urlquery.net
Investigate/Report/beccd2b1-a03a-42af-95bd-5d45dbdfeb7d
WEBSITE ANALYSIS REPORT

http://ibdssonline.com/login

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET308document0 B85 ms4 alerts
GET200document13.8 KB85 ms1 alerts

Transaction #04

Request / response

URL

Navigation request GET HTTPS
https://www.ibdssonline.com/login

IP / ASN

United States 64.29.17.65

AS16509 · AMAZON-02

Requested by
Not recorded

Resource information

File type
HTML document, Unicode text, UTF-8 text, with very long lines (14093), with no line terminators
MIME type
text/html; charset=utf-8
First seen (UTC)
27 Sep 2026 · 13:08:17.358 UTC
Last seen (UTC)
27 Sep 2026 · 15:26:21.714 UTC
Times seen
4
Size
13.8 KB (14094 bytes)
MD5
538a6bdde6712b2df2d2a0ac4bea8ed2
SHA1
62e8c8eb1d6793d1efc5e12eb4a94c842d177347
SHA256
b027b6e26749caf612f2ff6cf7b6e6d15989e908ba6c70586716f35dbb6f12b2

Certificate information

Issuer
Let's Encrypt · YR2
Subject
www.ibdssonline.com
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
16:CA:AC:93:04:2B:B2:F2:72:BD:E1:49:AA:3C:94:32:3D:E9:29:43
Valid from
Sat, 26 Sep 2026 21:07:17 GMT
Valid until
Fri, 25 Dec 2026 21:07:16 GMT

Technology fingerprints

  • HSTS (Security)
  • Vercel (PaaS)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /login HTTP/1.1
Host: www.ibdssonline.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
access-control-allow-origin: *
age: 59905
cache-control: public, max-age=0, must-revalidate
content-disposition: inline
content-encoding: br
content-type: text/html; charset=utf-8
date: Sun, 27 Sep 2026 14:44:24 GMT
etag: W/"518dd058eb171908ee4fc46bffd9cd82"
server: Vercel
strict-transport-security: max-age=63072000
vary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch
x-matched-path: /login
x-nextjs-prerender: 1
x-nextjs-stale-time: 300
x-vercel-cache: HIT
x-vercel-id: arn1::ztrgh-1790520264158-b796bbb1b12a
X-Firefox-Spdy: h2
GET200font22.6 KB20 ms1 alerts
GET200font28.6 KB17 ms1 alerts
GET200stylesheet30.3 KB16 ms1 alerts
GET200script6.0 KB13 ms1 alerts
GET200script31.2 KB16 ms1 alerts
GET200script224.0 KB13 ms1 alerts
GET200script158.4 KB18 ms1 alerts
GET200script9.5 KB16 ms1 alerts
GET200script14.0 KB14 ms1 alerts
GET200script8.6 KB13 ms1 alerts
GET200img3.2 KB14 ms1 alerts
GET200img68.0 KB14 ms1 alerts
GET200img68.0 KB14 ms1 alerts
15 visible / 15 matching / 15 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot