urlquery.net
Investigate/Report/a92b6804-e4ef-409a-92c8-ce416039a7bd
WEBSITE ANALYSIS REPORT

http://mysteriousprocess.com/bk3.Vl0mPn3-JpyqarWsQ_9uNvGwRxi-MzDAcB2CN_mEMF1GZHD-EJ5KZLWMR_mOOPTQVRi-MTjUAVwWY_jYIZyaYbj-kdyeYfzgQ_0iYjjkclm-cnnoNpyqY_zs1tzuavG-9xyydzGAx_pCbDmEsFm-cH2IlJkKP_TMYN3OMPD-IRxSOTDUE_mWdXHYZZy-PbTcAdmee_mg9huiZjW-llkmPnToQ_2qMrzsEt3-OvDwQx

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET302document430 B293 ms2 alerts
GET200document430 B142 ms2 alerts
GET200document4.7 KB233 ms1 alerts
GET200stylesheet7.8 KB32 ms1 alerts
GET200imageset733 B32 ms1 alerts
GET200imageset18.2 KB60 ms1 alerts

Transaction #04

Request / response

URL

GET HTTPS
https://eatcells.com/land/images/logo.png

IP / ASN

Germany 94.130.177.84

AS24940 · Hetzner Online GmbH

Requested by
https://eatcells.com/land/?token=4db0766c5d19edf95b200b22b92c44b7

Resource information

File type
PNG image data, 359 x 135, 8-bit/color RGBA, non-interlaced
MIME type
image/png
First seen (UTC)
09 May 2023 · 00:11:10.000 UTC
Last seen (UTC)
04 Sep 2026 · 15:17:33.136 UTC
Times seen
1605
Size
18.2 KB (18661 bytes)
MD5
afd19fc7285d88ba97604b97a2a7cb8b
SHA1
9252c308b5c30cd289cddbbc81bd3e3a30405c54
SHA256
0f9ac57272de3b968c2d8325248adaef7130acd9f0841d999ccda5242390b3c3

Certificate information

Issuer
Let's Encrypt · R13
Subject
eatcells.com
Protocol / cipher
TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint
03:21:69:C5:86:CB:03:02:0E:8E:48:05:89:40:27:D5:92:95:7C:A7
Valid from
Wed, 18 Mar 2026 09:38:45 GMT
Valid until
Tue, 16 Jun 2026 09:38:44 GMT

Technology fingerprints

  • Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Hagezi Threat Feed SinkholedmediumMalicious

HTTP headers

Request headers

GET /land/images/logo.png HTTP/1.1
Host: eatcells.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://eatcells.com/land/?token=4db0766c5d19edf95b200b22b92c44b7
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Tue, 05 May 2026 17:07:53 GMT
content-type: image/png
content-length: 18661
last-modified: Mon, 18 Mar 2019 07:57:49 GMT
etag: "5c8f4f7d-48e5"
accept-ranges: bytes
X-Firefox-Spdy: h2
GET200imageset33.4 KB91 ms1 alerts
GET200imageset15.5 KB91 ms1 alerts
GET200imageset49.4 KB123 ms1 alerts
GET200img1.0 KB87 ms1 alerts
GET200img31.6 KB46 ms1 alerts
11 visible / 11 matching / 11 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot