urlquery.net
WEBSITE ANALYSIS REPORT

http://rewards-zama.lol/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document1.36 MB367 ms1 alerts
GET200script908.9 KB14 ms1 alerts
POST200fetch423 B151 ms—
OPTIONS204fetch0 B152 ms—
POST200fetch423 B56 ms—
POST200fetch229 B19 ms—
OPTIONSNo responsefetch0 B0 ms—
POST200fetch422 B91 ms—
POST200fetch422 B63 ms2 alerts
POST200fetch98 B30 ms—
OPTIONS204fetch0 B73 ms—
OPTIONS204fetch0 B66 ms—
OPTIONS204fetch0 B81 ms—
OPTIONS204fetch0 B117 ms2 alerts
OPTIONS200fetch0 B39 ms—
GET200script4.92 MB68 ms1 alerts
GET200fetch22.1 KB91 ms—
GET200script181 B125 ms—
GETNo responsefetch0 B0 ms1 alerts
GET200fetch14 B423 ms1 alerts

Transaction #44

Request / response

URL

GET HTTPS
https://rewards-zama.lol/assets/secure.php?req=ping

IP / ASN

Country unknown 104.21.81.49

AS13335 · CLOUDFLARENET

Requested by
https://rewards-zama.lol/

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /assets/secure.php?req=ping HTTP/1.1
Host: rewards-zama.lol
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Tue, 29 Sep 2026 05:32:57 GMT
content-type: application/json
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=uBE3xINfdAHy6lc3FLoVlvbuSYeLji34o%2FJf1Ku2dObaLhkDZJdhNANBZnCWIsy4tmngp%2F5jPqOEvQMfxzNYXbZDK9lj%2FUd31G0tHGbqW8aFQ2FKVBCcECpx2Rt0bV%2BoJPFV"}]}
priority: u=4,i=?0
access-control-allow-origin: *
access-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS
access-control-allow-headers: Content-Type, Cache-Control
cache-control: no-cache
content-encoding: gzip
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a4289c399c7f0afa-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET200fetch14 B866 ms1 alerts
GET200stylesheet9.9 KB126 ms—
GET302img0 B345 ms—
GET302img0 B341 ms—
GET302img0 B340 ms—
GET302img0 B321 ms—
GET302img0 B268 ms—
GET302img0 B317 ms—
GET302img0 B310 ms—
GET302img0 B321 ms—
GET302img0 B306 ms—
GET302img0 B288 ms—
GET302img0 B296 ms—
GET302img0 B293 ms—
GET302img0 B301 ms—
GET302img0 B298 ms—
GET302img0 B250 ms—
GET302img0 B254 ms—
GET302img0 B265 ms—
GET302img0 B257 ms—
GET302img0 B260 ms—
GET302img0 B260 ms—
GET302img0 B246 ms—
GET302img0 B246 ms—
GET302img0 B213 ms—
GET302img0 B249 ms—
GET302img0 B261 ms—
GET302img0 B257 ms—
GET302img0 B260 ms—
GET302img0 B264 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot