WEBSITE ANALYSIS REPORT

http://ipfs.io/ipfs/bafkreidyjcdnuu3fr7u5byl54fee673m2tok3rebiemtld6uo45574c7lm#generalbugs@zippenhop.com

15 Nov 2025 · 18:42:14.000 UTCpublic

Report tags: phishing
Submit tags

Request review

Phishing detected

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

18:41:53.420 GET 200 document 13.5 KB 99 ms 4 alerts

18:41:53.691 GET 200 stylesheet 6.2 KB 1551 ms 1 alerts

18:41:53.693 GET 200 stylesheet 139.1 KB 1731 ms 1 alerts

18:41:53.698 GET 200 img 5.2 KB 1223 ms 1 alerts

18:41:53.700 GET 200 script 68.0 KB 188 ms —

18:41:53.701 GET 200 script 18.7 KB 55 ms —

18:41:53.703 GET 200 script 47.8 KB 59 ms —

18:41:53.704 GET 200 script 83.6 KB 182 ms —

18:41:53.707 GET 200 script 49.8 KB 43 ms —

18:41:54.770 GET 200 img 1.0 KB 173 ms 1 alerts

18:41:54.773 GET 200 img 976 B 175 ms 1 alerts

18:41:54.776 GET 200 img 962 B 1556 ms 1 alerts

18:41:54.779 GET 200 img 1.0 KB 334 ms 1 alerts

18:41:54.781 GET 200 img 320 B 307 ms 1 alerts

18:41:54.782 GET 200 img 450 B 326 ms 1 alerts

18:41:54.786 GET 200 font 22.1 KB 1794 ms 1 alerts

18:41:54.787 GET 200 font 22.4 KB 1895 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://sh001.webhostbox.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff

IP / ASN

162.241.27.10

AS46606 · UNIFIEDLAYER-AS-1

Requested by: https://ipfs.io/ipfs/bafkreidyjcdnuu3fr7u5byl54fee673m2tok3rebiemtld6uo45574c7lm#generalbugs@zippenhop.com

Resource information

File type: Web Open Font Format, TrueType, length 22908, version 1.0
MIME type: application/font-woff
First seen (UTC): 06 Apr 2023 · 15:25:07.000 UTC
Last seen (UTC): 22 Oct 2026 · 12:02:53.416 UTC
Times seen: 12397

Size: 22.4 KB (22908 bytes)
MD5: 697574b47bcfdd2c45e3e63c7380dd67
SHA1: 4590722b795938e0b6ff1b99701d1abe37aeabef
SHA256: 26b216fadb2ffcd542ca56c2d84f9918f62e40de89bf88b4211fffacd2a4ad83

Certificate information

Issuer: Sectigo Limited · Sectigo RSA Domain Validation Secure Server CA
Subject: *.webhostbox.net
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 59:C6:A9:6C:1C:4C:BE:E1:DF:00:DF:B9:E0:D4:C0:90:4C:28:8A:22
Valid from: Sun, 04 May 2025 00:00:00 GMT
Valid until: Mon, 04 May 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.woff HTTP/1.1
Host: sh001.webhostbox.net:2096
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ipfs.io
DNT: 1
Connection: keep-alive
Referer: https://sh001.webhostbox.net:2096/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Content-Type: application/font-woff
Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT
Date: Sat, 15 Nov 2025 18:41:55 GMT
Cache-Control: max-age=5184000, public
Expires: Wed, 14 Jan 2026 18:41:55 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Length: 22908

18:41:54.789 GET 200 font 21.9 KB 1784 ms 1 alerts

18:41:55.856 GET 200 font 31.7 KB 181 ms 1 alerts

18:41:55.865 GET 200 font 31.7 KB 175 ms 1 alerts

18:41:55.929 GET 200 font 31.7 KB 192 ms 1 alerts

http://ipfs.io/ipfs/bafkreidyjcdnuu3fr7u5byl54fee673m2tok3rebiemtld6uo45574c7lm#generalbugs@zippenhop.com

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://ipfs.io/ipfs/bafkreidyjcdnuu3fr7u5byl54fee673m2tok3rebiemtld6uo45574c7lm#generalbugs@zippenhop.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://ipfs.io/ipfs/bafkreidyjcdnuu3fr7u5byl54fee673m2tok3rebiemtld6uo45574c7lm#generalbugs@zippenhop.com

Domain graph

Network requests