urlquery.net
Investigate/Report/a30cb0f3-07ca-4e14-8bab-dc0192a460d2
WEBSITE ANALYSIS REPORT

http://d44.dwnserver.com/download/57424b1f-a344-4b12-8400-e03c1e56fdb5/Clank-v1-2-1-patched.apk

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET404document359 B106 ms1 alerts
GET404document359 B49 ms1 alerts
GET200stylesheet9.1 KB85 ms1 alerts

Transaction #03

Request / response

URL

GET HTTPS
https://mobdisc.com/css/style.css

IP / ASN

The Netherlands 109.236.92.6

AS49981 · WorldStream B.V.

Requested by
http://d44.dwnserver.com/download/57424b1f-a344-4b12-8400-e03c1e56fdb5/Clank-v1-2-1-patched.apk

Resource information

File type
assembler source, Unicode text, UTF-8 text
MIME type
text/css
First seen (UTC)
29 Jan 2024 · 05:06:11.000 UTC
Last seen (UTC)
11 Oct 2026 · 18:49:40.475 UTC
Times seen
230
Size
9.1 KB (9284 bytes)
MD5
3713347acd5610b5bd74bb64a8b64e8b
SHA1
cfdfb270d95a51367371ece843da7fd82dc263dc
SHA256
9f03106c4ce2f332aac24e1d9ff997ff68a6ef78c1f718443a27d67b56cbb71f

Certificate information

Issuer
Let's Encrypt · YR2
Subject
mobdisc.com
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
46:04:09:A1:4B:5B:DC:DA:62:7F:FD:C0:77:86:B6:EF:E5:01:88:29
Valid from
Mon, 10 Aug 2026 13:48:12 GMT
Valid until
Sun, 08 Nov 2026 13:48:11 GMT

Technology fingerprints

  • Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DigiCert UltraDNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /css/style.css HTTP/1.1
Host: mobdisc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: http://d44.dwnserver.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Sun, 06 Sep 2026 03:24:13 GMT
content-type: text/css
last-modified: Sun, 23 Jun 2024 01:20:51 GMT
etag: W/"66777873-2444"
expires: Tue, 06 Oct 2026 03:24:13 GMT
cache-control: max-age=2592000
permissions-policy: browsing-topics=()
content-encoding: gzip
X-Firefox-Spdy: h2
GET404img359 B23 ms1 alerts
GET200img3.1 KB17 ms1 alerts
5 visible / 5 matching / 5 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot