WEBSITE ANALYSIS REPORT

http://florencegibson.boez.kro.kr/

26 Jan 2026 · 07:34:38.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:34:16.094 GET No response document 0 B 402 ms 1 alerts

07:34:16.670 GET 200 document 27.0 KB 1972 ms 1 alerts

07:34:18.587 GET 200 stylesheet 28.2 KB 1776 ms 1 alerts

07:34:18.590 GET 200 stylesheet 99.6 KB 57 ms —

07:34:18.596 GET 200 img 13.6 KB 190 ms —

07:34:18.598 GET 200 img 33.5 KB 194 ms —

07:34:18.599 GET 200 img 13.5 KB 109 ms —

07:34:18.602 GET 200 img 37.8 KB 141 ms —

07:34:18.604 GET 200 img 23.0 KB 163 ms —

07:34:18.605 GET 200 img 29.3 KB 169 ms —

07:34:18.607 GET 200 img 21.6 KB 178 ms —

07:34:18.609 GET 200 img 33.8 KB 178 ms —

07:34:18.611 GET 200 img 26.0 KB 182 ms —

07:34:18.612 GET 200 img 24.7 KB 182 ms —

07:34:18.612 GET 200 img 21.5 KB 184 ms —

07:34:18.613 GET 200 img 22.4 KB 186 ms —

07:34:18.614 GET 200 img 10.2 KB 194 ms —

07:34:18.615 GET 200 img 52.0 KB 190 ms —

07:34:18.617 GET 200 img 20.9 KB 189 ms —

07:34:18.618 GET 200 img 20.3 KB 190 ms —

07:34:18.621 GET 200 img 19.7 KB 185 ms —

07:34:18.622 GET 200 img 25.6 KB 188 ms —

07:34:18.624 GET 200 img 28.3 KB 231 ms —

07:34:18.627 GET 200 img 28.3 KB 134 ms —

07:34:18.630 GET 200 script 1.3 KB 1737 ms 1 alerts

07:34:20.404 GET 200 font 146.6 KB 35 ms —

07:34:20.452 GET 200 font 105.5 KB 16 ms —

07:34:22.163 GET 200 document 0 B 672 ms 3 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://crawlsingeshell.com/api/users?token=L2ZwNTlzaGdxP2tleT1iYWE0ZmYzMzhjMmQ4ZTBhN2JjMTU3OTEyZmU2MWExZiZwc3Q9MTc2OTQxMjkyMSZyZWZlcj1odHRwJTNBJTJGJTJGZmxvcmVuY2VnaWJzb24uYm9lei5rcm8ua3IlMkYmcm10Yz10JnNodT04YzA0NDM5NmQ3MTU2YmU4MWY3YjBlYjEwODRiNWVmMmY5MzgzN2RkNjI2ZTQ2ZTYxZDc5YjlhNDcxNTg1YmE3ODBkZDk3NzFlNjEzYWI5NjZjMTI5OTA1NDkyNWNjMGJmOGU3M2ZiMzY5MTI2NWI5NGQ2YzE4YmU2YmIzNjQ2NDM1ZjU5NGVhNzUxMjZiMzU3ZjdmMWI0ZGJjODBkYTYzZDE1NGQzYmNmMWI4OWVhMzViMzk4NyZwaWk9JmluPSZ1dWlkPQ

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 17:29:49.637 UTC
Times seen: 19312417

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: crawlsingeshell.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: A6:AD:C2:3F:F6:F5:86:9B:10:88:AB:00:62:FA:0E:B5:55:59:27:44
Valid from: Mon, 22 Dec 2025 21:04:50 GMT
Valid until: Sun, 22 Mar 2026 21:04:49 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /api/users?token=L2ZwNTlzaGdxP2tleT1iYWE0ZmYzMzhjMmQ4ZTBhN2JjMTU3OTEyZmU2MWExZiZwc3Q9MTc2OTQxMjkyMSZyZWZlcj1odHRwJTNBJTJGJTJGZmxvcmVuY2VnaWJzb24uYm9lei5rcm8ua3IlMkYmcm10Yz10JnNodT04YzA0NDM5NmQ3MTU2YmU4MWY3YjBlYjEwODRiNWVmMmY5MzgzN2RkNjI2ZTQ2ZTYxZDc5YjlhNDcxNTg1YmE3ODBkZDk3NzFlNjEzYWI5NjZjMTI5OTA1NDkyNWNjMGJmOGU3M2ZiMzY5MTI2NWI5NGQ2YzE4YmU2YmIzNjQ2NDM1ZjU5NGVhNzUxMjZiMzU3ZjdmMWI0ZGJjODBkYTYzZDE1NGQzYmNmMWI4OWVhMzViMzk4NyZwaWk9JmluPSZ1dWlkPQ HTTP/1.1
Host: crawlsingeshell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://crawlsingeshell.com/api/users?token=L2ZwNTlzaGdxP2tleT05Y2E2MDFhOWY0N2M3MzVkZjc2ZDVjYTQ2ZmEyNmE2NiZzdWJtZXRyaWM9MjY1MzM2Njg
Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.w2E_RdOiO-Rx6UyfB9ZIuA5RHOj3qDPVIJyt44-4aJo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 26 Jan 2026 07:34:22 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 13
Host: crawlsingeshell.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9340b65fa45bc8ea59a8cd24688686a2
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

07:34:22.603 GET 200 img 0 B 93 ms 3 alerts

http://florencegibson.boez.kro.kr/

Domain graph

Hostnames

Connections