WEBSITE ANALYSIS REPORT

http://www.lllaoo899.site/

22 Mar 2026 · 16:57:22.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:56:59.508 GET 301 document 1.0 KB 170 ms 1 alerts

16:56:59.603 GET 302 document 1.0 KB 430 ms 1 alerts

16:57:00.039 GET 200 document 1.0 KB 204 ms 1 alerts

16:57:00.473 GET 200 stylesheet 192.1 KB 413 ms 1 alerts

16:57:00.475 GET 200 stylesheet 946.4 KB 737 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://lllaoo899.site/Content/css/base?v=8gkkHlpAcLabbfN9TdEBn1oqloqPusrctBW8rLgTZ1I1

IP / ASN

104.21.34.37

AS13335 · CLOUDFLARENET

Requested by: https://lllaoo899.site/Error/NotFound

Resource information

File type: ASCII text, with very long lines (34578), with CRLF, LF line terminators
MIME type: text/css; charset=utf-8
First seen (UTC): 22 Mar 2026 · 02:23:13.225 UTC
Last seen (UTC): 22 Mar 2026 · 18:35:40.283 UTC
Times seen: 3

Size: 946.4 KB (969133 bytes)
MD5: acabcefe987f0c750cf18248ea8ef984
SHA1: d693ee09ceac1cf40f882c9e806a5fcb2889a413
SHA256: 6978c89673c8c698e8bd848c55c538a4674a4409d48a65e46c64bbf7931d7dbd

Certificate information

Issuer: Google Trust Services · WE1
Subject: lllaoo899.site
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 00:03:98:DA:7C:D6:48:EE:8E:11:35:54:71:66:D1:91:B5:74:2F:34
Valid from: Tue, 17 Feb 2026 06:01:44 GMT
Valid until: Mon, 18 May 2026 06:57:56 GMT

Technology fingerprints

Cloudflare (CDN)
HSTS (Security)
Microsoft ASP.NET (Web frameworks)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /Content/css/base?v=8gkkHlpAcLabbfN9TdEBn1oqloqPusrctBW8rLgTZ1I1 HTTP/1.1
Host: lllaoo899.site
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lllaoo899.site/Error/NotFound
Cookie: afbggC=en0ygtdsijn4yku51le0g0xa; __cf_bm=MJkivhFvitZ53SbPeuIsdH9Ay.MfabjCBsqArTBL_Kk-1774198619.65899-1.0.1.1-XV2unkWAaiFg.LA5jvV1H6X_O3w_nBfO1xpY5uYM81fDBL3aAzluluo77tv4Xys0pIzE3UtdjFRsCFAt0z3IpTTC76yA0QktfgG2mIXn9Oyr9MTvBBiBNMaui3_cpcfO
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
date: Sun, 22 Mar 2026 16:57:00 GMT
content-type: text/css; charset=utf-8
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=l%2FtZjXGqbjbVJ1X1Zerll49X5zyqwn97%2BvRQhhxRh3%2BgFw3nRPo3rXL4bz7g2nVtz3D%2F%2BOKmJBuYdjM6xy%2BhbWJlErNbikgBKi3nwKde"}]}
priority: u=2,i=?0
cache-control: public
expires: Mon, 22 Mar 2027 16:57:00 GMT
last-modified: Sun, 22 Mar 2026 16:57:00 GMT
vary: User-Agent
server: cloudflare
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains
x-powered-by: ASP.NET
cf-cache-status: DYNAMIC
content-encoding: br
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 9e06bba1fa93f351-ARN
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

16:57:00.478 GET 200 stylesheet 6.8 KB 201 ms 1 alerts

16:57:01.210 GET 200 stylesheet 5.9 KB 270 ms —

16:57:01.472 GET 200 img 1.0 KB 385 ms 1 alerts

http://www.lllaoo899.site/

Domain graph

Hostnames

Connections