WEBSITE ANALYSIS REPORT

http://jodyruddy.tvza.kro.kr/

13 Nov 2025 · 07:06:03.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:05:40.649 GET No response document 0 B 957 ms 1 alerts

07:05:41.789 GET 200 document 26.9 KB 1480 ms 1 alerts

07:05:43.214 GET 200 stylesheet 28.2 KB 950 ms 1 alerts

07:05:43.217 GET 200 stylesheet 99.6 KB 57 ms —

07:05:43.219 GET 301 script 0 B 38 ms —

07:05:43.221 GET 200 img 23.2 KB 167 ms —

07:05:43.222 GET 200 img 13.5 KB 230 ms —

07:05:43.223 GET 200 img 32.9 KB 119 ms —

07:05:43.225 GET 200 img 21.8 KB 171 ms —

07:05:43.226 GET 200 img 21.5 KB 130 ms —

07:05:43.227 GET 200 img 25.5 KB 143 ms —

07:05:43.229 GET 200 img 18.8 KB 148 ms —

07:05:43.230 GET 200 img 30.4 KB 154 ms —

07:05:43.231 GET 200 img 21.6 KB 167 ms —

07:05:43.232 GET 200 img 52.0 KB 172 ms —

07:05:43.233 GET 200 img 11.6 KB 172 ms —

07:05:43.234 GET 200 img 32.4 KB 175 ms —

07:05:43.235 GET 200 img 16.4 KB 172 ms —

07:05:43.236 GET 200 img 30.6 KB 185 ms —

07:05:43.237 GET 200 img 25.1 KB 179 ms —

07:05:43.238 GET 200 img 14.2 KB 179 ms —

07:05:43.238 GET 200 img 26.6 KB 173 ms —

07:05:43.239 GET 200 img 24.2 KB 175 ms —

07:05:43.240 GET 200 img 10.4 KB 178 ms —

07:05:43.243 GET 200 img 16.6 KB 176 ms —

07:05:43.246 GET 301 script 0 B 34 ms —

07:05:43.247 GET 200 script 1.3 KB 854 ms 1 alerts

07:05:43.739 GET 403 script 0 B 49 ms —

07:05:43.743 GET 403 script 0 B 32 ms —

07:05:44.101 GET 301 script 0 B 7 ms —

07:05:44.117 GET 200 font 146.6 KB 43 ms —

07:05:44.130 GET 403 script 0 B 18 ms —

07:05:44.237 GET 200 font 105.5 KB 20 ms —

07:05:44.244 GET 301 script 0 B 0 ms —

07:05:46.802 GET 200 document 0 B 682 ms 3 alerts

Transaction #36

Request / response

URL

GET HTTPS

https://crawlsingeshell.com/api/users?token=L2ZwNTlzaGdxP2tleT1iYWE0ZmYzMzhjMmQ4ZTBhN2JjMTU3OTEyZmU2MWExZiZwc3Q9MTc2MzAxNzYwNiZyZWZlcj1odHRwJTNBJTJGJTJGam9keXJ1ZGR5LnR2emEua3JvLmtyJTJGJnJtdGM9dCZzaHU9NjRiMWU5ZTI5YzIwZDFmNWM3NTBlMzMyOGZkZjJjZTY3NzA3YzZkYjViNTc0YjA3ZTNjZTZjODQxZGE2Mjk3YzE3ODc2ZWY2MjMzODJjZDI2ZTQyZDBmZWM2NTcxNzc0YTAxMWYzZTYwNGFkNDA1Mjg4YjFlYmJhZDEyMWM1NDEzYzc2NmYxZTY4NzFmNGJmMDFlMzAwODRmOTllMGEyZGRkYzlhZDY0N2RlNDMwYmY4NGRlM2YmcGlpPSZpbj0mdXVpZD0

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 22:29:55.418 UTC
Times seen: 19317673

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R13
Subject: crawlsingeshell.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: FC:D5:E9:DD:65:38:45:7D:5B:3E:F5:1F:29:B3:D2:F7:42:28:79:5C
Valid from: Thu, 23 Oct 2025 21:01:48 GMT
Valid until: Wed, 21 Jan 2026 21:01:47 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /api/users?token=L2ZwNTlzaGdxP2tleT1iYWE0ZmYzMzhjMmQ4ZTBhN2JjMTU3OTEyZmU2MWExZiZwc3Q9MTc2MzAxNzYwNiZyZWZlcj1odHRwJTNBJTJGJTJGam9keXJ1ZGR5LnR2emEua3JvLmtyJTJGJnJtdGM9dCZzaHU9NjRiMWU5ZTI5YzIwZDFmNWM3NTBlMzMyOGZkZjJjZTY3NzA3YzZkYjViNTc0YjA3ZTNjZTZjODQxZGE2Mjk3YzE3ODc2ZWY2MjMzODJjZDI2ZTQyZDBmZWM2NTcxNzc0YTAxMWYzZTYwNGFkNDA1Mjg4YjFlYmJhZDEyMWM1NDEzYzc2NmYxZTY4NzFmNGJmMDFlMzAwODRmOTllMGEyZGRkYzlhZDY0N2RlNDMwYmY4NGRlM2YmcGlpPSZpbj0mdXVpZD0 HTTP/1.1
Host: crawlsingeshell.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://crawlsingeshell.com/api/users?token=L2ZwNTlzaGdxP2tleT05Y2E2MDFhOWY0N2M3MzVkZjc2ZDVjYTQ2ZmEyNmE2NiZzdWJtZXRyaWM9MjY1MzM2Njg
Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNjUzMzY2OCwiayI6ImJhYTRmZjMzOGMyZDhlMGE3YmMxNTc5MTJmZTYxYTFmIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNzM0MjIwLCJwaWQiOjI5MDE1MiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjozOCwiYWlkIjoyOCwicHQiOjQsInBrIjoiZnA1OXNoZ3EiLCJ0IjoxLCJsdCI6dHJ1ZX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6ZmFsc2UsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cDovL2pvZHlydWRkeS50dnphLmtyby5rci8iLCJhciI6W119fQ.6lBhA0HDq51ot4WKiRQL7ZR76qdo_gQUqoI29hhkheo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 13 Nov 2025 07:05:47 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 14
Host: crawlsingeshell.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: b4e6c5eb5ee1f1dc40bca9e9efe6d57e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

07:05:47.255 GET 200 img 0 B 93 ms 3 alerts

http://jodyruddy.tvza.kro.kr/

Domain graph

Hostnames

Connections