urlquery.net
Investigate/Report/b903f1cd-37a1-4fae-b68c-175033e9fe6c
WEBSITE ANALYSIS REPORT

http://hoodpad.vip/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

  • hoodpad.vip → cdn.jsdelivr.netLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document50.2 KB98 ms1 alerts

Transaction #01

Request / response

URL

Navigation request GET HTTPS
https://hoodpad.vip/

IP / ASN

Country unknown 172.67.223.220

AS13335 · CLOUDFLARENET

Requested by
Not recorded

Resource information

File type
HTML document, Unicode text, UTF-8 text, with very long lines (3806)
MIME type
text/html; charset=UTF-8
First seen (UTC)
15 Oct 2026 · 16:32:27.739 UTC
Last seen (UTC)
18 Oct 2026 · 00:38:04.364 UTC
Times seen
1601
Size
50.2 KB (51432 bytes)
MD5
071ccc8c678cdcdf843b5e44938b4199
SHA1
8ec25fad68a8169c0834d3625f6d34b1ab14cd0b
SHA256
e6cfed787cc292da01a4db3eea42662bc80688e1db4390b3aacafc9ab868f1e1

Certificate information

Issuer
Let's Encrypt · YE1
Subject
hoodpad.vip
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
58:7C:B5:E5:1F:A4:58:19:29:05:01:A8:58:DC:F1:26:85:CC:D6:7F
Valid from
Thu, 08 Oct 2026 08:06:22 GMT
Valid until
Wed, 06 Jan 2027 08:06:21 GMT

Technology fingerprints

  • jsDelivr (CDN)
  • Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: hoodpad.vip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Sat, 17 Oct 2026 21:43:03 GMT
content-type: text/html; charset=UTF-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UrbfKNtqtOc06GQjibF2AFgZBjZjY87pn1FclTWrOmKxnx5RiMv849yQUbPFjBylUAKmyTogtWA4bgbNYr2AjRnDTHROMluH4fDdRMFIXRYRNQpZu2cTbA323%2Bic%2Fg%3D%3D"}]}
priority: u=0,i
vary: Accept-Encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
content-encoding: zstd
cf-ray: a4c27a0819d45690-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET200script494.0 KB25 ms—
GET404img274 B13 ms1 alerts
3 visible / 3 matching / 3 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot