WEBSITE ANALYSIS REPORT

http://www.qwnbjqmjjy.682667com-dhxl.top/

07 Jun 2026 · 08:16:20.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:15:58.192 GET No response document 0 B 626 ms 3 alerts

08:15:58.828 GET 301 document 0 B 450 ms 3 alerts

08:15:59.139 GET No response document 0 B 314 ms 3 alerts

08:16:00.560 GET 302 document 768 B 775 ms 3 alerts

08:16:01.029 GET 200 document 768 B 1939 ms 2 alerts

08:16:02.232 GET 200 stylesheet 29.5 KB 152 ms 2 alerts

08:16:02.233 GET 200 script 1.1 KB 153 ms 2 alerts

08:16:02.400 GET 200 subdocument 7.4 KB 150 ms 2 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://k4fhwkbccj.682667com-dhxl.top/demo/tz2.php

IP / ASN

154.84.56.144

AS35916 · MULTA-ASN1

Requested by: https://k4fhwkbccj.682667com-dhxl.top/demo/

Resource information

File type: HTML document, Unicode text, UTF-8 text, with very long lines (343)
MIME type: text/html; charset=UTF-8
First seen (UTC): 23 Feb 2026 · 11:30:52.220 UTC
Last seen (UTC): 10 Jun 2026 · 08:00:26.735 UTC
Times seen: 1000

Size: 7.4 KB (7553 bytes)
MD5: e4023ab5bf6c7131d418c2cfc3e9ffb4
SHA1: 60eb467e56d3171c48f4abf8310c78bceb60afa4
SHA256: a0b6318fdd3c8c984120b5f2a679076c24865d8ff51d170d1750c0e7fba4b3be

Certificate information

Issuer: Let's Encrypt · R12
Subject: 682669.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: ED:E2:B4:5A:62:80:41:09:3F:A1:CB:83:96:B5:D2:76:AF:1A:22:FF
Valid from: Thu, 07 May 2026 04:36:32 GMT
Valid until: Wed, 05 Aug 2026 04:36:31 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /demo/tz2.php HTTP/1.1
Host: k4fhwkbccj.682667com-dhxl.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://k4fhwkbccj.682667com-dhxl.top/demo/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Sun, 07 Jun 2026 08:16:02 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
strict-transport-security: max-age=31536000
content-encoding: gzip
X-Firefox-Spdy: h2

08:16:02.401 GET 404 img 146 B 147 ms 2 alerts

08:16:02.560 GET 404 stylesheet 146 B 147 ms 2 alerts

http://www.qwnbjqmjjy.682667com-dhxl.top/

Domain graph

Hostnames

Connections

Network requests

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.qwnbjqmjjy.682667com-dhxl.top/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.qwnbjqmjjy.682667com-dhxl.top/

Domain graph

Network requests