WEBSITE ANALYSIS REPORT

http://pdalife.com/dwn/af78e5a1.html?lang=en

28 Jan 2026 · 07:06:55.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:06:31.981 GET 301 document 8.9 KB 180 ms —

07:06:32.146 GET 200 document 8.9 KB 165 ms 1 alerts

07:06:32.458 GET 200 stylesheet 9.1 KB 17 ms 1 alerts

07:06:32.460 GET 200 script 24 B 17 ms 1 alerts

07:06:32.462 GET 200 script 1.0 KB 223 ms —

07:06:32.463 GET 200 script 53.7 KB 259 ms 1 alerts

07:06:32.465 GET 200 script 396.7 KB 268 ms —

07:06:32.466 GET 200 script 97.2 KB 29 ms 1 alerts

07:06:32.468 GET 200 script 4.0 KB 44 ms 1 alerts

07:06:32.728 GET 200 stylesheet 9.1 KB 33 ms 1 alerts

07:06:32.730 POST 200 xhr 1.4 KB 241 ms —

07:06:32.824 OPTIONS 200 fetch 0 B 182 ms 3 alerts

07:06:32.889 OPTIONS 200 fetch 5 B 232 ms —

07:06:32.900 GET 200 img 3.1 KB 17 ms 1 alerts

07:06:32.903 GET 200 img 1.5 KB 18 ms 1 alerts

07:06:32.957 POST 200 fetch 32 B 129 ms 3 alerts

Transaction #33

Request / response

URL

POST HTTPS

https://fondleaegipan.shop/cuid/?f=https%3A%2F%2Fmobdisc.com

IP / ASN

172.255.106.14

AS7979 · SERVERS-COM

Requested by: https://mobdisc.com/dwaf78e5a1/download.html?lang=en

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 28 Jan 2026 · 07:07:03.537 UTC
Last seen (UTC): 28 Jan 2026 · 07:07:03.537 UTC
Times seen: 1

Size: 32 B (32 bytes)
MD5: 0987f3b799fc762f3f22945400db5242
SHA1: 57aea68f67489f38af10cab8969f2571cbb67b78
SHA256: e38418f6edcee4f4373fd8c0847dfb769c26ac74166d4a592a4444122ff97c34

Certificate information

Issuer: Let's Encrypt · R13
Subject: fondleaegipan.shop
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 78:5F:B7:6F:77:D1:FC:ED:22:D3:F9:39:31:55:E0:19:A2:61:28:AC
Valid from: Sun, 14 Dec 2025 23:25:51 GMT
Valid until: Sat, 14 Mar 2026 23:25:50 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

POST /cuid/?f=https%3A%2F%2Fmobdisc.com HTTP/1.1
Host: fondleaegipan.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://mobdisc.com/
Content-Type: application/json
Content-Length: 10
Origin: https://mobdisc.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Wed, 28 Jan 2026 07:06:32 GMT
content-type: application/json
content-length: 32
access-control-allow-credentials: true
access-control-allow-origin: https://mobdisc.com
access-control-allow-headers: content-type, megageocheckolololo, x-forwarded-for
access-control-max-age: 600
access-control-allow-methods: GET, POST, OPTIONS
set-cookie: a97fa794a0f9=6773b77d1d253401e8996c; expires=Fri, 16 May 2053 08:00:28 GMT; domain=fondleaegipan.shop; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2

Request body

Captured 10 B · Displayed 10 B

{"key":""}

07:06:33.032 POST 200 fetch 445 B 152 ms —

07:06:33.049 GET 200 script 836.2 KB 200 ms —

07:06:33.053 GET 200 img 5.2 KB 16 ms 1 alerts

07:06:33.055 GET 200 img 33.7 KB 34 ms 1 alerts

07:06:33.220 GET 200 img 9.9 KB 212 ms —

07:06:33.224 GET 200 script 7.0 KB 57 ms —

07:06:33.333 GET 200 img 33.9 KB 53 ms —

07:06:33.336 GET 200 img 13.5 KB 49 ms —

07:06:33.338 GET 200 img 69.9 KB 69 ms —

07:06:33.339 GET 200 img 50.5 KB 82 ms —

07:06:33.341 GET 200 img 30.7 KB 82 ms —

07:06:33.342 GET 200 img 15.0 KB 82 ms —

07:06:33.344 GET 200 img 65.9 KB 102 ms —

07:06:33.345 GET 200 img 44.9 KB 90 ms —

07:06:33.346 GET 200 img 55.0 KB 91 ms —

07:06:33.348 GET 200 img 51.9 KB 94 ms —

07:06:33.350 GET 200 img 60.6 KB 96 ms —

07:06:33.351 GET 200 img 62.6 KB 91 ms —

07:06:33.742 GET 200 subdocument 90.3 KB 73 ms —

07:06:33.938 GET 200 stylesheet 81.4 KB 25 ms —

07:06:33.939 GET 200 script 836.2 KB 70 ms —

07:06:34.358 GET 200 font 39.2 KB 95 ms —

07:06:34.379 GET 200 font 39.2 KB 38 ms —

07:06:34.381 GET 200 script 102 B 37 ms —

07:06:34.442 GET 200 img 2.2 KB 8 ms —

07:06:34.447 GET 200 script 836.2 KB 31 ms —

07:06:35.841 POST 200 xhr 37.7 KB 110 ms —

07:06:35.984 POST 200 xhr 173 B 54 ms 1 alerts

07:06:36.044 POST 200 fetch 0 B 36 ms —

07:06:36.084 POST 200 fetch 0 B 34 ms —

07:06:36.124 POST 200 fetch 0 B 37 ms —

07:06:36.167 POST 200 fetch 0 B 34 ms —

http://pdalife.com/dwn/af78e5a1.html?lang=en

Domain graph

Hostnames

Connections

Network requests

Transaction #33

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://pdalife.com/dwn/af78e5a1.html?lang=en

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #33

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Request body

http://pdalife.com/dwn/af78e5a1.html?lang=en

Domain graph

Network requests