 ms1 alerts
GET200script18.2 KB382 ms1 alerts
GET200script66.3 KB776 ms—
GET200xhr40 B94 ms—
GET200xhr14.1 KB816 ms—
GET200script18.2 KB398 ms—
GET307xhr0 B388 ms1 alerts
GET200img87.4 KB192 ms—
GET200fetch478 B18 ms—
GET200xhr14.7 KB216 ms—
GET200xhr0 B437 ms—
GET200script60.5 KB45 ms—
GET200script83.4 KB105 ms—
GET200script83.4 KB101 ms—
GET200xhr4.0 KB113 ms1 alerts

Transaction #52

Request / response

URL

GET HTTPS
https://spendsdetachment.com/watch.267059543365.js?dev=e&fstu=019f52c5-5c57-7136-8e24-7066c8283edf&key=5f69d372f451f493f9b67c2d40733a17&kw=%5B%22ontech%22%2C%22customer%22%2C%22service%22%2C%22improved%22%2C%22efficiency%22%2C%22in%22%2C%227%22%2C%22days%22%5D&ps1=1783800093&rb=e&refer=https%3A%2F%2Fontech-customer-service.pages.dev%2F&res=14.1055&rmtc=t&sht=4RF-Gi4HLXYGq8mtiD_Mez5ahbNVA_msHrT0xdY1Tm0&shv=2&st1=38506bba5df22ced6065f0cb38ee11b3&tz=0&uuid=676c0102-0980-4f36-8c3a-8dc359b78bf4%3A3%3A1

IP / ASN

United States 172.240.253.132

AS7979 · SERVERS-COM

Requested by
https://ontech-customer-service.pages.dev/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /watch.267059543365.js?dev=e&fstu=019f52c5-5c57-7136-8e24-7066c8283edf&key=5f69d372f451f493f9b67c2d40733a17&kw=%5B%22ontech%22%2C%22customer%22%2C%22service%22%2C%22improved%22%2C%22efficiency%22%2C%22in%22%2C%227%22%2C%22days%22%5D&ps1=1783800093&rb=e&refer=https%3A%2F%2Fontech-customer-service.pages.dev%2F&res=14.1055&rmtc=t&sht=4RF-Gi4HLXYGq8mtiD_Mez5ahbNVA_msHrT0xdY1Tm0&shv=2&st1=38506bba5df22ced6065f0cb38ee11b3&tz=0&uuid=676c0102-0980-4f36-8c3a-8dc359b78bf4%3A3%3A1 HTTP/1.1
Host: spendsdetachment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://ontech-customer-service.pages.dev
Referer: https://ontech-customer-service.pages.dev/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=676c0102-0980-4f36-8c3a-8dc359b78bf4:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.xiwELcQpfAodQYTdfSLtSjTbN8_S17fMfYWx7KO7RYs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 11 Jul 2026 20:01:33 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Device-Stock-UA,X-Device-User-Agent,X-UCBrowser-Device-UA,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,User-Agent
access-control-allow-credentials: true
access-control-allow-origin: https://ontech-customer-service.pages.dev
content-encoding: zstd
set-cookie: uid_id2=676c0102-0980-4f36-8c3a-8dc359b78bf4:3:1; Path=/; Expires=Sat, 18 Jul 2026 20:01:33 GMT; Secure; SameSite=None
pdhtkv=true; Path=/; Expires=Sun, 12 Jul 2026 20:01:33 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Sun, 12 Jul 2026 20:01:33 GMT; Secure; SameSite=None
pdhtkv5=true; Path=/; Expires=Sun, 12 Jul 2026 20:01:33 GMT; Secure; SameSite=None
uncs5=1; Path=/; Expires=Sun, 12 Jul 2026 20:01:33 GMT; Secure; SameSite=None
u_pl25669423=1; Path=/; Expires=Sun, 12 Jul 2026 20:01:33 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 13
Host: spendsdetachment.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: be78466bc297567f0a9b7998847426ec
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

GET200img0 B380 ms2 alerts
GET200img12.7 KB349 ms—
GET200img22.0 KB118 ms—
GET200img55.9 KB355 ms—
GET200img111.5 KB348 ms—
GET200img0 B0 ms—
GET200img0 B0 ms—
GET200img0 B0 ms—
GET200img0 B0 ms—
GET200img85.4 KB86 ms—
GET200img0 B0 ms1 alerts
GET204img0 B9 ms—
POST204beacon0 B624 ms—
GET200img23.5 KB22 ms—
GET200img137.6 KB39 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot