urlquery.net
Investigate/Report/71dab6fb-9a7c-4533-b784-e643ad7b8438
WEBSITE ANALYSIS REPORT

http://alebilet.728153t152.click/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET520document7.2 KB148 ms3 alerts

Transaction #03

Request / response

URL

Navigation request GET HTTPS
https://alebilet.728153t152.click/

IP / ASN

Country unknown 104.21.93.209

AS13335 · CLOUDFLARENET

Requested by
Not recorded

Resource information

File type
HTML document, ASCII text, with very long lines (578)
MIME type
text/html; charset=UTF-8
First seen (UTC)
09 Sep 2026 · 18:53:33.859 UTC
Last seen (UTC)
09 Sep 2026 · 18:53:33.859 UTC
Times seen
1
Size
7.2 KB (7402 bytes)
MD5
f976897caceabd8be56899669a3ec31e
SHA1
ed71b498c9182946563cc3066878fe145cea8187
SHA256
d1943c4d18ce61486064ab3d582aa1baa340829af5dc6a6e42b9b8400f66521a

Certificate information

Issuer
Let's Encrypt · YE1
Subject
728153t152.click
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
0A:03:96:52:DA:E6:58:D5:FB:28:A6:B4:EE:91:5C:55:C7:12:D4:44
Valid from
Tue, 01 Sep 2026 02:23:58 GMT
Valid until
Mon, 30 Nov 2026 02:23:57 GMT

Technology fingerprints

  • Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious
Quad9 DNS SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing

HTTP headers

Request headers

GET / HTTP/1.1
Host: alebilet.728153t152.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 520 
retry-after: 60
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
referrer-policy: same-origin
date: Wed, 09 Sep 2026 18:53:03 GMT
x-frame-options: SAMEORIGIN
server-timing: cfExtPri
priority: u=0,i
server: cloudflare
cf-ray: a38864c098e18920-CPH
alt-svc: h3=":443"; ma=86400
content-length: 7402
GET520document7.2 KB3286 ms3 alerts
GET200stylesheet7.8 KB32 ms3 alerts
GET200img484 B32 ms3 alerts
GET200img946 B3122 ms3 alerts
GET200img1.4 KB3121 ms3 alerts
GET200img1.4 KB3130 ms3 alerts
GET200img854 B40 ms3 alerts
GET520img7.2 KB108 ms3 alerts
9 visible / 9 matching / 9 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot