WEBSITE ANALYSIS REPORT

https://kp2dhlbthocs4k54oaijdta4twjbglazw5duuwrxllc7zqzeqfmq.ar-io.dev/U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk?content=v2.eyJ2IjoyLCJzIjoiMFh2ZWtNYU1JOGxmQWpEM0FCMm90SWdlMy0yejJDQmZVc2J0UGNGeWtwayJ9.2EhUbva_Ncj24kJLD6NGXKEJUL1Y8hKsrf-ZHZ-fgOY&shell=U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk

10 Oct 2026 · 12:33:59.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:26:38.673 GET 200 document 2.5 KB 261 ms —

12:26:39.561 GET 200 fetch 813.1 KB 258 ms —

12:26:39.663 GET 404 img 150 B 35 ms —

12:26:39.983 GET 404 img 183 B 35 ms —

12:26:40.019 GET 404 img 179 B 35 ms —

12:26:40.021 GET 404 img 183 B 35 ms —

12:26:40.022 GET 404 img 183 B 35 ms —

12:26:40.023 GET 404 img 183 B 35 ms —

12:26:40.024 GET 404 img 183 B 34 ms —

12:26:40.025 GET 404 img 183 B 34 ms —

12:26:40.026 GET 404 img 183 B 34 ms —

12:26:40.028 GET 404 img 183 B 34 ms —

12:26:40.029 GET 404 img 183 B 34 ms —

12:26:40.030 GET 404 img 184 B 34 ms —

12:26:40.031 GET 404 img 184 B 57 ms —

12:26:40.112 GET 404 subdocument 151 B 35 ms —

12:26:40.180 POST 200 fetch 486 B 103 ms —

12:26:40.183 OPTIONS 200 fetch 0 B 126 ms —

12:26:40.185 POST 200 fetch 487 B 54 ms —

12:26:40.192 OPTIONS 204 fetch 0 B 70 ms —

12:26:40.194 POST 200 fetch 486 B 72 ms —

12:26:40.197 POST 429 fetch 17 B 34 ms —

12:26:40.199 OPTIONS No response fetch 0 B 0 ms —

12:26:40.200 OPTIONS 204 fetch 0 B 98 ms —

12:26:40.202 OPTIONS 521 fetch 0 B 147 ms 1 alerts

Transaction #09

Request / response

URL

OPTIONS HTTPS

https://1rpc.io/base

IP / ASN

172.67.204.2

AS13335 · CLOUDFLARENET

Requested by: https://kp2dhlbthocs4k54oaijdta4twjbglazw5duuwrxllc7zqzeqfmq.ar-io.dev/U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk?content=v2.eyJ2IjoyLCJzIjoiMFh2ZWtNYU1JOGxmQWpEM0FCMm90SWdlMy0yejJDQmZVc2J0UGNGeWtwayJ9.2EhUbva_Ncj24kJLD6NGXKEJUL1Y8hKsrf-ZHZ-fgOY&shell=U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk

Resource information

File type: Not recorded
MIME type: text/html; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 12:29:43.415 UTC
Times seen: 19306850

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WE1
Subject: 1rpc.io
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 26:1F:8A:FC:BC:CB:3D:12:D1:37:52:2C:8E:BC:01:CD:38:1D:82:94
Valid from: Mon, 05 Oct 2026 05:07:12 GMT
Valid until: Sun, 03 Jan 2027 06:06:45 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

OPTIONS /base HTTP/1.1
Host: 1rpc.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://kp2dhlbthocs4k54oaijdta4twjbglazw5duuwrxllc7zqzeqfmq.ar-io.dev/
Origin: https://kp2dhlbthocs4k54oaijdta4twjbglazw5duuwrxllc7zqzeqfmq.ar-io.dev
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 521 
retry-after: 120
content-type: text/html; charset=UTF-8
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
referrer-policy: same-origin
date: Sat, 10 Oct 2026 12:26:40 GMT
x-frame-options: SAMEORIGIN
server-timing: cfExtPri
priority: u=4,i=?0
server: cloudflare
cf-ray: a4859d616c0035a6-OSL
alt-svc: h3=":443"; ma=86400
content-length: 6942

12:26:40.207 OPTIONS 200 fetch 0 B 63 ms —

12:26:40.214 POST 200 fetch 486 B 99 ms —

12:26:40.216 POST 200 fetch 487 B 45 ms —

12:26:40.219 POST 200 fetch 486 B 83 ms —

12:26:40.222 POST 200 fetch 98 B 34 ms —

12:26:40.224 OPTIONS 200 fetch 0 B 103 ms —

12:26:40.225 OPTIONS 204 fetch 0 B 46 ms —

12:26:40.226 OPTIONS No response fetch 0 B 0 ms —

12:26:40.227 OPTIONS 204 fetch 0 B 74 ms —

12:26:40.228 OPTIONS 521 fetch 0 B 121 ms 1 alerts

12:26:40.229 OPTIONS 200 fetch 0 B 53 ms —

12:26:40.490 POST 200 fetch 305.9 KB 371 ms —

12:26:40.492 POST 200 fetch 305.9 KB 353 ms —

12:26:40.960 POST 200 fetch 68.6 KB 60 ms —

12:26:40.962 POST 200 fetch 516.1 KB 235 ms —

12:26:40.963 POST 200 fetch 29.3 KB 130 ms —

12:26:40.965 POST 200 fetch 3.2 KB 102 ms —

12:26:40.966 POST 200 fetch 68.6 KB 173 ms —

12:26:40.968 POST 200 fetch 516.1 KB 249 ms —

12:26:40.970 POST 200 fetch 29.3 KB 124 ms —

12:26:40.972 POST 200 fetch 3.2 KB 48 ms —

12:26:41.110 GET 200 fetch 19.9 KB 114 ms —

12:26:41.153 GET 200 fetch 19.9 KB 65 ms —

12:26:41.335 POST 200 fetch 90 B 339 ms —

12:26:41.402 POST 200 fetch 90 B 715 ms —

https://kp2dhlbthocs4k54oaijdta4twjbglazw5duuwrxllc7zqzeqfmq.ar-io.dev/U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk?content=v2.eyJ2IjoyLCJzIjoiMFh2ZWtNYU1JOGxmQWpEM0FCMm90SWdlMy0yejJDQmZVc2J0UGNGeWtwayJ9.2EhUbva_Ncj24kJLD6NGXKEJUL1Y8hKsrf-ZHZ-fgOY&shell=U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk

Domain graph

Hostnames

Connections

Network requests

Transaction #09

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://kp2dhlbthocs4k54oaijdta4twjbglazw5duuwrxllc7zqzeqfmq.ar-io.dev/U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk?content=v2.eyJ2IjoyLCJzIjoiMFh2ZWtNYU1JOGxmQWpEM0FCMm90SWdlMy0yejJDQmZVc2J0UGNGeWtwayJ9.2EhUbva_Ncj24kJLD6NGXKEJUL1Y8hKsrf-ZHZ-fgOY&shell=U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #09

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://kp2dhlbthocs4k54oaijdta4twjbglazw5duuwrxllc7zqzeqfmq.ar-io.dev/U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk?content=v2.eyJ2IjoyLCJzIjoiMFh2ZWtNYU1JOGxmQWpEM0FCMm90SWdlMy0yejJDQmZVc2J0UGNGeWtwayJ9.2EhUbva_Ncj24kJLD6NGXKEJUL1Y8hKsrf-ZHZ-fgOY&shell=U_QzrDM7hS4rvHAQkcwcnZITLBm3R0paN1rF_MMkgVk

Domain graph

Network requests