urlquery.net
WEBSITE ANALYSIS REPORT

http://downloadsave.org

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document468.6 KB311 ms1 alerts
GET200stylesheet551 B108 ms1 alerts

Transaction #05

Request / response

URL

GET HTTPS
https://downloadsave.org/wp-content/plugins/kadence-blocks-plus/includes/css/faq-spacing-fix.css?ver=2.1.7

IP / ASN

Country unknown 172.67.144.253

AS13335 · CLOUDFLARENET

Requested by
https://downloadsave.org/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /wp-content/plugins/kadence-blocks-plus/includes/css/faq-spacing-fix.css?ver=2.1.7 HTTP/1.1
Host: downloadsave.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://downloadsave.org/
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=7HVwmTWpjdfkhczv%2B4%2FMrx3MbkZcjKrILs2gDpjjXeKgWcCPc3FTPNoFvRA4CVIgN8qrMiwOPiMhx7spsVqYHlasa3Cy58%2BGSooxYdd9KafGk3iRImWi3kXPBE%2FGVimstwEw"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-type: text/css; charset=utf-8
vary: accept-encoding
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
etag: W/"b99acd256d9ea5e80eef12aef62bd2f5"
content-encoding: br
priority: u=2,i=?0
server: cloudflare
cf-cache-status: MISS
date: Mon, 19 Oct 2026 04:52:40 GMT
cf-ray: a4cd2cbb3df3b500-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET200stylesheet27.1 KB130 ms1 alerts
GET200stylesheet5.1 KB116 ms1 alerts
GET200stylesheet1.4 KB84 ms1 alerts
GET200stylesheet10.0 KB118 ms1 alerts
GET200stylesheet4.5 KB114 ms1 alerts
GET200stylesheet11.1 KB107 ms1 alerts
GET200stylesheet12.0 KB111 ms1 alerts
GET200stylesheet1.1 KB104 ms1 alerts
GET200stylesheet655 B108 ms1 alerts
GET200stylesheet24.7 KB83 ms1 alerts
GET200stylesheet33.6 KB120 ms1 alerts
GET200stylesheet19.5 KB76 ms1 alerts
GET200font23.1 KB92 ms1 alerts
GET200stylesheet2.6 KB85 ms1 alerts
GET200script7.4 KB110 ms1 alerts
GET200script1.3 KB84 ms1 alerts
GET200script20.5 KB127 ms1 alerts
GET200script12.5 KB99 ms1 alerts
GET200script66.4 KB56 ms2 alerts
GET200imageset26.1 KB103 ms1 alerts
GET200img645.6 KB89 ms1 alerts
GET200img646.7 KB125 ms1 alerts
GET200img665.8 KB176 ms1 alerts
GET200img698.4 KB79 ms1 alerts
GET200img703.6 KB124 ms1 alerts
GET200img709.1 KB110 ms1 alerts
GET200img671.2 KB129 ms1 alerts
GET200img636.0 KB228 ms1 alerts
GET200lazy-imageset18.5 KB101 ms1 alerts
GET200lazy-imageset14.8 KB90 ms1 alerts
POST400beacon0 B0 ms2 alerts
GET200img29.9 KB94 ms1 alerts
GET200img1.5 KB73 ms1 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot