urlquery.net
Investigate/Report/c79fe654-0846-4e59-aa1b-de34e6a41fa2
WEBSITE ANALYSIS REPORT

http://rewards-zama.lol/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document1.36 MB367 ms1 alerts
GET200script908.9 KB14 ms1 alerts
POST200fetch423 B151 ms—
OPTIONS204fetch0 B152 ms—
POST200fetch423 B56 ms—
POST200fetch229 B19 ms—
OPTIONSNo responsefetch0 B0 ms—
POST200fetch422 B91 ms—
POST200fetch422 B63 ms2 alerts

Transaction #52

Request / response

URL

POST HTTPS
https://arbitrum.gateway.tenderly.co/

IP / ASN

United States 35.227.193.242

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by
https://rewards-zama.lol/

Resource information

File type
JSON text data
MIME type
application/json; charset=utf-8
First seen (UTC)
29 Sep 2026 · 01:29:50.937 UTC
Last seen (UTC)
29 Sep 2026 · 17:36:14.870 UTC
Times seen
145
Size
422 B (422 bytes)
MD5
72c21bc0915f1f263c4858c65a59bf3b
SHA1
d6def455384192f052d1bef3756e2af41a9cc001
SHA256
4ef8f608bd56372bd9513c9196373b15aecbce54adcfc2f0860477525d574bb6

Certificate information

Issuer
Let's Encrypt · YR2
Subject
*.gateway.tenderly.co
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
3C:49:6B:54:E6:90:83:A7:6D:1D:85:6C:CE:96:95:BA:4F:5E:55:23
Valid from
Fri, 14 Aug 2026 17:05:13 GMT
Valid until
Thu, 12 Nov 2026 17:05:12 GMT

Technology fingerprints

  • Google Cloud (IaaS)
  • Envoy (Reverse proxies)
  • Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Quad9 DNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

POST / HTTP/1.1
Host: arbitrum.gateway.tenderly.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Content-Type: application/json
Content-Length: 136
Origin: https://rewards-zama.lol
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
access-control-allow-origin: *
content-type: application/json; charset=utf-8
vary: Origin
x-tdly-egress-limit: 1000000000
x-tdly-egress-remaining: 999972992
x-tdly-egress-reset-timestamp: 1790737760904
x-tdly-limit: 20
x-tdly-remaining: 16
x-tdly-reset-timestamp: 1790659977752
date: Tue, 29 Sep 2026 05:32:56 GMT
content-length: 422
x-envoy-upstream-service-time: 5
server: envoy
via: 1.1 google
alt-svc: h3=":443"; ma=2592000
X-Firefox-Spdy: h2

Request body

Captured 136 B · Displayed 136 B
{"jsonrpc":"2.0","method":"eth_call","params":[{"to":"0x967530969F5e5c94E0dC7247e9355e62e0ED65B2","data":"0x3bc5de30"},"latest"],"id":1}
POST200fetch98 B30 ms—
OPTIONS204fetch0 B73 ms—
OPTIONS204fetch0 B66 ms—
OPTIONS204fetch0 B81 ms—
OPTIONS204fetch0 B117 ms2 alerts
OPTIONS200fetch0 B39 ms—
GET200script4.92 MB68 ms1 alerts
GET200fetch22.1 KB91 ms—
GET200script181 B125 ms—
GETNo responsefetch0 B0 ms1 alerts
GET200fetch14 B423 ms1 alerts
GET200fetch14 B866 ms1 alerts
GET200stylesheet9.9 KB126 ms—
GET302img0 B345 ms—
GET302img0 B341 ms—
GET302img0 B340 ms—
GET302img0 B321 ms—
GET302img0 B268 ms—
GET302img0 B317 ms—
GET302img0 B310 ms—
GET302img0 B321 ms—
GET302img0 B306 ms—
GET302img0 B288 ms—
GET302img0 B296 ms—
GET302img0 B293 ms—
GET302img0 B301 ms—
GET302img0 B298 ms—
GET302img0 B250 ms—
GET302img0 B254 ms—
GET302img0 B265 ms—
GET302img0 B257 ms—
GET302img0 B260 ms—
GET302img0 B260 ms—
GET302img0 B246 ms—
GET302img0 B246 ms—
GET302img0 B213 ms—
GET302img0 B249 ms—
GET302img0 B261 ms—
GET302img0 B257 ms—
GET302img0 B260 ms—
GET302img0 B264 ms—
50 visible / 141 matching / 141 captured
First Next →
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot