urlquery.net
Investigate/Report/e70f681a-e8f4-4c7b-b445-c002aea19c56
WEBSITE ANALYSIS REPORT

http://m32.amnoboe.com/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document1.0 KB1173 ms2 alerts
GET200script33.4 KB974 ms2 alerts

Transaction #02

Request / response

URL

GET HTTPS
https://m32.amnoboe.com/js/fingerprint/iife.min.js

IP / ASN

United States 103.224.182.219

AS133618 · Trellian Pty. Limited

Requested by
https://m32.amnoboe.com/

Resource information

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (33896), with CRLF line terminators
MIME type
text/javascript
First seen (UTC)
01 May 2023 · 16:20:27.000 UTC
Last seen (UTC)
13 Sep 2026 · 23:50:56.188 UTC
Times seen
73864
Size
33.4 KB (34240 bytes)
MD5
63f9fd621d1fbd53b7c5856e58c11ccd
SHA1
a46973c2fbdbfeb159e0d717a90f88307e274012
SHA256
c6bc28686490aba34a53ab3b709afa1fd73c21e60feb25608b09f23efe170089

Certificate information

Issuer
Let's Encrypt · R13
Subject
gamedefender.site
Protocol / cipher
TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint
D6:00:72:54:E8:98:73:6F:C6:41:16:49:B9:73:0C:F9:00:6C:7A:19
Valid from
Sat, 14 Feb 2026 15:06:57 GMT
Valid until
Fri, 15 May 2026 15:06:56 GMT

Technology fingerprints

  • Apache HTTP Server (Web servers)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Hagezi Threat Feed SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /js/fingerprint/iife.min.js HTTP/1.1
Host: m32.amnoboe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m32.amnoboe.com/
Cookie: __tad=1771403829.2968620
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
date: Wed, 18 Feb 2026 08:37:09 GMT
server: Apache
last-modified: Mon, 28 Apr 2025 06:31:27 GMT
etag: "85c0-633d0d56a6dc0"
accept-ranges: bytes
content-length: 34240
content-type: text/javascript
connection: close
GETNo responseimg0 B336 ms2 alerts
GET302document0 B494 ms2 alerts
GETNo responsedocument0 B0 ms2 alerts
GET200document15.1 KB423 ms2 alerts
GET200script117.9 KB64 ms1 alerts
GET403fetch146 B102 ms2 alerts
GET200img0 B102 ms2 alerts
GET200subdocument9.4 KB459 ms—
POST200xhr3.2 KB255 ms2 alerts
GET200img43 B35 ms2 alerts
GET200img43 B300 ms1 alerts
GET200subdocument68.2 KB1432 ms2 alerts
POST200xhr0 B34 ms2 alerts
GET200img283 B18 ms2 alerts
GET200img17.6 KB29 ms2 alerts
GET200font24.2 KB27 ms2 alerts
GET200script15 B145 ms1 alerts
GET200other71.1 KB71 ms—
GET200other12.5 KB123 ms—
GET200img15 B142 ms1 alerts
POST200xhr0 B33 ms2 alerts
POST200xhr0 B34 ms2 alerts
POST200xhr0 B33 ms2 alerts
25 visible / 25 matching / 25 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot