WEBSITE ANALYSIS REPORT

https://5paalgxwvcd3wzsglg2k6nwi.vercel.app/?naps

10 Oct 2026 · 01:33:45.000 UTCpublic

Report tags: wetransfer phishing financial suspicious telegram_bot
Submit tags: openphish

Request review

Phishing detected

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

01:25:55.188 GET 200 document 860.6 KB 53 ms 6 alerts

01:25:55.654 GET 429 script 0 B 0 ms —

01:25:55.660 GET 200 script 18.7 KB 45 ms —

01:25:55.662 GET 200 script 47.8 KB 74 ms —

01:25:55.663 GET 200 script 83.6 KB 82 ms —

01:25:55.665 GET 200 script 49.8 KB 31 ms —

01:25:55.667 GET 302 script 0 B 43 ms —

01:25:55.736 GET 200 script 39.9 KB 16 ms —

01:25:55.859 GET 404 img 79 B 16 ms 4 alerts

01:25:55.921 GET 404 img 79 B 17 ms 4 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://5paalgxwvcd3wzsglg2k6nwi.vercel.app/favicon.ico

IP / ASN

216.198.79.195

AS16509 · AMAZON-02

Requested by: https://5paalgxwvcd3wzsglg2k6nwi.vercel.app/?naps

Resource information

File type: ASCII text
MIME type: text/plain; charset=utf-8
First seen (UTC): 10 Oct 2026 · 01:34:01.617 UTC
Last seen (UTC): 10 Oct 2026 · 01:34:01.617 UTC
Times seen: 1

Size: 79 B (79 bytes)
MD5: 70f98efc32132e1a54c5338474c3d1f8
SHA1: 3d2f42e4cb0e1c13a7132272084c147caaf80866
SHA256: bad2332fd6e7518bfa11e3cd68de452f8989853b1ff25f05c4ab0ae75d3b5384

Certificate information

Issuer: Google Trust Services · WR1
Subject: *.vercel.app
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: E9:FE:9E:58:E9:B3:95:78:1F:9A:AE:FE:41:C4:01:64:C9:FB:2A:BC
Valid from: Sat, 29 Aug 2026 19:48:09 GMT
Valid until: Fri, 27 Nov 2026 19:48:08 GMT

Technology fingerprints

Vercel (PaaS)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - WeTransfer	medium	Phishing
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: 5paalgxwvcd3wzsglg2k6nwi.vercel.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://5paalgxwvcd3wzsglg2k6nwi.vercel.app/?naps
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 404 
cache-control: public, max-age=0, must-revalidate
content-type: text/plain; charset=utf-8
date: Sat, 10 Oct 2026 01:25:55 GMT
server: Vercel
strict-transport-security: max-age=63072000; includeSubDomains; preload
x-vercel-error: NOT_FOUND
x-vercel-id: arn1::jkv2p-1791595555927-88ca4941909b
content-length: 79
X-Firefox-Spdy: h2

https://5paalgxwvcd3wzsglg2k6nwi.vercel.app/?naps

Domain graph

Hostnames

Connections

Network requests

Transaction #06

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://5paalgxwvcd3wzsglg2k6nwi.vercel.app/?naps

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #06

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://5paalgxwvcd3wzsglg2k6nwi.vercel.app/?naps

Domain graph

Network requests