urlquery.net
Investigate/Report/eb4d0ecb-a907-4abc-aa6e-01fe927df83d
WEBSITE ANALYSIS REPORT

http://gmxvmvptfm.com/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document19.3 KB267 ms2 alerts

Transaction #01

Request / response

URL

Navigation request GET HTTPS
https://gmxvmvptfm.com/

IP / ASN

Luxembourg 212.117.190.201

AS7979 · SERVERS-COM

Requested by
Not recorded

Resource information

File type
HTML document, Unicode text, UTF-8 text, with very long lines (8230)
MIME type
text/html; charset=utf-8
First seen (UTC)
19 Feb 2026 · 22:20:29.955 UTC
Last seen (UTC)
29 Sep 2026 · 04:07:19.894 UTC
Times seen
458
Size
19.3 KB (19812 bytes)
MD5
3aad8ef46eabfca814a46551950be5e8
SHA1
99dbdc75aae9adeb5a454d9e735d98d75727a871
SHA256
b295b71881a82688cf2869f81c19dcba05b8486676ecae1c33c1c30dc110a151

Certificate information

Issuer
Google Trust Services · WR1
Subject
gmxvmvptfm.com
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
A5:BA:F3:64:10:36:63:1A:D7:3C:38:03:B0:58:00:B8:2E:0F:B7:64
Valid from
Mon, 15 Dec 2025 14:09:38 GMT
Valid until
Sun, 15 Mar 2026 14:09:37 GMT

Technology fingerprints

  • Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
Hagezi Threat Feed SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: gmxvmvptfm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Thu, 26 Feb 2026 06:21:53 GMT
content-type: text/html; charset=utf-8
last-modified: Thu, 19 Feb 2026 10:07:39 GMT
vary: Accept-Encoding
etag: W/"6996e0eb-4d64"
timing-allow-origin: *
accept-ch: sec-ch-ua-wow64,sec-ch-ua-full-version-list,sec-ch-ua,sec-ch-ua-platform,sec-ch-ua-mobile,sec-ch-ua-full-version,sec-ch-ua-platform-version,sec-ch-ua-arch,sec-ch-ua-bitness,sec-ch-ua-model,sec-ch-width,sec-ch-viewport-width,sec-ch-viewport-height,sec-ch-dpr,sec-ch-device-memory,sec-ch-rtt,sec-ch-prefers-color-scheme,sec-ch-prefers-reduced-motion,sec-ch-prefers-reduced-transparency,sec-ch-prefers-contrast,sec-ch-forced-colors,sec-ch-prefers-reduced-data
content-encoding: gzip
X-Firefox-Spdy: h2
1 visible / 1 matching / 1 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot