WEBSITE ANALYSIS REPORT

https://s-verkkopankin-paivitys-fi.9-l.click/spnk/FM.php

05 Oct 2026 · 13:39:40.000 UTCpublic

Report tags
Submit tags: soteria

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Domain graph details

Hostnames

api.usercentrics.eu4 captured requests
app.usercentrics.eu2 captured requests
cdnjs.cloudflare.com5 captured requests
fonts.gstatic.com2 captured requests
privacy-proxy.usercentrics.eu1 captured requests
s-verkkopankin-paivitys-fi.9-l.click39 captured requests
service.giosg.com8 captured requests
static.s-cloud.fi1 captured requests
wa.s-cloud.fi2 captured requests
www.google.com2 captured requests
www.gstatic.com6 captured requests
www.s-pankki.fi2 captured requests

Connections

s-verkkopankin-paivitys-fi.9-l.click → api.usercentrics.euCalls4 captured connections
s-verkkopankin-paivitys-fi.9-l.click → app.usercentrics.euEmbeds1 captured connections
s-verkkopankin-paivitys-fi.9-l.click → app.usercentrics.euLoads from1 captured connections
s-verkkopankin-paivitys-fi.9-l.click → cdnjs.cloudflare.comLoads from5 captured connections
s-verkkopankin-paivitys-fi.9-l.click → fonts.gstatic.comLoads from2 captured connections
s-verkkopankin-paivitys-fi.9-l.click → privacy-proxy.usercentrics.euCalls1 captured connections
s-verkkopankin-paivitys-fi.9-l.click → service.giosg.comCalls2 captured connections
s-verkkopankin-paivitys-fi.9-l.click → service.giosg.comLoads from6 captured connections
s-verkkopankin-paivitys-fi.9-l.click → static.s-cloud.fiLoads from1 captured connections
s-verkkopankin-paivitys-fi.9-l.click → wa.s-cloud.fiCalls2 captured connections
s-verkkopankin-paivitys-fi.9-l.click → www.google.comEmbeds2 captured connections
s-verkkopankin-paivitys-fi.9-l.click → www.gstatic.comLoads from2 captured connections
s-verkkopankin-paivitys-fi.9-l.click → www.s-pankki.fiLoads from2 captured connections
www.google.com → www.gstatic.comLoads from4 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:38:55.206 GET 200 document 82.3 KB 2193 ms 1 alerts

13:38:56.879 GET 200 stylesheet 594 B 13 ms 1 alerts

13:38:56.881 GET 200 stylesheet 1.0 KB 44 ms 1 alerts

13:38:56.882 GET 200 stylesheet 23.8 KB 37 ms 1 alerts

13:38:56.884 GET 200 stylesheet 273.1 KB 71 ms 1 alerts

13:38:56.885 GET 200 stylesheet 977.5 KB 63 ms 1 alerts

13:38:56.938 GET 200 script 3.9 KB 1128 ms 1 alerts

13:38:56.940 GET 200 script 72.6 KB 55 ms 1 alerts

13:38:56.942 GET 200 script 871.4 KB 2239 ms 1 alerts

13:38:56.945 GET 200 script 85.5 KB 15 ms 1 alerts

13:38:56.946 GET 200 script 43.6 KB 35 ms 1 alerts

13:38:56.948 GET 200 script 105.0 KB 57 ms 1 alerts

13:38:56.950 GET 200 script 5.2 KB 55 ms 1 alerts

13:38:56.951 GET 200 script 1010 B 14 ms 1 alerts

13:38:56.952 GET 200 script 539.8 KB 30 ms 1 alerts

13:38:56.954 GET 200 script 462.0 KB 55 ms 1 alerts

13:38:57.044 GET 200 script 451.4 KB 2967 ms 1 alerts

13:38:57.045 GET 200 img 3.0 KB 1137 ms 1 alerts

13:38:57.300 GET 200 fetch 2.9 KB 51 ms —

13:38:57.303 GET 404 script 0 B 0 ms —

13:38:57.304 GET 200 script 72.6 KB 87 ms —

13:38:57.305 GET 200 script 3.9 KB 165 ms —

13:38:57.308 GET 404 font 355 B 1084 ms 1 alerts

13:38:57.309 GET 404 font 355 B 1100 ms 1 alerts

13:38:57.311 GET 404 img 355 B 1095 ms 1 alerts

13:38:57.431 GET 404 img 355 B 1135 ms 1 alerts

13:38:57.434 GET 404 img 355 B 1102 ms 1 alerts

13:38:57.436 GET 404 img 355 B 1053 ms 1 alerts

13:38:57.442 GET 200 script 66.7 KB 1796 ms 1 alerts

13:38:57.444 GET 404 script 355 B 1141 ms 1 alerts

13:38:57.447 GET 200 script 256.0 KB 38 ms —

13:38:57.449 GET 200 script 45.2 KB 32 ms —

13:38:57.451 GET 200 script 38.1 KB 72 ms —

13:38:57.453 GET 200 script 10.1 KB 36 ms —

13:38:57.454 GET 200 script 16.5 KB 58 ms —

13:38:57.456 GET 200 img 87.1 KB 1753 ms 1 alerts

13:38:57.461 GET 404 font 355 B 1102 ms 1 alerts

13:38:57.463 GET 404 font 355 B 1050 ms 1 alerts

13:38:57.578 POST 200 xhr 2 B 39 ms —

13:38:57.583 GET 200 subdocument 5.5 KB 371 ms 1 alerts

13:38:57.587 OPTIONS 200 xhr 0 B 57 ms —

13:38:58.398 GET 404 font 355 B 1046 ms 1 alerts

13:38:58.416 GET 404 font 355 B 377 ms 1 alerts

13:38:58.518 GET 404 font 355 B 1037 ms 1 alerts

13:38:58.569 GET 404 font 355 B 365 ms 1 alerts

13:38:59.278 GET 200 subdocument 54.4 KB 1096 ms 1 alerts

Transaction #32

Request / response

URL

GET HTTPS

https://s-verkkopankin-paivitys-fi.9-l.click/spnk/FM_files/anchor.htm

IP / ASN

172.67.132.1

AS13335 · CLOUDFLARENET

Requested by: https://s-verkkopankin-paivitys-fi.9-l.click/spnk/FM.php

Resource information

File type: HTML document, Unicode text, UTF-8 text, with very long lines (36211), with CRLF line terminators
MIME type: text/html
First seen (UTC): 24 Jun 2026 · 09:47:20.102 UTC
Last seen (UTC): 05 Oct 2026 · 13:39:51.706 UTC
Times seen: 5

Size: 54.4 KB (55714 bytes)
MD5: ddc9b0c518143a3824c645e367deb313
SHA1: 561be2348d47f02cc6558ec34d57148709951f5c
SHA256: 72cbe75b0a9687dd1cb419dd88ad9a871b5357311c40dcedc366263b414c7155

Certificate information

Issuer: Google Trust Services · WE1
Subject: 9-l.click
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: B1:05:F1:2A:18:E5:8F:B0:22:7B:20:AB:DF:BA:65:52:34:FB:AA:50
Valid from: Thu, 01 Oct 2026 04:17:17 GMT
Valid until: Wed, 30 Dec 2026 05:16:03 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /spnk/FM_files/anchor.htm HTTP/1.1
Host: s-verkkopankin-paivitys-fi.9-l.click
User-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://s-verkkopankin-paivitys-fi.9-l.click/spnk/FM.php
Cookie: PHPSESSID=99ed125b7097db45c3db06c216b45900; ProfileConsent=true; EpiserverVisitorGroups=true
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Mon, 05 Oct 2026 13:38:59 GMT
server: cloudflare
last-modified: Wed, 03 Jun 2026 00:47:31 GMT
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=4,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=q%2BD%2FUAoA8oztfUbe3YgHRLvGEEpTOmOMbC89T%2FUzdnMitjfwJRmMLndbd4Fn9gf%2BAFjmA6a6uwYvR2dTEdS58CU4rlpH2j%2FTh1z8aNjWjxg78M9Fdd3aLlc%2Fi6DZodnSd1uMU%2FZJ7IM25%2B3HFab4AECmmVKzBi0%3D"}]}
content-encoding: zstd
content-type: text/html
cf-cache-status: DYNAMIC
cf-ray: a45cd4707c2e56bd-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

13:38:59.287 GET 404 script 355 B 18 ms 1 alerts

13:38:59.312 GET 200 script 16.4 KB 42 ms —

13:38:59.314 GET 200 script 24.3 KB 75 ms —

13:38:59.315 GET 200 script 21.8 KB 109 ms —

https://s-verkkopankin-paivitys-fi.9-l.click/spnk/FM.php

Domain graph

Hostnames

Connections

Network requests

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://s-verkkopankin-paivitys-fi.9-l.click/spnk/FM.php

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://s-verkkopankin-paivitys-fi.9-l.click/spnk/FM.php

Domain graph

Network requests