urlquery.net
Investigate/Report/64dd2d3f-75ea-4463-a50f-d511bf81b189
WEBSITE ANALYSIS REPORT

http://d40.dwnserver.com/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document427 B192 ms—
GET200stylesheet9.1 KB146 ms1 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://mobdisc.com/css/style.css

IP / ASN

The Netherlands 109.236.92.6

AS49981 · WorldStream B.V.

Requested by
https://d40.dwnserver.com/

Resource information

File type
assembler source, Unicode text, UTF-8 text
MIME type
text/css
First seen (UTC)
29 Jan 2024 · 05:06:11.000 UTC
Last seen (UTC)
11 Oct 2026 · 18:49:40.475 UTC
Times seen
230
Size
9.1 KB (9284 bytes)
MD5
3713347acd5610b5bd74bb64a8b64e8b
SHA1
cfdfb270d95a51367371ece843da7fd82dc263dc
SHA256
9f03106c4ce2f332aac24e1d9ff997ff68a6ef78c1f718443a27d67b56cbb71f

Certificate information

Issuer
Let's Encrypt · R13
Subject
mobdisc.com
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
51:F1:31:2C:BD:35:87:55:B6:15:A5:B3:CC:86:B2:81:E4:C9:EE:D7
Valid from
Sun, 12 Apr 2026 05:34:03 GMT
Valid until
Sat, 11 Jul 2026 05:34:02 GMT

Technology fingerprints

  • Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DigiCert UltraDNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /css/style.css HTTP/1.1
Host: mobdisc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://d40.dwnserver.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Mon, 01 Jun 2026 11:57:46 GMT
content-type: text/css
last-modified: Sun, 23 Jun 2024 01:20:51 GMT
etag: W/"66777873-2444"
expires: Wed, 01 Jul 2026 11:57:46 GMT
cache-control: max-age=2592000
permissions-policy: browsing-topics=()
content-encoding: gzip
X-Firefox-Spdy: h2
GET404img359 B26 ms—
GET200img3.1 KB19 ms1 alerts
4 visible / 4 matching / 4 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot