WEBSITE ANALYSIS REPORT

http://snhgj743low-xvtlynhb-3a4c1f-snq53c.pages.dev/

06 Oct 2026 · 02:16:34.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:15:58.281 GET 403 document 4.9 KB 36 ms 2 alerts

02:15:58.458 GET 403 document 4.9 KB 3162 ms 2 alerts

02:16:01.893 GET 200 stylesheet 23.5 KB 19 ms 2 alerts

02:16:01.895 GET 302 script 0 B 20 ms —

02:16:01.937 GET 200 img 452 B 13 ms 2 alerts

02:16:01.956 GET 301 img 0 B 18 ms 2 alerts

02:16:01.978 GET 200 script 84.7 KB 9 ms —

02:16:01.980 GET 200 img 4.2 KB 64 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://snhgj743low-xvtlynhb-3a4c1f-snq53c.pages.dev/favicon.ico

IP / ASN

172.66.44.134

AS13335 · CLOUDFLARENET

Requested by: http://snhgj743low-xvtlynhb-3a4c1f-snq53c.pages.dev/

Resource information

File type: MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
MIME type: image/x-icon
First seen (UTC): 30 May 2024 · 07:56:00.000 UTC
Last seen (UTC): 18 Oct 2026 · 09:45:02.056 UTC
Times seen: 15899

Size: 4.2 KB (4286 bytes)
MD5: 5e1f5addac24d740cec0c41d5f99cd20
SHA1: 0bce047ed832d7011b4ea2a91ee924694984b0dd
SHA256: 75476d4fa93c73823ba9efd9f14068fce0af20f9e2183bc978fb30c2df2c55c7

Certificate information

Issuer: Google Trust Services · WE1
Subject: snhgj743low-xvtlynhb-3a4c1f-snq53c.pages.dev
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: F6:A2:C0:93:8C:13:A8:4E:4F:02:B5:D4:D2:C5:70:B8:A3:C7:4E:49
Valid from: Sat, 19 Sep 2026 10:14:28 GMT
Valid until: Fri, 18 Dec 2026 11:14:25 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: snhgj743low-xvtlynhb-3a4c1f-snq53c.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Tue, 06 Oct 2026 02:16:02 GMT
content-type: image/x-icon
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=U16b%2B%2Bkf4ZSfR3epnmdrVQ00148nT%2FPHSnvEodhhC6792%2Bs2RSN6WXC5yNnkxf%2BcoD%2Bn%2B24GMCVQIL2EVFjHApfVRB%2B%2Ba%2FvH8Zx0T3Mv3iTBwB1nlOOWKmd9L86iLV1KaPWexqwUlPxzfl6kGukLFTyNDqM5tA8YoNoSrgTpCg%3D%3D"}]}
etag: W/"f9f7b21d70f1f7ca06b1df25a84512b4"
content-encoding: br
server: cloudflare
cf-ray: a46129647acf783d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

02:16:02.042 GET 200 subdocument 253.3 KB 16 ms —

02:16:02.394 POST 200 xhr 760.8 KB 92 ms —

02:16:02.767 GET No response fetch 0 B 0 ms —

02:16:03.774 GET 200 img 6.9 KB 5 ms —

02:16:04.059 POST 200 xhr 115.2 KB 36 ms —

02:16:08.211 POST 200 xhr 2.3 KB 19 ms —

02:16:18.247 GET 200 subdocument 250.2 KB 12 ms —

02:16:18.604 POST 200 xhr 761.0 KB 90 ms —

02:16:19.014 GET No response fetch 0 B 0 ms —

02:16:20.094 GET 200 img 366 B 4 ms —

02:16:20.310 POST 200 xhr 115.2 KB 31 ms —

http://snhgj743low-xvtlynhb-3a4c1f-snq53c.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://snhgj743low-xvtlynhb-3a4c1f-snq53c.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://snhgj743low-xvtlynhb-3a4c1f-snq53c.pages.dev/

Domain graph

Network requests