urlquery.net
Investigate/Report/bc99c29b-7e44-4b17-bf58-bb8a91897ddb
WEBSITE ANALYSIS REPORT

http://safoodsco.com/clogs/#generalbugs@zippenhop.com

public
Report tags
phishing
Submit tags
Request review
Phishing detected

12 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document11.1 KB408 ms5 alerts
GET200stylesheet16.4 KB145 ms—
GET200img9.2 KB283 ms—
GET200font39.2 KB223 ms—
GET200font39.2 KB136 ms—
GET302img4.0 KB1516 ms5 alerts
GET200fetch21 B164 ms—
GET200img4.0 KB44 ms5 alerts

Transaction #04

Request / response

URL

GET HTTPS
https://safoodsco.com/wp-includes/images/w-logo-blue-white-bg.png

IP / ASN

The Netherlands 88.218.28.56

AS50673 · Serverius Holding B.V.

Requested by
https://safoodsco.com/clogs/#generalbugs@zippenhop.com

Resource information

File type
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
MIME type
image/png
First seen (UTC)
08 Apr 2023 · 12:31:37.000 UTC
Last seen (UTC)
22 Oct 2026 · 17:02:05.705 UTC
Times seen
75744
Size
4.0 KB (4119 bytes)
MD5
000bf649cc8f6bf27cfb04d1bcdcd3c7
SHA1
d73d2f6d74ec6cdcbae07955592962e77d8ae814
SHA256
6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0

Certificate information

Issuer
Let's Encrypt · R13
Subject
cpanel.safoodsco.com
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
23:62:9D:2B:44:AD:83:50:CB:46:12:AC:70:4B:3D:FF:20:A5:C1:F3
Valid from
Sat, 27 Sep 2025 04:34:12 GMT
Valid until
Fri, 26 Dec 2025 04:34:11 GMT

Technology fingerprints

  • Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
OpenPhish Phishing - Generic/Spear PhishingmediumPhishing
Cloudflare DNS SinkholedmediumMalicious
DigiCert UltraDNS SinkholedmediumMalicious
DNS4EU SinkholedmediumMalicious
CIRA Canadian Shield DNS SinkholedmediumMalicious

HTTP headers

Request headers

GET /wp-includes/images/w-logo-blue-white-bg.png HTTP/1.1
Host: safoodsco.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://safoodsco.com/clogs/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Fri, 14 Nov 2025 18:33:00 GMT
content-type: image/png
content-length: 4119
last-modified: Tue, 16 Nov 2021 00:04:01 GMT
etag: "6192f571-1017"
expires: Sun, 14 Dec 2025 18:33:00 GMT
pragma: public
cache-control: max-age=2592000, public, must-revalidate, proxy-revalidate
accept-ranges: bytes
X-Firefox-Spdy: h2
GET200document19.7 KB119 ms3 alerts
GET200stylesheet6.2 KB1489 ms1 alerts
GET200stylesheet139.1 KB1622 ms1 alerts
GET200img5.2 KB1123 ms1 alerts
GET200script68.0 KB149 ms—
GET200script18.7 KB67 ms—
GET200script47.8 KB110 ms—
GET200script83.6 KB375 ms—
GET200script49.8 KB67 ms—
GET302script39.9 KB85 ms—
GET200stylesheet9.4 KB19 ms—
GET200script39.9 KB19 ms—
GET200img1.0 KB161 ms1 alerts
GET200img976 B168 ms1 alerts
GET200img962 B1518 ms1 alerts
GET200img1.0 KB325 ms1 alerts
GET200img320 B277 ms1 alerts
GET200img450 B311 ms1 alerts
GET200font22.1 KB1687 ms1 alerts
GET200font22.4 KB1730 ms1 alerts
GET200font21.9 KB1634 ms1 alerts
GET200font15.7 KB163 ms1 alerts
GET200font15.7 KB169 ms1 alerts
GET200font15.7 KB170 ms1 alerts
32 visible / 32 matching / 32 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot