WEBSITE ANALYSIS REPORT

http://r.oblox.com.et/users/8177702111/profile

18 Oct 2026 · 01:39:09.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

01:37:12.270 GET 200 document 95.3 KB 488 ms 4 alerts

Transaction #84

Request / response

URL

GET HTTPS

https://r.oblox.com.et/users/8177702111/profile

IP / ASN

202.170.75.201

Unknown

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with very long lines (5202)
MIME type: text/html; charset=UTF-8
First seen (UTC): 17 Oct 2026 · 21:47:28.145 UTC
Last seen (UTC): 18 Oct 2026 · 01:39:44.822 UTC
Times seen: 2

Size: 95.3 KB (97597 bytes)
MD5: 20fdaf680d81b9f139d54cb81b93b84f
SHA1: dbac8bf71ba53e1b5a59b33b56c60f8cfd6ee79d
SHA256: 22f7fd0c8243208e02a5393b972cccc224954ab99788792836b9bd63e713eb04

Certificate information

Issuer: Let's Encrypt · YE2
Subject: www.r.oblox.com.et
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AF:C7:BE:DE:78:62:7A:71:F1:AB:1A:42:DC:8E:CE:49:5F:AF:6B:E9
Valid from: Fri, 21 Aug 2026 02:31:05 GMT
Valid until: Thu, 19 Nov 2026 02:31:04 GMT

Technology fingerprints

Plesk (Hosting panels)
Nginx (Web servers, Reverse proxies)
AngularJS (JavaScript frameworks)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /users/8177702111/profile HTTP/1.1
Host: r.oblox.com.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Sun, 18 Oct 2026 01:37:12 GMT
content-type: text/html; charset=UTF-8
content-length: 18521
set-cookie: A2L0g1nC3ssto=1792287432; expires=Thu, 22 Oct 2026 05:37:12 GMT; Max-Age=360000; path=/; secure; HttpOnly; SameSite=Strict
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
x-powered-by: PleskLin
X-Firefox-Spdy: h2

01:37:13.394 GET 200 stylesheet 120.0 KB 258 ms —

01:37:13.399 GET 200 stylesheet 914.5 KB 260 ms —

01:37:13.401 GET 200 stylesheet 21.2 KB 245 ms —

01:37:13.404 GET 200 stylesheet 2.2 KB 56 ms —

01:37:13.407 GET 200 stylesheet 249 B 29 ms —

01:37:13.409 GET 200 stylesheet 2.5 KB 27 ms —

01:37:13.414 GET 200 stylesheet 43.4 KB 4 ms —

01:37:13.417 GET 200 stylesheet 10.1 KB 3 ms —

01:37:13.419 GET 200 stylesheet 475 B 3 ms —

01:37:13.422 GET 200 stylesheet 12.8 KB 3 ms —

01:37:13.425 GET 200 stylesheet 288 B 3 ms —

01:37:13.429 GET 200 stylesheet 275.8 KB 9 ms —

01:37:13.432 GET 200 stylesheet 130.4 KB 7 ms —

01:37:13.436 GET 200 stylesheet 2.4 KB 3 ms —

01:37:13.441 GET 200 stylesheet 6.1 KB 3 ms —

01:37:13.444 GET 200 stylesheet 12.3 KB 244 ms —

01:37:13.447 GET 200 stylesheet 37.5 KB 30 ms —

01:37:13.449 GET 200 stylesheet 6.7 KB 3 ms —

01:37:13.452 GET 200 stylesheet 3.7 KB 4 ms —

01:37:13.454 GET 200 stylesheet 6.9 KB 5 ms —

01:37:13.458 GET 200 stylesheet 5.9 KB 4 ms —

01:37:13.461 GET 200 stylesheet 4.2 KB 4 ms —

01:37:13.465 GET 200 stylesheet 1.4 KB 5 ms —

01:37:13.467 GET 200 stylesheet 9.3 KB 5 ms —

01:37:13.470 GET 200 stylesheet 739 B 2 ms —

01:37:13.476 GET 200 stylesheet 3.5 KB 4 ms —

01:37:13.479 GET 200 stylesheet 254 B 4 ms —

01:37:13.481 GET 200 stylesheet 29.7 KB 4 ms —

01:37:13.484 GET 200 stylesheet 31.2 KB 4 ms —

01:37:13.485 GET 200 stylesheet 1.4 KB 3 ms —

01:37:13.490 GET 200 stylesheet 2.2 KB 5 ms —

01:37:13.493 GET 200 stylesheet 5.7 KB 5 ms —

01:37:13.496 GET 200 stylesheet 784 B 4 ms —

01:37:13.500 GET 200 stylesheet 3.3 KB 5 ms —

01:37:13.503 GET 200 stylesheet 85 B 4 ms —

01:37:13.507 GET 200 script 11.2 KB 56 ms 4 alerts

01:37:13.509 GET 200 script 137.9 KB 41 ms —

01:37:13.512 GET 200 script 209.2 KB 450 ms —

01:37:13.514 GET 200 script 4.5 KB 241 ms —

01:37:13.516 GET 200 script 6.4 KB 447 ms —

01:37:13.517 GET 200 script 103.5 KB 244 ms —

01:37:13.519 GET 200 script 6.1 KB 236 ms —

01:37:13.528 GET 200 script 0 B 0 ms —

01:37:13.530 GET 200 script 3.1 KB 2 ms —

01:37:13.535 GET 200 script 1.7 KB 3 ms —

01:37:13.538 GET 200 script 244.9 KB 9 ms —

01:37:13.540 GET 200 script 23.5 KB 4 ms —

01:37:13.543 GET 200 script 5.5 KB 3 ms —

01:37:13.546 GET 200 script 151.6 KB 9 ms —

http://r.oblox.com.et/users/8177702111/profile

Domain graph

Hostnames

Connections