urlquery.net
WEBSITE ANALYSIS REPORT

http://bastionyielmere.net/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document0 B0 ms5 alerts
GET200document116.8 KB459 ms—
GET200script83.6 KB33 ms—
GET200stylesheet21.4 KB89 ms—
GET200stylesheet14.1 KB216 ms—
GET200stylesheet83.7 KB220 ms—
GET200script151.5 KB421 ms—
GET200script2.7 KB229 ms—
GET200img32.2 KB197 ms—
GET200img54.6 KB474 ms—
GET200img49.0 KB420 ms—
GET200img71.8 KB437 ms—
GET200font7.7 KB70 ms—
GET200font7.8 KB57 ms—
GET200font7.6 KB49 ms—
GET200font7.6 KB43 ms—
GET200font7.7 KB51 ms—
GET200lazy-imageset576 B106 ms—
GET200lazy-imageset10.2 KB521 ms—
GET200lazy-imageset5.1 KB211 ms—
GET200lazy-imageset3.2 KB213 ms—
GET200lazy-imageset5.2 KB216 ms—
GET200lazy-img469 B214 ms—
GET200script325.2 KB117 ms—
GET200script5.2 KB217 ms—
GET200script29.2 KB46 ms—
GET200stylesheet19.9 KB262 ms—
GET200img28.3 KB289 ms—
GET200img664 B197 ms—
GET200script1.2 KB67 ms—
GET302script0 B65 ms—
GET302script0 B78 ms—
POST200fetch15 B103 ms—
GET200img68.7 KB20 ms—
GET200script0 B107 ms—
GET200script0 B112 ms—
GET200script99.7 KB176 ms—
GET200script210.8 KB158 ms—
GET200script252.8 KB12 ms—
POST200fetch11 B326 ms1 alerts
POST200fetch11 B125 ms1 alerts

Transaction #03

Request / response

URL

POST HTTPS
https://api.studlink-proof.pro/engagement/ping

IP / ASN

Country unknown 104.21.73.179

AS13335 · CLOUDFLARENET

Requested by
https://finsy7-omnis36.cyou/?d=ev3sNTKR7hXtxf%2FQd%2BpuChiS0zwmeBKZkWLarcTniV%2FQey54dXSGhrWrBEa49KZyp3tRw4GR5%2BajPocFTycYdaaANthG%2BEbJLgG240b6onUDix88ELeMigpUY%2BLPPP9DI3aJ%2FvE%2FsGbqDrhF7OBEy7%2BnV7BwlvadyiYDUWaegIIMD5cj%2FZ0pTxN%2B7hINrQN0ObwUPQDl3nfJh1q6Jfe0KECJcsAzZPW7Ol6w%2FUOJQv92fcD3d2vKv50IYznGK2X3&on=Bastion+Yielmere

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

POST /engagement/ping HTTP/1.1
Host: api.studlink-proof.pro
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Content-Type: text/plain;charset=UTF-8
Referer: https://finsy7-omnis36.cyou/
Content-Length: 58
Origin: https://finsy7-omnis36.cyou
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4

Response headers

HTTP/3 200 
server: cloudflare
date: Fri, 23 Oct 2026 03:04:28 GMT
content-type: application/json; charset=UTF-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=6ShzTP7qRLjUxvxOVa5P9xYGDFZObkXD5Kf2bhd%2FnQFLhO29C1AapXU8TJq0rA4MDDfdOxdVmg7D3%2Bhg%2FNiAnlLeuuTerTVfVbT00ahnqvVsSw41HxgdTFt3AV99YwyOep8aLdSIVPs9"}]}
priority: u=4,i=?0
vary: Accept-Encoding
access-control-allow-origin: *
content-encoding: gzip
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a4ed83b6ffb523eb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

Request body

Captured 58 B · Displayed 58 B
{"uuid":"69ed64e0-cf4c-90","landing_type":1,"t":10,"s":16}
POST200fetch11 B117 ms1 alerts
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot