WEBSITE ANALYSIS REPORT

http://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

29 Nov 2025 · 07:08:55.000 UTCpublic

Report tags: phishing
Submit tags

Request review

Phishing detected

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:08:33.323 GET 200 document 20.0 KB 133 ms 3 alerts

07:08:33.638 GET 200 stylesheet 6.2 KB 1313 ms 2 alerts

07:08:33.639 GET 200 stylesheet 139.1 KB 1441 ms 2 alerts

07:08:33.643 GET 200 img 5.2 KB 1000 ms 2 alerts

07:08:33.645 GET 200 script 68.0 KB 214 ms —

07:08:33.646 GET 200 script 18.7 KB 175 ms —

07:08:33.647 GET 200 script 47.8 KB 181 ms —

07:08:33.648 GET 200 script 83.6 KB 342 ms —

07:08:33.650 GET 200 script 49.8 KB 94 ms —

07:08:33.651 GET 302 script 39.9 KB 107 ms —

07:08:33.652 GET 200 stylesheet 9.4 KB 99 ms —

07:08:33.876 GET 200 script 39.9 KB 18 ms —

07:08:34.546 GET 200 img 1.0 KB 149 ms 2 alerts

07:08:34.549 GET 200 img 976 B 162 ms 2 alerts

07:08:34.552 GET 200 img 962 B 1290 ms 2 alerts

07:08:34.555 GET 200 img 1.0 KB 1316 ms 2 alerts

07:08:34.560 GET 200 img 320 B 221 ms 2 alerts

07:08:34.562 GET 200 img 450 B 265 ms 2 alerts

07:08:34.572 GET 200 font 22.1 KB 1418 ms 2 alerts

07:08:34.574 GET 200 font 22.4 KB 1456 ms 2 alerts

07:08:34.575 GET 200 font 21.9 KB 1453 ms 2 alerts

07:08:35.424 GET 200 font 31.7 KB 139 ms 2 alerts

07:08:35.452 GET 200 font 15.7 KB 141 ms 2 alerts

Transaction #08

Request / response

URL

GET HTTPS

https://sh001.webhostbox.net:2096/cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.ttf

IP / ASN

162.241.27.10

AS46606 · UNIFIEDLAYER-AS-1

Requested by: https://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

Resource information

File type: TrueType Font data, 19 tables, 1st "FFTM"
MIME type: application/octet-stream
First seen (UTC): 09 May 2023 · 08:40:53.000 UTC
Last seen (UTC): 22 Oct 2026 · 07:17:24.156 UTC
Times seen: 2345

Size: 15.7 KB (16077 bytes)
MD5: 39b4be76e53ebe9ed95d59acfce4ee1f
SHA1: c4d0bb12023ab47ab698ffcdafc8b49bc1c51af9
SHA256: 88bf78b2c68c09a643da330363eb6996eeb48c3cd5edf203036d8864a39f9d12

Certificate information

Issuer: Sectigo Limited · Sectigo RSA Domain Validation Secure Server CA
Subject: *.webhostbox.net
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 59:C6:A9:6C:1C:4C:BE:E1:DF:00:DF:B9:E0:D4:C0:90:4C:28:8A:22
Valid from: Sun, 04 May 2025 00:00:00 GMT
Valid until: Mon, 04 May 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cPanel_magic_revision_1648610195/unprotected/cpanel/fonts/open_sans/OpenSans-Semibold-webfont.ttf HTTP/1.1
Host: sh001.webhostbox.net:2096
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link
DNT: 1
Connection: keep-alive
Referer: https://sh001.webhostbox.net:2096/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Wed, 30 Mar 2022 03:16:35 GMT
Date: Sat, 29 Nov 2025 07:08:35 GMT
Cache-Control: max-age=5184000, public
Expires: Wed, 28 Jan 2026 07:08:35 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Length: 39476

07:08:35.453 GET 200 font 31.7 KB 145 ms 2 alerts

http://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

Domain graph

Hostnames

Connections

Network requests

Transaction #08

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #08

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bafybeibrx4psce6ngxt4mis6igdilidk4eme6yen6xfrhek6ad55lfssc4.ipfs.dweb.link/domains.html

Domain graph

Network requests