WEBSITE ANALYSIS REPORT

https://dravora-kxt-zenveta-a9x1dw43.pages.dev/thn-yjm-uio-lkh?welcome=103835709772152&%3bstt=103835709772152&%3bname_stt=horseman%20elite%20auction

17 Oct 2026 · 23:32:11.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:31:23.983 GET 200 document 715 B 64 ms 4 alerts

23:31:24.253 GET 200 script 590.6 KB 60 ms 4 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://dravora-kxt-zenveta-a9x1dw43.pages.dev/static/js/main.9ff7820e.js

IP / ASN

172.66.44.111

AS13335 · CLOUDFLARENET

Requested by: https://dravora-kxt-zenveta-a9x1dw43.pages.dev/thn-yjm-uio-lkh?welcome=103835709772152&%3bstt=103835709772152&%3bname_stt=horseman%20elite%20auction

Resource information

File type: JavaScript source, ASCII text, with very long lines (65465)
MIME type: text/javascript; charset=utf-8
First seen (UTC): 03 Jul 2026 · 21:27:16.859 UTC
Last seen (UTC): 20 Oct 2026 · 09:18:44.439 UTC
Times seen: 341

Size: 590.6 KB (604811 bytes)
MD5: c34e3e4e5b7e8078bc9a5ef06c28d2e9
SHA1: 1928c2ce5a17771883eeeb763a5de453f5c197d5
SHA256: 0fdef61ae64dde1625136fd374133de9493f1e9699487cd62328313d13b9db72

Certificate information

Issuer: Google Trust Services · WE1
Subject: dravora-kxt-zenveta-a9x1dw43.pages.dev
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: D4:77:09:29:B3:90:95:A5:8F:99:BB:AE:62:7E:A1:C4:39:37:42:00
Valid from: Sun, 11 Oct 2026 20:13:06 GMT
Valid until: Sat, 09 Jan 2027 21:12:57 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /static/js/main.9ff7820e.js HTTP/1.1
Host: dravora-kxt-zenveta-a9x1dw43.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://dravora-kxt-zenveta-a9x1dw43.pages.dev/thn-yjm-uio-lkh?welcome=103835709772152&%3bstt=103835709772152&%3bname_stt=horseman%20elite%20auction
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Sat, 17 Oct 2026 23:31:24 GMT
content-encoding: br
content-type: text/javascript; charset=utf-8
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
priority: u=3,i=?0
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=yNHe%2FLKTbil92iJ8%2Fr6GmT2s72JywRDsHegXuHV%2FgWA1SuZ7RZ2cMFY2Kv8hosUHiZTsQAUc1psiVzlGhyVrD1KPdP0111zBuSmRbaONJiryYjA8oh6A1chMf0c6uD7jsAbEC3IJga8AbXaUXgM%2FwwCjmyu4Dst91Q%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
etag: W/"400905987e68c21d3403026844430906"
cf-ray: a4c318bc98662678-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

23:31:24.255 GET 200 stylesheet 79.9 KB 14 ms 4 alerts

23:31:24.448 GET 200 document 364.9 KB 465 ms —

23:31:24.733 GET No response fetch 0 B 0 ms —

23:31:24.804 GET 200 stylesheet 1.75 MB 69 ms —

23:31:24.817 POST 200 beacon 94 B 72 ms —

23:31:24.914 GET 200 img 3.7 KB 22 ms —

23:31:25.097 GET 200 img 19.9 KB 9 ms —

23:31:25.099 GET 200 script 321.5 KB 11 ms —

23:31:25.103 GET 200 script 703.7 KB 18 ms —

23:31:25.106 GET 200 script 912.6 KB 20 ms —

23:31:25.108 GET 200 script 974.0 KB 26 ms —

23:31:25.111 GET 200 script 32.5 KB 22 ms —

23:31:25.113 GET 200 script 593.8 KB 22 ms —

23:31:25.114 GET 200 script 142.7 KB 23 ms —

23:31:25.116 GET 200 script 236.3 KB 21 ms —

23:31:25.117 GET 200 script 481.5 KB 17 ms —

23:31:25.120 GET 200 script 96.1 KB 17 ms —

23:31:25.121 GET 200 script 37.1 KB 16 ms —

23:31:25.123 GET 200 script 70.3 KB 13 ms —

23:31:25.424 GET 200 script 28.1 KB 10 ms —

23:31:25.428 GET 200 script 398.5 KB 13 ms —

23:31:25.430 GET 200 script 31.8 KB 11 ms —

23:31:25.432 GET 200 script 45.2 KB 11 ms —

23:31:25.638 GET 200 xhr 22 B 169 ms —

23:31:25.658 GET 200 img 177.2 KB 33 ms —

23:31:25.661 GET 200 img 25.8 KB 30 ms —

23:31:25.662 GET 200 img 25.1 KB 41 ms —

23:31:25.663 GET 200 img 39.5 KB 40 ms —

23:31:25.664 GET 200 img 19.7 KB 38 ms —

23:31:25.807 GET 200 font 29.2 KB 9 ms —

23:31:25.810 GET 200 font 178.9 KB 12 ms —

23:31:26.389 POST 200 xhr 94 B 50 ms —

23:31:26.577 POST 200 xhr 94 B 53 ms —

23:31:27.426 POST 200 xhr 94 B 48 ms —

23:31:27.491 POST 200 xhr 94 B 51 ms —

23:31:34.413 POST 200 xhr 94 B 52 ms —

23:31:35.422 GET 200 script 206 B 9 ms —

23:31:35.426 GET 200 xhr 264.4 KB 183 ms —

https://dravora-kxt-zenveta-a9x1dw43.pages.dev/thn-yjm-uio-lkh?welcome=103835709772152&%3bstt=103835709772152&%3bname_stt=horseman%20elite%20auction

Domain graph

Hostnames

Connections

Network requests

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://dravora-kxt-zenveta-a9x1dw43.pages.dev/thn-yjm-uio-lkh?welcome=103835709772152&%3bstt=103835709772152&%3bname_stt=horseman%20elite%20auction

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://dravora-kxt-zenveta-a9x1dw43.pages.dev/thn-yjm-uio-lkh?welcome=103835709772152&%3bstt=103835709772152&%3bname_stt=horseman%20elite%20auction

Domain graph

Network requests