WEBSITE ANALYSIS REPORT

http://ryanml.github.io/website/

28 Oct 2025 · 01:08:08.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

ajax.googleapis.com1 captured requests
cdn.embedly.com1 captured requests
d3e54v103j8qbb.cloudfront.net1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com9 captured requests
forms-na1.hsforms.com2 captured requests
forms.hsforms.com1 captured requests
i.ytimg.com1 captured requests
jnn-pa.googleapis.com4 captured requests
js.hsforms.net1 captured requests
metamask.io2 captured requests
ryanml.github.io24 captured requests
www.google.com7 captured requests
www.googletagmanager.com2 captured requests
www.gstatic.com10 captured requests
www.youtube.com10 captured requests
yt3.ggpht.com1 captured requests

Connections

cdn.embedly.com → www.youtube.comEmbeds1 captured connections
cdn.embedly.com → www.youtube.comLoads from2 captured connections
ryanml.github.io → ajax.googleapis.comLoads from1 captured connections
ryanml.github.io → cdn.embedly.comEmbeds1 captured connections
ryanml.github.io → d3e54v103j8qbb.cloudfront.netLoads from1 captured connections
ryanml.github.io → fonts.googleapis.comLoads from1 captured connections
ryanml.github.io → fonts.gstatic.comLoads from2 captured connections
ryanml.github.io → forms-na1.hsforms.comLoads from2 captured connections
ryanml.github.io → forms.hsforms.comCalls1 captured connections
ryanml.github.io → js.hsforms.netLoads from1 captured connections
ryanml.github.io → metamask.ioLoads from2 captured connections
ryanml.github.io → www.google.comEmbeds2 captured connections
ryanml.github.io → www.google.comLoads from1 captured connections
ryanml.github.io → www.googletagmanager.comLoads from2 captured connections
ryanml.github.io → www.gstatic.comLoads from1 captured connections
www.google.com → fonts.gstatic.comLoads from5 captured connections
www.google.com → www.gstatic.comLoads from9 captured connections
www.youtube.com → fonts.gstatic.comLoads from2 captured connections
www.youtube.com → i.ytimg.comLoads from1 captured connections
www.youtube.com → jnn-pa.googleapis.comCalls4 captured connections
www.youtube.com → www.google.comLoads from1 captured connections
www.youtube.com → yt3.ggpht.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

01:07:40.465 GET 200 document 18.1 KB 301 ms 4 alerts

01:07:40.897 GET 200 stylesheet 7.6 KB 227 ms 4 alerts

01:07:40.900 GET 200 stylesheet 38.2 KB 226 ms 4 alerts

01:07:40.903 GET 200 stylesheet 137.4 KB 227 ms 4 alerts

01:07:40.908 GET 200 script 12.9 KB 577 ms —

01:07:40.910 GET 200 script 306.6 KB 579 ms —

01:07:40.912 GET 200 img 11.7 KB 155 ms 4 alerts

01:07:40.914 GET 200 img 602 B 210 ms 4 alerts

01:07:40.915 GET 200 img 35.6 KB 185 ms 4 alerts

01:07:40.917 GET 200 img 36.0 KB 180 ms 4 alerts

01:07:40.919 GET 200 img 27.5 KB 154 ms 4 alerts

01:07:40.922 GET 404 script 0 B 276 ms —

01:07:40.923 GET 200 imageset 14.0 KB 162 ms 4 alerts

01:07:40.924 GET 200 imageset 41.7 KB 207 ms 4 alerts

01:07:40.926 GET 200 img 11.1 KB 209 ms 4 alerts

01:07:40.927 GET 200 img 7.8 KB 211 ms 4 alerts

01:07:40.928 GET 200 img 6.7 KB 215 ms 4 alerts

01:07:40.929 GET 200 img 6.4 KB 214 ms 4 alerts

01:07:40.930 GET 200 img 6.7 KB 200 ms 4 alerts

01:07:40.932 GET 200 img 10.0 KB 202 ms 4 alerts

01:07:40.933 GET 200 imageset 73.2 KB 238 ms 4 alerts

01:07:40.934 GET 200 script 576.2 KB 55 ms —

01:07:40.935 GET 200 script 87.4 KB 76 ms —

01:07:40.937 GET 200 script 555.1 KB 228 ms 4 alerts

01:07:41.265 GET 200 stylesheet 784 B 258 ms —

01:07:41.278 GET 404 script 0 B 229 ms —

01:07:41.281 GET 200 img 575.8 KB 215 ms 4 alerts

01:07:41.286 GET 200 font 44.1 KB 161 ms 4 alerts

Transaction #35

Request / response

URL

GET HTTPS

https://ryanml.github.io/website/fonts/EuclidCircularB-Regular-WebXL.woff2

IP / ASN

185.199.109.153

AS54113 · FASTLY

Requested by: https://ryanml.github.io/website/

Resource information

File type: Web Open Font Format (Version 2), TrueType, length 45196, version 3.66
MIME type: font/woff2
First seen (UTC): 13 Apr 2023 · 20:09:28.000 UTC
Last seen (UTC): 20 Oct 2026 · 08:06:09.209 UTC
Times seen: 872

Size: 44.1 KB (45196 bytes)
MD5: 2d75957df3bb3aa6ed84f6591b0d5a1a
SHA1: 906424e75625f63b0188471067065794d0348536
SHA256: 8ff3b303322168b49a14878f195dbaf76d9da16e35094d1f83fa23245450155b

Certificate information

Issuer: Sectigo Limited · Sectigo RSA Domain Validation Secure Server CA
Subject: *.github.io
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 8C:FF:59:E5:8E:C4:FA:76:FE:AF:2D:C5:C0:D4:13:6A:77:2D:F9:91
Valid from: Fri, 07 Mar 2025 00:00:00 GMT
Valid until: Sat, 07 Mar 2026 23:59:59 GMT

Technology fingerprints

Varnish (Caching)
Fastly (CDN)
GitHub Pages (PaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /website/fonts/EuclidCircularB-Regular-WebXL.woff2 HTTP/1.1
Host: ryanml.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://ryanml.github.io/website/css/metamask-staging-2.webflow.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: GitHub.com
content-type: font/woff2
x-origin-cache: HIT
last-modified: Sun, 14 Nov 2021 22:52:06 GMT
access-control-allow-origin: *
etag: "61919316-b08c"
expires: Tue, 28 Oct 2025 01:17:41 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 3916:21F2A0:400A71:410BDE:6900175D
accept-ranges: bytes
age: 0
date: Tue, 28 Oct 2025 01:07:41 GMT
via: 1.1 varnish
x-served-by: cache-hel1410027-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1761613661.305783,VS0,VE130
vary: Accept-Encoding
x-fastly-request-id: 14dbb0ac4e9b30284cd32e974418b9afb0bd4a89
content-length: 45196
X-Firefox-Spdy: h2

01:07:41.290 GET 200 font 43.5 KB 161 ms 4 alerts

01:07:41.401 GET 200 script 440.3 KB 133 ms —

01:07:41.456 GET 200 font 7.7 KB 365 ms —

01:07:41.459 GET 200 font 8.2 KB 366 ms —

01:07:41.538 GET 200 subdocument 395.3 KB 104 ms —

01:07:41.581 GET 200 xhr 5.7 KB 181 ms —

01:07:41.831 GET 200 script 993 B 389 ms —

01:07:41.836 GET 200 img 35 B 131 ms —

01:07:41.855 GET 200 script 1.2 KB 319 ms —

01:07:41.893 GET 200 img 35 B 127 ms —

01:07:42.063 GET 200 img 1.5 KB 156 ms 4 alerts

01:07:42.063 GET 200 img 11.5 KB 163 ms 4 alerts

01:07:42.067 GET 200 script 806.2 KB 456 ms —

01:07:42.189 GET 200 script 29.7 KB 35 ms —

01:07:42.249 GET 200 subdocument 120.4 KB 127 ms —

01:07:42.391 GET 200 stylesheet 500.4 KB 64 ms —

01:07:42.400 GET 200 script 32.4 KB 39 ms —

01:07:42.401 GET 200 script 383.4 KB 96 ms —

01:07:42.402 GET 200 script 2.53 MB 159 ms —

01:07:42.407 GET 200 font 39.2 KB 55 ms —

01:07:42.408 GET 200 font 39.2 KB 78 ms —

01:07:42.553 GET 200 subdocument 77.2 KB 110 ms —

http://ryanml.github.io/website/

Domain graph

Hostnames

Connections

Network requests

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://ryanml.github.io/website/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://ryanml.github.io/website/

Domain graph

Network requests