urlquery.net
WEBSITE ANALYSIS REPORT

http://ejb881.com/verify/bbb006af?t=1757848690685&host=

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document5.4 KB401 ms—
GET200script9.9 KB53 ms1 alerts
GET200img6.0 KB30 ms1 alerts
GETNo responseimg0 B0 ms—
GET302document711.7 KB359 ms—
GET200document711.7 KB739 ms—
GET200stylesheet30.3 KB51 ms—
GET200script620 B398 ms—
GET200script262.8 KB97 ms—
GET200stylesheet5.6 KB361 ms—
GET200img6.0 KB5 ms1 alerts
GET200script90.5 KB535 ms—
GET200script10.3 KB203 ms—
GET200script19.4 KB400 ms—
GET200script67.0 KB358 ms—
GET200script16.6 KB362 ms—
GET200script21.2 KB387 ms—
GET200script1.2 KB393 ms—
GET200script38.0 KB15 ms—
GET200script17.4 KB367 ms—
GET200xhr803 B375 ms—
GET200font9.4 KB187 ms—
GET200font75.4 KB44 ms—
GET200script11.7 KB393 ms—
GET200script255 B401 ms—
GET200fetch18.3 KB385 ms—
GET200script34.6 KB1881 ms—
GET200img10.7 KB55 ms1 alerts
GET200img361.4 KB52 ms1 alerts

Transaction #32

Request / response

URL

GET HTTPS
https://cache.sgvafs.top/base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNTEwMTQvNjhlZDg3NWU2NTM2Zi53ZWJw.cache

IP / ASN

Country unknown 104.26.0.205

AS13335 · CLOUDFLARENET

Requested by
https://ejb881.com/newweb/?t=20251211

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS0 Zero SinkholedmediumMalicious

HTTP headers

Request headers

GET /base/aHR0cHM6Ly9pY28uZGFnZS50b3Avc3RvcmFnZS91cGxvYWQvMjAyNTEwMTQvNjhlZDg3NWU2NTM2Zi53ZWJw.cache HTTP/1.1
Host: cache.sgvafs.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ejb881.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Thu, 11 Dec 2025 15:33:35 GMT
content-type: image/webp
content-length: 370098
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: Content-Type
cache-control: public, max-age=86400, no-cache
last-modified: Mon, 13 Oct 2025 23:12:48 GMT
age: 4266792
accept-ranges: bytes
cf-cache-status: HIT
vary: accept-encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=IXTgMUlVajCRh8xtIKIj4GyOnWwAAPAjjqCRMOnwROq5%2BK%2BF2fVFIw%2FYkqBVm4K3HbNVe08GMa7zEcOrfNiAeRuXhmp77igEsGfaqKKigQ%3D%3D"}]}
cf-ray: 9ac60a8eaf30b28a-OSL
X-Firefox-Spdy: h2

GET200img11.5 KB205 ms—
GET200img1.6 KB396 ms—
GET200xhr2 B414 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot