urlquery.net
Investigate/Report/f4e029f8-c791-419d-b382-06022793a00a
WEBSITE ANALYSIS REPORT

http://grabber.xoilac66.live/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

  • grabber.xoilac66.live → xoilaczzqipxt.tvRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET301document4.4 KB87 ms3 alerts

Transaction #07

Request / response

URL

Navigation request GET HTTPS
https://grabber.xoilac66.live/

IP / ASN

Country unknown 188.114.96.1

AS13335 · CLOUDFLARENET

Requested by
Not recorded

Resource information

File type
Not recorded
MIME type
text/html; charset=UTF-8
First seen (UTC)
Not recorded
Last seen (UTC)
18 Oct 2026 · 02:37:14.117 UTC
Times seen
19175537
Size
4.4 KB (4550 bytes)
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer
Google Trust Services · WE1
Subject
xoilac66.live
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
3A:A4:3D:E6:29:F3:21:9F:37:CE:B2:04:90:A9:49:B1:85:24:DB:56
Valid from
Thu, 12 Feb 2026 16:18:46 GMT
Valid until
Wed, 13 May 2026 17:17:06 GMT

Technology fingerprints

  • Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DigiCert UltraDNS SinkholedmediumMalicious
Hagezi Threat Feed SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: grabber.xoilac66.live
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 301 Moved Permanently
date: Sat, 04 Apr 2026 06:36:58 GMT
content-length: 0
location: https://xoilaczzqipxt.tv/
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=mSBa3g5iwXXQFsNA6mt2tQjVapecOBMOGg0eIGOnRf7C9T1BBi5aPgvXryjMz%2Fl7OoFWGjpfIM4JMzjEJcSqhy7Q3CNwgrHh9VTaXMlvEeo1dWwvFQEbmzfyu1sgBGXkHZ%2FMHON%2BmUY%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
server: cloudflare
cf-ray: 9e6e4d42abb7b4f3-OSL
X-Firefox-Spdy: h2
GET403document4.4 KB115 ms1 alerts
GET403document4.4 KB9 ms1 alerts
GET200stylesheet23.5 KB3 ms1 alerts
GET200img715 B2 ms1 alerts
GET200img3.1 KB5 ms1 alerts
GET403img4.4 KB7 ms1 alerts
7 visible / 7 matching / 7 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot