WEBSITE ANALYSIS REPORT

https://l0gln-m1croqsoqftcom-1drvvefil3es0utloox.fwh.is/index.html?email=alanpro@slurpmail.net

27 Aug 2026 · 10:25:29.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

10:25:00.537 GET 200 document 912 B 232 ms 4 alerts

10:25:01.046 GET 200 script 0 B 0 ms 4 alerts

10:25:01.131 GET 302 document 0 B 31 ms 4 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://l0gln-m1croqsoqftcom-1drvvefil3es0utloox.fwh.is/index.html?email=alanpro@slurpmail.net&i=1

IP / ASN

185.27.134.65

AS34119 · Wildcard UK Limited

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 10:29:58.057 UTC
Times seen: 19329754

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: ZeroSSL GmbH · ZeroSSL ECC DV SSL CA 2
Subject: fwh.is
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 38:82:1A:59:DB:C4:80:E6:C7:E5:1E:AC:5A:89:86:00:C6:B6:01:CD
Valid from: Wed, 08 Jul 2026 00:00:00 GMT
Valid until: Tue, 06 Oct 2026 23:59:59 GMT

Technology fingerprints

OpenResty (Web servers)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /index.html?email=alanpro@slurpmail.net&i=1 HTTP/1.1
Host: l0gln-m1croqsoqftcom-1drvvefil3es0utloox.fwh.is
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://l0gln-m1croqsoqftcom-1drvvefil3es0utloox.fwh.is/index.html?email=alanpro@slurpmail.net
Cookie: __test=c01a560570615589884b5548e6e8be15
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 302 Found
Server: openresty
Date: Thu, 27 Aug 2026 10:25:00 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 275
Connection: keep-alive
Location: https://suspended-domain.net/index.php?host=l0gln-m1croqsoqftcom-1drvvefil3es0utloox.fwh.is
Cache-Control: max-age=0
Expires: Thu, 27 Aug 2026 10:25:00 GMT

10:25:01.167 GET 404 document 56.7 KB 594 ms 1 alerts

10:25:01.965 GET 302 script 0 B 30 ms —

10:25:01.969 GET 200 script 1.6 KB 115 ms —

10:25:01.979 GET 200 stylesheet 9.9 KB 89 ms —

10:25:02.001 GET 200 script 397.7 KB 7 ms —

10:25:02.356 GET 200 font 47.4 KB 70 ms —

10:25:02.447 GET 200 font 47.4 KB 24 ms —

10:25:02.449 GET 200 font 47.4 KB 43 ms —

10:25:02.452 GET 200 font 47.4 KB 47 ms —

10:25:02.453 GET 200 font 82.9 KB 49 ms —

10:25:02.455 GET 200 font 18.5 KB 42 ms —

10:25:02.456 GET 200 font 18.3 KB 34 ms —

10:25:02.461 GET 404 img 56.7 KB 43 ms 1 alerts

https://l0gln-m1croqsoqftcom-1drvvefil3es0utloox.fwh.is/index.html?email=alanpro@slurpmail.net

Domain graph

Hostnames

Connections