WEBSITE ANALYSIS REPORT

https://sms-weryf-4283.shop/o/ix118/7327874828157184#selectedbank9

10 Sep 2026 · 20:10:25.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Domain graph details

Hostnames

sms-weryf-4283.shop33 captured requests
ws-eu.pusher.com1 captured requests

Connections

sms-weryf-4283.shop → ws-eu.pusher.comCalls1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:09:52.683 GET 200 document 145.1 KB 567 ms 5 alerts

20:09:53.402 GET 200 script 2.8 KB 142 ms 5 alerts

20:09:53.403 GET 200 script 89.3 KB 171 ms 5 alerts

20:09:53.405 GET 200 script 38.0 KB 117 ms 5 alerts

20:09:53.406 GET 200 script 19.5 KB 130 ms 5 alerts

Transaction #01

Request / response

URL

GET HTTPS

https://sms-weryf-4283.shop/ox/js/qrcode.min.js?version=1789070993

IP / ASN

104.21.73.104

AS13335 · CLOUDFLARENET

Requested by: https://sms-weryf-4283.shop/o/ix118/7327874828157184#selectedbank9

Resource information

File type: ASCII text, with very long lines (19927), with no line terminators
MIME type: application/javascript
First seen (UTC): 07 Mar 2023 · 01:14:56.000 UTC
Last seen (UTC): 17 Oct 2026 · 22:11:08.263 UTC
Times seen: 74123

Size: 19.5 KB (19927 bytes)
MD5: 517b55d3688ce9ef1085a3d9632bcb97
SHA1: 2d06c1f823f34c19981c6ae0b0eb0f5861c5e14b
SHA256: c541ef06327885a8415bca8df6071e14189b4855336def4f36db54bde8484f36

Certificate information

Issuer: Google Trust Services · WE1
Subject: sms-weryf-4283.shop
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 20:E1:22:77:22:47:2F:53:BA:E3:EE:03:56:65:27:16:25:75:E3:16
Valid from: Tue, 08 Sep 2026 16:16:44 GMT
Valid until: Mon, 07 Dec 2026 17:15:20 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ox/js/qrcode.min.js?version=1789070993 HTTP/1.1
Host: sms-weryf-4283.shop
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://sms-weryf-4283.shop/o/ix118/7327874828157184
Sec-GPC: 1
Connection: keep-alive
Cookie: PHPSESSID=o4m4j682tq5ee51it0vsdqanir; CSRF_TOKEN=1f21e47d54ae1a5d0f67ef07c0c62c772466b528321abc64b8bcc20336f2a3cc
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Thu, 10 Sep 2026 20:09:53 GMT
content-type: application/javascript
last-modified: Tue, 23 Sep 2025 12:58:35 GMT
vary: Accept-Encoding
etag: W/"68d2997b-4dd7"
expires: Sat, 10 Oct 2026 20:09:53 GMT
cache-control: public, max-age=2592000, immutable
content-encoding: gzip
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: MISS
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Aaj1wWwR8vmuEdl0clhNeZMvGHDoZaWNgILTHIodxwVyn19Ku2IlnSVelApoY40l9pyW0qwkaLOzGCT8CChMcO95sVMWpW7G8Zq7owuPpQT33945rFG85idfMu9yVbHuEdLA2g1r"}]}
priority: u=3,i=?0
cf-ray: a39112acdab28aa7-CPH
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

20:09:53.411 GET 200 script 59.2 KB 160 ms 5 alerts

20:09:53.413 GET 200 script 7.9 KB 134 ms 5 alerts

20:09:53.414 GET 200 stylesheet 152.2 KB 149 ms 5 alerts

20:09:53.416 GET 200 stylesheet 40.3 KB 153 ms 5 alerts

20:09:53.418 GET 200 script 8.0 KB 139 ms 5 alerts

20:09:53.421 GET 200 script 17.7 KB 139 ms 5 alerts

20:09:53.422 GET 200 script 76.9 KB 177 ms 5 alerts

20:09:53.616 GET 200 img 2.3 KB 109 ms 5 alerts

20:09:53.618 GET 200 img 53.1 KB 143 ms 5 alerts

20:09:53.620 GET 200 img 6.6 KB 115 ms 5 alerts

20:09:53.622 GET 200 img 179.3 KB 211 ms 5 alerts

20:09:53.623 GET 200 img 3.0 KB 111 ms 5 alerts

20:09:53.624 GET 200 img 17.0 KB 142 ms 5 alerts

20:09:53.626 GET 200 img 3.4 KB 71 ms 5 alerts

20:09:53.626 GET 200 img 185.9 KB 138 ms 5 alerts

20:09:53.628 GET 200 img 107.0 KB 195 ms 5 alerts

20:09:53.977 GET 101 websocket 0 B 396 ms —

20:09:54.000 POST 200 xhr 2 B 140 ms 5 alerts

20:09:54.012 GET 200 img 1.9 KB 39 ms 5 alerts

20:09:54.147 GET 200 script 358.7 KB 145 ms 5 alerts

20:09:54.296 GET 200 img 70.9 KB 143 ms 5 alerts

20:09:54.303 GET 200 stylesheet 251 B 107 ms 5 alerts

20:09:54.417 GET 200 stylesheet 17.4 KB 63 ms 5 alerts

20:09:54.419 GET 200 stylesheet 21.8 KB 108 ms 5 alerts

20:09:54.421 GET 200 stylesheet 20.7 KB 110 ms 5 alerts

20:09:54.422 GET 200 stylesheet 18.9 KB 103 ms 5 alerts

20:09:54.554 GET 200 img 744.3 KB 198 ms 5 alerts

20:10:07.547 POST 200 xhr 149 B 101 ms 5 alerts

20:10:14.544 POST 200 xhr 18 B 103 ms 5 alerts

https://sms-weryf-4283.shop/o/ix118/7327874828157184#selectedbank9

Domain graph

Hostnames

Connections

Network requests

Transaction #01

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://sms-weryf-4283.shop/o/ix118/7327874828157184#selectedbank9

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #01

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://sms-weryf-4283.shop/o/ix118/7327874828157184#selectedbank9

Domain graph

Network requests