urlquery.net
Investigate/Report/8d658262-ea5c-40f6-9040-ec912fe678a1
WEBSITE ANALYSIS REPORT

http://dandgremodel.com/

public
Report tags
phishing nakedpages aitm
Submit tags
Request review
Phishing detected

2 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

  • dandgremodel.com → href.liRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET302document0 B0 ms1 alerts
GET200document0 B0 ms1 alerts

Transaction #03

Request / response

URL

Navigation request GET HTTPS
https://href.li/?https://example.com

IP / ASN

United States 192.0.78.27

AS2635 · AUTOMATTIC

United States
Requested by
Not recorded

Resource information

File type
Not recorded
MIME type
Not recorded
First seen (UTC)
Not recorded
Last seen (UTC)
18 Oct 2026 · 02:37:14.117 UTC
Times seen
19175537
Size
0 B (0 bytes)
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

  • HSTS (Security)
  • Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DigiCert UltraDNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /?https://example.com HTTP/1.1
Host: href.li
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Sat, 17 Oct 2026 04:24:26 GMT
content-type: text/html; charset=utf-8
strict-transport-security: max-age=31536000
vary: Accept-Encoding
content-encoding: br
x-remembering: Eric Binnion <https://friendsofericbinnion.wordpress.com/>
x-ac: 36.hhn _dfw BYPASS
alt-svc: clear
server-timing: a8c-cdn, dc;desc=hhn, cache;desc=BYPASS;dur=121.0
X-Firefox-Spdy: h2
GET200document577 B30 ms—
GET200script1.9 KB8 ms—
4 visible / 4 matching / 4 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot