WEBSITE ANALYSIS REPORT

http://mysteriousprocess.com/c.G-FBzCcDzE9_jGbHGIlJj-aL2MlNkOP_TQERwSMTz-EV3WNXjYc_0aNbzcUdx-OfTgghziN_zkQlwmOnD-lpfqNrjsY_1uOvDwAx2-MzkApBQCJ_mERFpGdHD-0JxKNLzMY_3ONPTQUR2-MTTUcV1WM_DYYZ2aNbz-kdweMfDgE_4iJjmkRl0-an2o4p9qZ_2sdtEuSvm-lxVySzmAN_0CMDUEpFr-bHjIkJ4KS_XMANyOWPk-9RJSWTEUN_sWeXUYRZi-dbDcJdleY_UgEhmicjH-RlumPnUoN_nqSrksttV-QvkwlxKyW_WA5BKCdDl-lFXGUHmIl_ZKVLzMVNr-SP2QlRCSa_0U4VyWVXm-tZZaabkcU_1eWflgdhG-ajFkll6mT_XolpZqVr0-0tyuTvWwp_ayazUA5BE-ZDGEpFZGa_mIxJqKTLU-RNVOMPUQ1_XSVTmUpVa-RXEYRZQaa_Uc9d2eSf0-Jhqiajik5_jmRnUoNpP-cr0sptZuR_CwZxyyczm-VBxCaDDE1_hGOHDIMJ0-ZLmMUNzOZ_jQQR3SMTz-VViWNXjYc_3aObGcQd1-MfTgAh3iN_WkElymYnW-Yp3qYrjsI_wuMviwZxy-czmAlBkCP_TEcF2GYH2-ZJlKZLWMY_xOMPzQMRz-ZTjUVVhWZ_WYNZlaObG-JdieNfmgI_yiMjzkAl2-OnDokp0qO_GsQt2uJvn-JxzyczmAM_9CcD2EhFv-cHnIRJsKa_WM5NrOJPn-NRpSZTDU0_4WNXzYcZz-MbTckdzeJ_ngRh0iPjT-Ilmmenmo9_uqZrWsltk-PvTwYx2yN_TAgBwCNDj-IF

04 Jan 2026 · 20:27:14.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:26:50.800 GET 302 document 618 B 331 ms 1 alerts

20:26:51.075 GET 200 document 618 B 180 ms 1 alerts

20:26:51.440 GET 200 document 3.3 KB 199 ms 1 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://rcdn-web.com/t/r.html?t=https%3A%2F%2Ffhvfd.com%2Fapi%2Fsubmit_form_request%3Fp%3Dfb6cf008-9346-4298-96ea-3983c4ae3adf%26ts%3D1767558410%26z%3D10188211

IP / ASN

184.51.252.169

AS20940 · Akamai International B.V.

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with very long lines (2992)
MIME type: text/html
First seen (UTC): 11 Jun 2025 · 08:18:16.800 UTC
Last seen (UTC): 01 Jun 2026 · 20:37:51.212 UTC
Times seen: 180

Size: 3.3 KB (3401 bytes)
MD5: b826ec78b04b2e78fcd53fc22478c7e7
SHA1: 47d56a335abe28dcbd6bfb6bcddd4de73335aefa
SHA256: 9b7f0d1c8d26a884d2a6b5ca4ae96a8b4fe0ed599597bf57fab59a47c768e2ff

Certificate information

Issuer: Let's Encrypt · R13
Subject: rcdn-web.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 32:D3:45:C1:AE:64:54:8E:91:6F:4B:F5:35:00:3A:6D:A8:BB:32:9E
Valid from: Fri, 07 Nov 2025 07:39:14 GMT
Valid until: Thu, 05 Feb 2026 07:39:13 GMT

Technology fingerprints

Amazon S3 (CDN)
Amazon Web Services (PaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /t/r.html?t=https%3A%2F%2Ffhvfd.com%2Fapi%2Fsubmit_form_request%3Fp%3Dfb6cf008-9346-4298-96ea-3983c4ae3adf%26ts%3D1767558410%26z%3D10188211 HTTP/1.1
Host: rcdn-web.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
x-amz-id-2: 2j8unvBNy6Ji7Jp3WI9cdVDCvDP8SOXy7FficfUJwI7vMPClPHy/RBZn/KiNtyEThOgmBcMOhdJimOwYP0i60nvNDnzRotMJoXeBjfL/5GI=
x-amz-request-id: 18S9EWVEXXKFVR2T
Last-Modified: Tue, 22 Oct 2024 13:34:49 GMT
ETag: "b826ec78b04b2e78fcd53fc22478c7e7"
x-amz-server-side-encryption: AES256
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: text/html
Content-Length: 3401
Server: AmazonS3
Date: Sun, 04 Jan 2026 20:26:51 GMT
Connection: keep-alive

20:26:51.732 GET 200 document 38.4 KB 228 ms —

20:26:52.055 GET 200 lazy-img 43 B 29 ms —

20:26:52.103 GET 404 img 146 B 26 ms —

20:26:52.482 POST 200 beacon 0 B 28 ms —

20:26:52.502 POST 301 document 513 B 28 ms —

20:26:52.533 GET 200 document 513 B 133 ms —

20:26:52.861 GET 404 img 513 B 15 ms —

Domain graph

Hostnames

Connections