WEBSITE ANALYSIS REPORT

https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

30 Jul 2026 · 04:01:31.000 UTCpublic

Report tags: adobe phishing suspicious telegram_bot
Submit tags: openphish

Request review

Phishing detected

5 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:01:00.174 GET 200 document 1.15 MB 753 ms 4 alerts

04:01:00.883 GET 404 script 355 B 96 ms 2 alerts

04:01:00.885 GET 404 script 16 B 160 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://ds.lafqld.net/config_recaptcha_public.php

IP / ASN

212.227.90.29

AS8560 · IONOS SE

Requested by: https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

Resource information

File type: ASCII text
MIME type: text/html; charset=UTF-8
First seen (UTC): 13 Mar 2023 · 05:02:59.000 UTC
Last seen (UTC): 23 Oct 2026 · 09:22:56.230 UTC
Times seen: 13704

Size: 16 B (16 bytes)
MD5: 4845f01eaa8068384625e302e9a4eb05
SHA1: fb6ff8293fa45e17ba97f84954e7d1d5b0d38f87
SHA256: 8a482f2271a42c5f54c96e816a84340a6f2357a5b81f927d07d00788f5140a41

Certificate information

Issuer: Let's Encrypt · YR2
Subject: ds.lafqld.net
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 52:BB:17:6D:B3:9E:9A:53:BA:B9:62:D4:98:D6:BC:43:BB:EB:93:E6
Valid from: Fri, 17 Jul 2026 15:37:33 GMT
Valid until: Thu, 15 Oct 2026 15:37:32 GMT

Technology fingerprints

Apache HTTP Server (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - Adobe	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /config_recaptcha_public.php HTTP/1.1
Host: ds.lafqld.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 404 Not Found
Date: Thu, 30 Jul 2026 04:01:01 GMT
Server: Apache
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

04:01:01.089 GET 200 img 14.8 KB 135 ms —

04:01:01.091 GET 301 img 0 B 50 ms —

04:01:01.095 GET 301 img 0 B 42 ms —

04:01:01.096 GET 301 img 0 B 49 ms —

04:01:01.103 GET 301 img 0 B 48 ms —

04:01:01.244 GET 404 img 355 B 50 ms 2 alerts

04:01:01.307 GET 200 img 639 B 75 ms —

04:01:01.311 GET 200 img 769 B 77 ms —

04:01:01.314 GET 200 img 2.1 KB 68 ms —

04:01:01.315 GET 200 img 174 B 66 ms —

https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://ds.lafqld.net/encrypted_proposal/Adobe_Installer.html

Domain graph

Network requests