WEBSITE ANALYSIS REPORT

http://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

29 Nov 2025 · 07:08:55.000 UTCpublic

Report tags: phishing
Submit tags

Request review

Phishing detected

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:08:33.323 GET 200 document 20.0 KB 133 ms 3 alerts

07:08:33.638 GET 200 stylesheet 6.2 KB 1313 ms 2 alerts

Transaction #15

Request / response

URL

GET HTTPS

https://sh001.webhostbox.net:2096/cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css

IP / ASN

162.241.27.10

AS46606 · UNIFIEDLAYER-AS-1

Requested by: https://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

Resource information

File type: ASCII text, with very long lines (6358), with no line terminators
MIME type: text/css
First seen (UTC): 06 Apr 2023 · 15:25:07.000 UTC
Last seen (UTC): 22 Oct 2026 · 12:02:53.421 UTC
Times seen: 8795

Size: 6.2 KB (6358 bytes)
MD5: 952b5c93a75a89c458fe5093480dd1bc
SHA1: 564d17e569cb59cf7043d7f777727c19a3cbda3a
SHA256: 17781767b9edf1ebdde3529494d5cb3d8403702893db10258bedd3f9b8002f20

Certificate information

Issuer: Sectigo Limited · Sectigo RSA Domain Validation Secure Server CA
Subject: *.webhostbox.net
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 59:C6:A9:6C:1C:4C:BE:E1:DF:00:DF:B9:E0:D4:C0:90:4C:28:8A:22
Valid from: Sun, 04 May 2025 00:00:00 GMT
Valid until: Mon, 04 May 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cPanel_magic_revision_1386192030/unprotected/cpanel/fonts/open_sans/open_sans.min.css HTTP/1.1
Host: sh001.webhostbox.net:2096
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Content-Type: text/css
Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT
Date: Sat, 29 Nov 2025 07:08:34 GMT
Cache-Control: max-age=5184000, public
Expires: Wed, 28 Jan 2026 07:08:34 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Content-Length: 522

07:08:33.639 GET 200 stylesheet 139.1 KB 1441 ms 2 alerts

07:08:33.643 GET 200 img 5.2 KB 1000 ms 2 alerts

07:08:33.645 GET 200 script 68.0 KB 214 ms —

07:08:33.646 GET 200 script 18.7 KB 175 ms —

07:08:33.647 GET 200 script 47.8 KB 181 ms —

07:08:33.648 GET 200 script 83.6 KB 342 ms —

07:08:33.650 GET 200 script 49.8 KB 94 ms —

07:08:33.651 GET 302 script 39.9 KB 107 ms —

07:08:33.652 GET 200 stylesheet 9.4 KB 99 ms —

07:08:33.876 GET 200 script 39.9 KB 18 ms —

07:08:34.546 GET 200 img 1.0 KB 149 ms 2 alerts

07:08:34.549 GET 200 img 976 B 162 ms 2 alerts

07:08:34.552 GET 200 img 962 B 1290 ms 2 alerts

07:08:34.555 GET 200 img 1.0 KB 1316 ms 2 alerts

07:08:34.560 GET 200 img 320 B 221 ms 2 alerts

07:08:34.562 GET 200 img 450 B 265 ms 2 alerts

07:08:34.572 GET 200 font 22.1 KB 1418 ms 2 alerts

07:08:34.574 GET 200 font 22.4 KB 1456 ms 2 alerts

07:08:34.575 GET 200 font 21.9 KB 1453 ms 2 alerts

07:08:35.424 GET 200 font 31.7 KB 139 ms 2 alerts

07:08:35.452 GET 200 font 15.7 KB 141 ms 2 alerts

07:08:35.453 GET 200 font 31.7 KB 145 ms 2 alerts

http://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

Domain graph

Hostnames

Connections

Network requests

Transaction #15

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #15

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

Domain graph

Network requests