urlquery.net
Investigate/Report/efe3dc45-e202-4054-9a83-e3bacc25809e
WEBSITE ANALYSIS REPORT

https://links.eu1.defend.egress.com/Warning?crId=6ad97e97535d7077058d196a&Domain=pensimo.ch&Threat=eNoLLi0uyEzOzC8tBgAWwAQ4&Lang=de&@OriginalLink=www.google.com&Base64Url=eNoFwlEKwyAMANDTdD8pNQP92KCM0rELeIIgzgpqikmR3X68d6ie8jRmjLEk5lTiEriaSqcYidTDYZxzsFPJX-4tE3idwV9ZI1hEhAnfE27gqcGnUwtZAs-wb_Cwd7Sv2LT_1lQpl5vw1UNc0x_4WyaG

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document3.2 KB117 ms—
GET200stylesheet4.4 KB25 ms—
GET200stylesheet42.0 KB99 ms—
GET200stylesheet565 B92 ms—
GET200script3 B25 ms—
GET200script2.3 KB24 ms—
GET200script161.3 KB46 ms—
GET200img3.1 KB36 ms—
GET200fetch2 B25 ms—
GET200img553 B26 ms—
POST200fetch316 B24 ms—
GET101websocket0 B69 ms—

Transaction #241

Request / response

URL

GET WSS
wss://links.eu1.defend.egress.comwss://links.eu1.defend.egress.com/_blazor?id=1XeQ5Il9xzY5vWSCu8ReZA

IP / ASN

United States 3.33.203.219

AS16509 · AMAZON-02

Requested by
https://links.eu1.defend.egress.com/Warning?crId=6ad97e97535d7077058d196a&Domain=pensimo.ch&Threat=eNoLLi0uyEzOzC8tBgAWwAQ4&Lang=de&@OriginalLink=www.google.com&Base64Url=eNoFwlEKwyAMANDTdD8pNQP92KCM0rELeIIgzgpqikmR3X68d6ie8jRmjLEk5lTiEriaSqcYidTDYZxzsFPJX-4tE3idwV9ZI1hEhAnfE27gqcGnUwtZAs-wb_Cwd7Sv2LT_1lQpl5vw1UNc0x_4WyaG

Resource information

File type
Not recorded
MIME type
text/plain
First seen (UTC)
Not recorded
Last seen (UTC)
22 Oct 2026 · 14:36:41.349 UTC
Times seen
19285209
Size
0 B (0 bytes)
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer
Amazon · Amazon RSA 2048 M01
Subject
links.eu1.defend.egress.com
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
DD:84:66:06:81:44:D4:7F:CC:22:D3:EA:10:2E:0F:60:24:A0:12:96
Valid from
Wed, 31 Dec 2025 00:00:00 GMT
Valid until
Fri, 29 Jan 2027 23:59:59 GMT

Technology fingerprints

  • Amazon ALB (Load balancers)
  • Amazon Web Services (PaaS)
  • WebSocket (Miscellaneous)
  • HSTS (Security)

HTTP headers

Request headers

GET /_blazor?id=1XeQ5Il9xzY5vWSCu8ReZA HTTP/1.1
Host: links.eu1.defend.egress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/140.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-WebSocket-Version: 13
Origin: https://links.eu1.defend.egress.com
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: g1UfMxJOMfni6SGNg/nxJQ==
Sec-GPC: 1
Connection: Upgrade
Cookie: AWSALB=555CasTif0HCAhnfE+E1yvHGaxXk2c5vUVA6Ox1vxwmYzgieOVWLkfwj1/CfL3J5j5B6VQIMA5pmZAg/VawkKgXHOgPfDMIeF9cXhc2PQIIpKuU0wTCpFbtV+Tut; AWSALBCORS=555CasTif0HCAhnfE+E1yvHGaxXk2c5vUVA6Ox1vxwmYzgieOVWLkfwj1/CfL3J5j5B6VQIMA5pmZAg/VawkKgXHOgPfDMIeF9cXhc2PQIIpKuU0wTCpFbtV+Tut; .AspNetCore.Antiforgery.1uQ7vusm3jk=CfDJ8C_A1tsdhUxNiycDLb-cE-iGeXhbrInQLaELhzEJqrQZUH5GVQ4XGoo9Kj0h9WWiN9xo2oWX1iK8m07O0IRLr3SRn5ajGL5fI2fRZHhjlqqFQXNFDU4T4F34XSjAnNFaVywvN_yS8PnughbIO9Pwc9Y
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

Response headers

HTTP/1.1 101 Switching Protocols
Date: Thu, 22 Oct 2026 09:26:33 GMT
Connection: upgrade
Set-Cookie: AWSALB=hTsLUtvZoEKjX6AgU+yP1X5beOIcJrkN69zIffJANiazRQ1ZfKBp3wXzxKRt3Foi+WzwzGUm8lY5TY6G+j23FH1fTEz3zSjuR2QLEnqpb5tluXomIFxeGGKJlfV/; Expires=Thu, 29 Oct 2026 09:26:33 GMT; Path=/
AWSALBCORS=hTsLUtvZoEKjX6AgU+yP1X5beOIcJrkN69zIffJANiazRQ1ZfKBp3wXzxKRt3Foi+WzwzGUm8lY5TY6G+j23FH1fTEz3zSjuR2QLEnqpb5tluXomIFxeGGKJlfV/; Expires=Thu, 29 Oct 2026 09:26:33 GMT; Path=/; SameSite=None; Secure
Upgrade: websocket
X-Robots-Tag: noindex
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: same-origin
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com/; img-src 'self' https:; font-src 'self' https: https://fonts.gstatic.com; connect-src https: ws: wss:; object-src 'none'
Strict-Transport-Security: max-age=2592000; preload
Sec-WebSocket-Accept: j2BGPuRH+s/0Z5/wdthlkVKzhW4=
Sec-WebSocket-Extensions: permessage-deflate
GET200font27.7 KB25 ms—
GET302document0 B66 ms—
POST200fetch316 B25 ms—
GET101websocket0 B70 ms—
GET200document648.2 KB140 ms—
POST200beacon0 B25 ms—
GET200script192.3 KB66 ms—
GET200img1.7 KB266 ms—
GET200img786 B11 ms—
GET200img435 B10 ms—
GET200img196 B11 ms—
GET200img617 B12 ms—
GET200img349 B12 ms—
GET200img748 B11 ms—
GET200font39.2 KB86 ms—
GET200font53.9 KB96 ms—
GET200font53.9 KB81 ms—
GET200script253.9 KB29 ms—
GET200img5.3 KB14 ms—
GET200script43.0 KB12 ms—
GET200script125.4 KB13 ms—
GET200script111.4 KB15 ms—
GET200script1.9 KB13 ms—
GET200script3.1 KB10 ms—
POST200fetch92 B70 ms—
POST303document0 B43 ms—
GET200document207.5 KB122 ms—
GET200fetch777.6 KB593 ms—
GET200script1.65 MB54 ms—
GET200stylesheet237.7 KB26 ms—
GET200font15.0 KB18 ms—
GET200img1.6 KB82 ms—
GET200img157 B86 ms—
GET200script158 B12 ms—
GET200script159 B12 ms—
GET200img1.4 KB26 ms—
GET200img19.9 KB147 ms—
GET200img16.0 KB140 ms—
50 visible / 367 matching / 367 captured
First Next →
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot