WEBSITE ANALYSIS REPORT

http://www.sesimates42404.vercel.app/

30 Sep 2026 · 15:18:04.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

15:17:33.952 GET No response document 0 B 0 ms 4 alerts

15:17:34.324 GET 200 document 6.2 KB 44 ms 4 alerts

15:17:35.193 GET 200 stylesheet 118.4 KB 31 ms —

15:17:35.196 GET 200 script 375.0 KB 133 ms —

15:17:35.197 GET 200 script 83.6 KB 41 ms —

15:17:35.199 GET 200 script 36.0 KB 20 ms —

15:17:35.200 GET 200 script 12.3 KB 33 ms 1 alerts

Transaction #10

Request / response

URL

GET HTTPS

https://waust.at/d.js

IP / ASN

172.67.71.57

AS13335 · CLOUDFLARENET

Requested by: https://sesimates42404.vercel.app/

Resource information

File type: JavaScript source, ASCII text, with very long lines (12548), with no line terminators
MIME type: application/x-javascript
First seen (UTC): 21 Jul 2026 · 20:28:27.114 UTC
Last seen (UTC): 24 Oct 2026 · 04:04:57.075 UTC
Times seen: 291

Size: 12.3 KB (12548 bytes)
MD5: 030c9f72901cf774a5d0d30b654b4060
SHA1: 6f30f9fc3e3f7b2bd2e66c74eca188db07273797
SHA256: e9b8916719fb30c5b27d3938da14062997789f582930af749646ebc2dabbe171

Certificate information

Issuer: Google Trust Services · WE1
Subject: waust.at
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: C8:A7:A9:38:52:0A:B8:BE:DD:2C:1D:FD:97:5F:3B:2F:76:A7:EE:A2
Valid from: Sun, 09 Aug 2026 02:05:50 GMT
Valid until: Sat, 07 Nov 2026 03:05:29 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /d.js HTTP/1.1
Host: waust.at
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://sesimates42404.vercel.app/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Wed, 30 Sep 2026 15:17:35 GMT
content-type: application/x-javascript
last-modified: Sun, 27 Sep 2026 00:02:43 GMT
etag: "6ab85d23-3104"
expires: Thu, 01 Oct 2026 15:15:43 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
age: 111
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: HIT
server: cloudflare
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=E%2BwsTOU7ejnd6E7M9L2Aq0cQRViJSaSo0C0TO3QO7lVDndxXSEUQWe665fmipSXBJNycGtEeMp9BVjGyW701dBhSav5%2BX1YxvS7TR1hEZAHCkzggj1XiCgXK"}]}
vary: accept-encoding
priority: u=3,i=?0
cf-ray: a43431ff19cc568d-OSL
server-timing: cfExtPri

15:17:35.205 GET 404 img 2.6 KB 431 ms —

15:17:35.405 GET 200 script 452.0 KB 85 ms —

15:17:35.595 GET 200 img 57.2 KB 180 ms —

http://www.sesimates42404.vercel.app/

Domain graph

Hostnames

Connections

Network requests

Transaction #10

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.sesimates42404.vercel.app/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #10

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.sesimates42404.vercel.app/

Domain graph

Network requests