WEBSITE ANALYSIS REPORT

http://fir3.net/HSKgwDg

15 Jan 2026 · 19:07:23.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:07:00.277 GET 200 document 10.9 KB 519 ms 1 alerts

19:07:00.893 GET 200 stylesheet 16.7 KB 326 ms —

19:07:00.894 GET 200 stylesheet 118.6 KB 26 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://fir3.net/vendor/bootstrap/css/bootstrap.min.css?ver=6.4.0

IP / ASN

104.21.90.231

AS13335 · CLOUDFLARENET

Requested by: https://fir3.net/HSKgwDg

Resource information

File type: ASCII text, with very long lines (65369)
MIME type: text/css
First seen (UTC): 07 Mar 2023 · 12:03:40.000 UTC
Last seen (UTC): 23 Oct 2026 · 16:41:10.259 UTC
Times seen: 23749

Size: 118.6 KB (121457 bytes)
MD5: 7f89537eaf606bff49f5cc1a7c24dbca
SHA1: b0972fdcce82fd583d4c2ccc3f2e3df7404a19d0
SHA256: 6d92dfc1700fd38cd130ad818e23bc8aef697f815b2ea5face2b5dfad22f2e11

Certificate information

Issuer: Google Trust Services · WE1
Subject: fir3.net
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 86:E1:10:67:37:52:54:A8:FC:9B:E9:2B:2D:7A:E2:F9:A6:93:C4:9B
Valid from: Sat, 10 Jan 2026 10:22:27 GMT
Valid until: Fri, 10 Apr 2026 11:20:06 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /vendor/bootstrap/css/bootstrap.min.css?ver=6.4.0 HTTP/1.1
Host: fir3.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://fir3.net/HSKgwDg
Cookie: lang=en_US; AppSession=3ed0ccbeff7c80902d2186a368c587ef; csrfToken=d04331e959c838d68a5cbb7624a931e85467310c4c15caa2605c43f0377224f8ff68fcc99892ba3d4f5667dff40e0a605cd6d764d74c0df78c4be9a0d5679ae6
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
x-frame-options: SAMEORIGIN
last-modified: Fri, 20 Dec 2019 07:52:40 GMT
accept-ranges: bytes
cache-control: max-age=2592000
expires: Fri, 13 Feb 2026 12:58:53 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-length: 19741
content-type: text/css
date: Thu, 15 Jan 2026 19:07:00 GMT
server: cloudflare
age: 108487
cf-cache-status: HIT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kPe4cQtwueZBvGAzCtPmFD8ExbV%2FlsPuJ09BTLrWODdyEipzkp%2B7QgglrvcroyeTRtzViUdOErB5GG%2FIBj4M9urTzsRnlg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=2,i=?0
cf-ray: 9be7a7527fdf568f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

19:07:00.895 GET 200 stylesheet 30.2 KB 28 ms 1 alerts

19:07:00.896 GET 200 stylesheet 88.2 KB 27 ms 1 alerts

19:07:00.897 GET 200 stylesheet 39.8 KB 18 ms 1 alerts

19:07:00.898 GET 200 stylesheet 5.4 KB 18 ms 1 alerts

19:07:00.901 GET 200 img 20.1 KB 108 ms —

19:07:00.901 GET 200 img 19.3 KB 60 ms —

19:07:00.903 GET 200 img 6.6 KB 57 ms —

19:07:00.904 GET 200 img 10.3 KB 108 ms —

19:07:00.905 GET 200 script 191 B 12 ms 1 alerts

19:07:00.906 GET 200 script 83.6 KB 21 ms 1 alerts

19:07:00.907 GET 200 script 38.8 KB 18 ms 1 alerts

19:07:00.908 GET 200 script 10.5 KB 17 ms 1 alerts

19:07:00.909 GET 200 script 28.6 KB 16 ms 1 alerts

19:07:00.910 GET 200 script 9.7 KB 15 ms 1 alerts

19:07:01.138 GET 200 font 14.5 KB 233 ms —

19:07:01.141 GET 200 font 75.4 KB 398 ms 1 alerts

19:07:01.164 GET 200 font 14.4 KB 198 ms —

19:07:01.169 GET 200 fetch 96 B 439 ms —

19:07:01.502 GET 200 script 1.1 KB 236 ms —

19:07:01.504 GET 200 img 198 B 8 ms 1 alerts

19:07:01.821 GET 200 script 836.2 KB 253 ms —

19:07:02.166 GET 200 subdocument 91.2 KB 50 ms —

19:07:02.269 GET 200 stylesheet 81.4 KB 37 ms —

19:07:02.272 GET 200 script 836.2 KB 78 ms —

19:07:02.558 GET 200 font 39.2 KB 72 ms —

19:07:02.560 GET 200 font 39.2 KB 71 ms —

19:07:02.634 GET 200 img 2.2 KB 15 ms —

19:07:02.635 GET 200 script 102 B 18 ms —

19:07:02.662 GET 200 script 836.2 KB 31 ms —

19:07:03.423 GET 200 subdocument 16.6 KB 22 ms —

19:07:03.464 GET 200 stylesheet 81.4 KB 20 ms —

19:07:03.465 GET 200 script 836.2 KB 33 ms —

19:07:03.785 POST 200 xhr 42.7 KB 101 ms —

19:07:03.908 GET 200 font 39.2 KB 58 ms —

19:07:03.911 GET 200 font 39.2 KB 60 ms —

19:07:03.913 GET 200 font 39.2 KB 57 ms —

19:07:03.974 GET 200 img 600 B 16 ms —

19:07:03.975 GET 200 img 530 B 16 ms —

19:07:03.976 GET 200 img 665 B 16 ms —

19:07:03.977 GET 200 img 34.6 KB 24 ms —

http://fir3.net/HSKgwDg

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://fir3.net/HSKgwDg

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://fir3.net/HSKgwDg

Domain graph

Network requests