urlquery.net
Investigate/Report/268e6493-0c77-47d7-b21d-e275b254eec5
WEBSITE ANALYSIS REPORT

https://n2cknem.github.io/microsoft/

public
Report tags
Submit tags
openphish
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

  • n2cknem.github.io → aadcdn.msftauth.netLoads from4 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document10.3 KB193 ms1 alerts

Transaction #01

Request / response

URL

Navigation request GET HTTPS
https://n2cknem.github.io/microsoft/

IP / ASN

United States 185.199.111.153

AS54113 · FASTLY

United States
Requested by
Not recorded

Resource information

File type
HTML document, Unicode text, UTF-8 text, with very long lines (350)
MIME type
text/html; charset=utf-8
First seen (UTC)
17 Oct 2026 · 20:31:30.686 UTC
Last seen (UTC)
17 Oct 2026 · 22:51:54.812 UTC
Times seen
4
Size
10.3 KB (10535 bytes)
MD5
0f538e9160a9196f4f6717ba77193db8
SHA1
d3cebb8ec179e8db518fda3f8090b28133a185da
SHA256
bcdd9972ec2a8a8a4dafb12ef39815030e8ec743853e066522fd7a10a9618849

Certificate information

Issuer
Let's Encrypt · YR1
Subject
*.github.io
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
14:2D:52:A3:EC:DB:FE:52:FF:F8:99:66:A8:A7:44:D1:71:99:8B:CB
Valid from
Wed, 30 Sep 2026 23:44:46 GMT
Valid until
Tue, 29 Dec 2026 23:44:45 GMT

Technology fingerprints

  • HSTS (Security)
  • GitHub Pages (PaaS)
  • Varnish (Caching)
  • Fastly (CDN)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious

HTTP headers

Request headers

GET /microsoft/ HTTP/1.1
Host: n2cknem.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: GitHub.com
content-type: text/html; charset=utf-8
last-modified: Sat, 17 Oct 2026 08:38:57 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"6ad33421-2927"
expires: Sat, 17 Oct 2026 16:29:58 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: A9A8:1F5E9D:306E08:360FBD:6AD3A02E
x-github-edge-region: swedencentral
accept-ranges: bytes
age: 0
date: Sat, 17 Oct 2026 20:30:58 GMT
via: 1.1 varnish
x-served-by: cache-bma-essb1270063-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1792269058.169261,VS0,VE146
vary: Accept-Encoding
x-fastly-request-id: 95c9428e3959473540d4a170f444c8ee471cd803
content-length: 3014
X-Firefox-Spdy: h2
GET200stylesheet111.5 KB22 ms—
GET200img3.6 KB26 ms—
GET200img45.5 KB6 ms—
GET200img16.8 KB3 ms—
5 visible / 5 matching / 5 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot