WEBSITE ANALYSIS REPORT

http://www.cutt.ly/myWS3drk/

15 Oct 2026 · 12:54:44.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Domain graph details

Hostnames

connexion-auth.toclw.xyz7 captured requests
cutt.ly1 captured requests
www.cutt.ly1 captured requests

Connections

cutt.ly → connexion-auth.toclw.xyzRedirects to1 captured connections
www.cutt.ly → cutt.lyRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:54:09.873 GET 301 document 0 B 150 ms —

12:54:10.030 GET 301 document 0 B 158 ms —

12:54:10.194 GET 200 document 3.5 KB 3502 ms 5 alerts

12:54:13.963 GET 200 img 23.2 KB 247 ms 5 alerts

12:54:13.966 GET 200 img 3.4 KB 230 ms 5 alerts

12:54:13.989 GET 302 script 0 B 16 ms 5 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://connexion-auth.toclw.xyz/cdn-cgi/challenge-platform/scripts/jsd/main.js

IP / ASN

104.21.55.69

AS13335 · CLOUDFLARENET

Requested by: https://connexion-auth.toclw.xyz/

Resource information

File type: Not recorded
MIME type: application/javascript; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 18 Oct 2026 · 03:36:51.316 UTC
Times seen: 19176038

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YE2
Subject: toclw.xyz
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 8B:E5:DA:68:4C:76:5D:78:E5:CA:AB:F0:64:A0:C4:ED:39:E9:A3:9B
Valid from: Sun, 04 Oct 2026 07:51:17 GMT
Valid until: Sat, 02 Jan 2027 07:51:16 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1
Host: connexion-auth.toclw.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Cookie: PHPSESSID=8fd928d6867ab371c0f0919bf8caff52
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 302 
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/d2d3316b729e/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
server-timing: cfExtPri
date: Thu, 15 Oct 2026 12:54:14 GMT
server: cloudflare
priority: u=3,i=?0
cf-ray: a4aef8a16f2575ab-OSL
alt-svc: h3=":443"; ma=86400
content-length: 0

12:54:14.011 GET 200 script 23.2 KB 26 ms 5 alerts

12:54:14.116 POST 200 xhr 0 B 18 ms 5 alerts

12:54:14.187 GET 404 img 270 B 209 ms 5 alerts

http://www.cutt.ly/myWS3drk/

Domain graph

Hostnames

Connections

Network requests

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.cutt.ly/myWS3drk/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.cutt.ly/myWS3drk/

Domain graph

Network requests