WEBSITE ANALYSIS REPORT

http://h4q4z3.rnashyfkf.cc/

06 Jul 2026 · 04:10:45.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:10:12.186 GET 301 document 0 B 90 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://h4q4z3.rnashyfkf.cc/

IP / ASN

143.204.238.62

AS16509 · AMAZON-02

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 18 Oct 2026 · 22:37:16.062 UTC
Times seen: 19195301

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Amazon · Amazon RSA 2048 M04
Subject: *.rnashyfkf.cc
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 14:62:81:13:15:A2:C4:83:32:A0:42:EB:E3:00:A3:0B:0D:20:9A:4A
Valid from: Fri, 03 Jul 2026 00:00:00 GMT
Valid until: Sat, 16 Jan 2027 23:59:59 GMT

Technology fingerprints

Amazon CloudFront (CDN)
Amazon Web Services (PaaS)
Nginx:1.22.1 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: h4q4z3.rnashyfkf.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 301 
content-type: text/html; charset=UTF-8
location: https://h4qkz1.zchtaczzt.cc/
date: Mon, 06 Jul 2026 03:44:19 GMT
x-server: web-node-3
x-fcache: MISS
server: nginx/1.22.1
x-cache: Hit from cloudfront
via: 1.1 26c19f5862f81b1e42cce9b53f133110.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN53-P4
x-amz-cf-id: iXzwnwx0KRqcX8EHKJvnHF8DGixryIGxvSFzJBqULQSrBrK0OIrb6w==
age: 1553
vary: Origin
X-Firefox-Spdy: h2

04:10:12.287 GET 200 document 234.9 KB 77 ms —

04:10:12.706 GET 200 stylesheet 2.9 KB 12 ms —

04:10:12.708 GET 200 stylesheet 0 B 0 ms —

04:10:12.711 GET 200 stylesheet 0 B 0 ms —

04:10:12.714 GET 200 script 0 B 0 ms —

04:10:12.715 GET 200 stylesheet 0 B 0 ms —

04:10:12.717 GET 200 stylesheet 0 B 0 ms —

04:10:12.725 GET 200 stylesheet 0 B 0 ms —

04:10:12.728 GET 200 stylesheet 0 B 0 ms —

04:10:12.730 GET 200 stylesheet 0 B 0 ms —

04:10:12.733 GET 200 script 0 B 0 ms —

04:10:12.780 GET 200 script 0 B 0 ms —

04:10:12.783 GET 200 script 0 B 0 ms —

04:10:12.787 GET 200 script 0 B 0 ms —

04:10:12.789 GET 200 script 0 B 0 ms —

04:10:12.792 GET 200 stylesheet 0 B 0 ms —

04:10:12.793 GET 200 script 0 B 0 ms —

04:10:12.797 GET 200 script 0 B 0 ms —

04:10:12.800 GET 200 script 0 B 0 ms —

04:10:12.802 GET 200 script 0 B 0 ms —

04:10:12.805 GET 200 script 0 B 0 ms —

04:10:12.807 GET 200 script 0 B 0 ms —

04:10:12.810 GET 200 script 0 B 0 ms —

04:10:12.812 GET 200 script 0 B 0 ms —

04:10:12.814 GET 200 script 0 B 0 ms —

04:10:12.817 GET 200 script 0 B 0 ms —

04:10:12.820 GET 200 script 0 B 0 ms —

04:10:12.822 GET 200 script 0 B 0 ms —

04:10:12.825 GET 200 script 0 B 0 ms —

04:10:13.157 GET 200 script 0 B 0 ms —

04:10:13.161 GET 200 script 0 B 0 ms —

04:10:13.163 GET 200 script 0 B 0 ms —

04:10:13.165 GET 200 script 0 B 0 ms —

04:10:13.167 GET 200 script 0 B 0 ms —

04:10:13.201 GET 200 img 0 B 0 ms —

04:10:13.204 GET 200 img 0 B 0 ms —

04:10:13.206 GET 200 img 0 B 0 ms —

04:10:13.208 GET 200 img 0 B 0 ms —

04:10:13.210 GET 200 img 0 B 0 ms —

04:10:13.212 GET 200 img 0 B 0 ms —

04:10:13.214 GET 200 img 0 B 0 ms —

04:10:13.216 GET 200 img 0 B 0 ms —

http://h4q4z3.rnashyfkf.cc/

Domain graph

Hostnames

Connections