urlquery.net
Investigate/Report/a92b6804-e4ef-409a-92c8-ce416039a7bd
WEBSITE ANALYSIS REPORT

http://mysteriousprocess.com/bk3.Vl0mPn3-JpyqarWsQ_9uNvGwRxi-MzDAcB2CN_mEMF1GZHD-EJ5KZLWMR_mOOPTQVRi-MTjUAVwWY_jYIZyaYbj-kdyeYfzgQ_0iYjjkclm-cnnoNpyqY_zs1tzuavG-9xyydzGAx_pCbDmEsFm-cH2IlJkKP_TMYN3OMPD-IRxSOTDUE_mWdXHYZZy-PbTcAdmee_mg9huiZjW-llkmPnToQ_2qMrzsEt3-OvDwQx

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET302document430 B293 ms2 alerts
GET200document430 B142 ms2 alerts
GET200document4.7 KB233 ms1 alerts
GET200stylesheet7.8 KB32 ms1 alerts
GET200imageset733 B32 ms1 alerts
GET200imageset18.2 KB60 ms1 alerts
GET200imageset33.4 KB91 ms1 alerts
GET200imageset15.5 KB91 ms1 alerts

Transaction #01

Request / response

URL

GET HTTPS
https://eatcells.com/land/images/monster-01.png

IP / ASN

Germany 94.130.177.84

AS24940 · Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=4db0766c5d19edf95b200b22b92c44b7

Resource information

File type
PNG image data, 236 x 243, 8-bit colormap, non-interlaced
MIME type
image/png
First seen (UTC)
09 May 2023 · 00:11:10.000 UTC
Last seen (UTC)
04 Sep 2026 · 15:17:33.198 UTC
Times seen
1604
Size
15.5 KB (15905 bytes)
MD5
45205dd02d5a4d032a43a731109dae30
SHA1
a380604b350682a56849d213bbe1c6ddb7fc74bd
SHA256
cf1815bd1ad125d1ffeb4a415af49dddca07913e919abb102ba26ef682c4d922

Certificate information

Issuer
Let's Encrypt · R13
Subject
eatcells.com
Protocol / cipher
TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint
03:21:69:C5:86:CB:03:02:0E:8E:48:05:89:40:27:D5:92:95:7C:A7
Valid from
Wed, 18 Mar 2026 09:38:45 GMT
Valid until
Tue, 16 Jun 2026 09:38:44 GMT

Technology fingerprints

  • Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Hagezi Threat Feed SinkholedmediumMalicious

HTTP headers

Request headers

GET /land/images/monster-01.png HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=4db0766c5d19edf95b200b22b92c44b7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Tue, 05 May 2026 17:07:53 GMT
content-type: image/png
content-length: 15905
last-modified: Mon, 18 Mar 2019 07:57:50 GMT
etag: "5c8f4f7e-3e21"
accept-ranges: bytes
X-Firefox-Spdy: h2
GET200imageset49.4 KB123 ms1 alerts
GET200img1.0 KB87 ms1 alerts
GET200img31.6 KB46 ms1 alerts
11 visible / 11 matching / 11 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot