WEBSITE ANALYSIS REPORT

http://sharepoint.onedrive.dczhxkw84930320.passkey.auth02.outlook.drive.plastkon.cc/

20 Oct 2026 · 15:09:49.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

15:09:19.410 GET 200 document 2.9 KB 147 ms 4 alerts

15:09:19.975 GET 200 stylesheet 156.5 KB 49 ms —

15:09:19.978 GET 200 script 87.4 KB 87 ms —

15:09:19.979 GET 200 script 20.8 KB 43 ms —

15:09:19.981 GET 200 script 58.6 KB 42 ms —

15:09:19.987 GET 200 img 4.5 KB 115 ms 4 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://sharepoint.onedrive.dczhxkw84930320.passkey.auth02.outlook.drive.plastkon.cc/loo.jpg

IP / ASN

84.200.17.151

AS44066 · firstcolo GmbH

Requested by: https://sharepoint.onedrive.dczhxkw84930320.passkey.auth02.outlook.drive.plastkon.cc/

Resource information

File type: JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 237x26, components 3
MIME type: image/jpeg
First seen (UTC): 07 Jun 2023 · 13:35:32.000 UTC
Last seen (UTC): 20 Oct 2026 · 21:18:07.109 UTC
Times seen: 37

Size: 4.5 KB (4611 bytes)
MD5: ebc4463420aaf4bcb0a6e24a33288d31
SHA1: dda51c8e90cec24d74dcb7749a48f27dd953a361
SHA256: 294a29ab56e19e93c816e73687b00964bd9dbd71b0254d0786b0dbf7ae81fef7

Certificate information

Issuer: Let's Encrypt · YR2
Subject: Not recorded
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 25:06:01:10:66:5A:8B:FD:BA:B0:85:54:F1:74:2F:2D:32:81:9F:8A
Valid from: Mon, 19 Oct 2026 08:55:12 GMT
Valid until: Sun, 17 Jan 2027 08:55:11 GMT

Technology fingerprints

Ubuntu (Operating systems)
Nginx:1.18.0 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /loo.jpg HTTP/1.1
Host: sharepoint.onedrive.dczhxkw84930320.passkey.auth02.outlook.drive.plastkon.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://sharepoint.onedrive.dczhxkw84930320.passkey.auth02.outlook.drive.plastkon.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 20 Oct 2026 15:09:20 GMT
Content-Type: image/jpeg
Content-Length: 4611
Last-Modified: Wed, 22 Jul 2026 23:43:25 GMT
Connection: keep-alive
ETag: "6a61559d-1203"
Accept-Ranges: bytes

15:09:19.989 GET 404 img 162 B 140 ms 4 alerts

15:09:19.991 GET 200 img 3.4 KB 94 ms 4 alerts

15:09:20.204 GET 206 media 5.65 MB 703 ms 4 alerts

15:09:20.302 GET 404 img 162 B 28 ms 4 alerts

http://sharepoint.onedrive.dczhxkw84930320.passkey.auth02.outlook.drive.plastkon.cc/

Domain graph

Hostnames

Connections