WEBSITE ANALYSIS REPORT

http://ur0.jp/UwG28

25 Apr 2026 · 10:03:23.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

10:02:58.907 GET 302 document 175.7 KB 1907 ms 3 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://ur0.jp/UwG28

IP / ASN

160.16.237.149

AS9370 · SAKURA Internet Inc.

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 10:29:54.605 UTC
Times seen: 19304282

Size: 175.7 KB (179911 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R13
Subject: ur0.jp
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: FE:E5:9E:CD:F3:50:C3:59:6E:87:CB:0B:27:46:ED:AA:C0:66:14:A7
Valid from: Sat, 28 Feb 2026 20:27:40 GMT
Valid until: Fri, 29 May 2026 20:27:39 GMT

Technology fingerprints

PHP:7.4.33 (Programming languages)
Apache HTTP Server:2.4.37 (Web servers)
OpenSSL:1.1.1k (Web server extensions)
CentOS (Operating systems)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /UwG28 HTTP/1.1
Host: ur0.jp
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 302 Found
Date: Sat, 25 Apr 2026 10:02:59 GMT
Server: Apache/2.4.37 (centos) OpenSSL/1.1.1k PHP/7.4.33
X-Powered-By: PHP/7.4.33
Set-Cookie: ref_id=5723616; expires=Sat, 25-Apr-2026 10:03:29 GMT; Max-Age=30
location: /
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

10:03:00.002 GET 302 document 175.7 KB 267 ms 3 alerts

10:03:00.277 GET 200 document 175.7 KB 2445 ms 1 alerts

10:03:01.743 GET 200 script 517.9 KB 290 ms —

10:03:01.943 GET 200 script 1010 B 211 ms —

10:03:02.140 GET 200 script 847.7 KB 387 ms —

10:03:02.144 GET 200 img 11.5 KB 268 ms 1 alerts

10:03:02.146 GET 200 img 752 B 265 ms 1 alerts

10:03:02.209 GET 200 img 0 B 17 ms —

10:03:02.221 GET 200 img 0 B 32 ms —

10:03:02.287 GET 200 img 0 B 17 ms —

10:03:02.360 GET 200 img 0 B 17 ms —

10:03:02.371 GET 200 img 0 B 28 ms —

10:03:02.652 GET 200 subdocument 53.0 KB 32 ms —

10:03:02.870 GET 200 stylesheet 81.4 KB 22 ms —

10:03:02.873 GET 200 script 847.7 KB 49 ms —

10:03:03.223 GET 200 font 39.2 KB 99 ms —

10:03:03.229 GET 200 font 39.2 KB 165 ms —

10:03:03.240 GET 200 script 102 B 19 ms —

10:03:03.265 GET 200 script 847.7 KB 35 ms —

10:03:03.319 GET 200 img 2.2 KB 10 ms —

10:03:03.860 GET 200 img 0 B 21 ms —

10:03:04.707 POST 200 xhr 2.5 KB 97 ms —

10:03:04.853 POST 200 fetch 0 B 22 ms —

10:03:04.880 POST 200 fetch 0 B 23 ms —

10:03:04.909 POST 200 fetch 0 B 21 ms —

10:03:04.936 POST 200 fetch 0 B 20 ms —

http://ur0.jp/UwG28

Domain graph

Hostnames

Connections