urlquery.net
WEBSITE ANALYSIS REPORT

http://www.rripphiobkbcwrv6.hg039.cc/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GETNo responsedocument0 B0 ms5 alerts
GET200document0 B0 ms5 alerts
GET200document12.3 KB161 ms5 alerts
GET200stylesheet19.3 KB329 ms5 alerts
GET200stylesheet292.6 KB974 ms5 alerts
GET200stylesheet106.1 KB808 ms5 alerts

Transaction #02

Request / response

URL

GET HTTP
http://www.rripphiobkbcwrv6.hg039.cc/_next/static/css/484c840239a025432effd6ecc373d498fa764368_CSS.bd440317.chunk.css

IP / ASN

Hong Kong 52.128.227.253

AS45753 · Netsec Limited

Requested by
http://www.rripphiobkbcwrv6.hg039.cc/en/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
CIRA Canadian Shield DNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious
Quad9 DNS SinkholedmediumMalicious
Cloudflare DNS SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing

HTTP headers

Request headers

GET /_next/static/css/484c840239a025432effd6ecc373d498fa764368_CSS.bd440317.chunk.css HTTP/1.1
Host: www.rripphiobkbcwrv6.hg039.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate
Sec-GPC: 1
Connection: keep-alive
Referer: http://www.rripphiobkbcwrv6.hg039.cc/en/
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.24.0 (Ubuntu)
Date: Sat, 17 Oct 2026 22:53:22 GMT
Content-Type: text/css
Content-Length: 108633
Last-Modified: Tue, 21 Jul 2026 06:40:44 GMT
Connection: keep-alive
ETag: "6a5f146c-1a859"
Expires: Sat, 24 Oct 2026 22:53:22 GMT
Cache-Control: max-age=604800, public, max-age=604800
Accept-Ranges: bytes

GET200stylesheet52.2 KB651 ms5 alerts
GET200script852 B326 ms5 alerts
GET200img9.2 KB1085 ms5 alerts
GET200img207 B1084 ms5 alerts
GET200img533 B1257 ms5 alerts
GET200img368.2 KB1576 ms5 alerts
GET200img8.0 KB1628 ms5 alerts
GET200img13.0 KB1629 ms5 alerts
GET200img9.5 KB1629 ms5 alerts
GET200img2.1 KB1417 ms5 alerts
GET200img5.7 KB1577 ms5 alerts
GET200img3.8 KB1735 ms5 alerts
GET200img48.4 KB1741 ms5 alerts
GET200img11.0 KB1740 ms5 alerts
GET200img9.7 KB1787 ms5 alerts
GET200img9.0 KB1789 ms5 alerts
GET200img9.0 KB1790 ms5 alerts
GET200img2.4 KB1896 ms5 alerts
GET200img881 B1899 ms5 alerts
GET200img834 B1900 ms5 alerts
GET200img183.1 KB4200 ms5 alerts
GET200img599 B1950 ms5 alerts
GET200img224 B1949 ms5 alerts
GET200img696 B2055 ms5 alerts
GET200img1.3 KB2059 ms5 alerts
GET200img693 B1080 ms5 alerts
GET200img576 B1080 ms5 alerts
GET200font54.1 KB575 ms5 alerts
GET200img564 B160 ms5 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot