WEBSITE ANALYSIS REPORT

https://0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev/

21 Oct 2026 · 04:59:45.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:59:08.321 GET 403 document 4.9 KB 47 ms 4 alerts

04:59:08.809 GET 200 stylesheet 23.5 KB 5 ms 4 alerts

04:59:08.811 GET 302 script 0 B 22 ms —

04:59:08.844 GET 200 img 452 B 23 ms 4 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637

IP / ASN

172.66.44.95

AS13335 · CLOUDFLARENET

Requested by: https://0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev/

Resource information

File type: PNG image data, 54 x 54, 8-bit colormap, non-interlaced
MIME type: image/png
First seen (UTC): 12 Apr 2023 · 19:44:04.000 UTC
Last seen (UTC): 21 Oct 2026 · 21:08:22.830 UTC
Times seen: 494795

Size: 452 B (452 bytes)
MD5: c33de66281e933259772399d10a6afe8
SHA1: b9f9d500f8814381451011d4dcf59cd2d90ad94f
SHA256: f1591a5221136c49438642155691ae6c68e25b7241f3d7ebe975b09a77662016

Certificate information

Issuer: Let's Encrypt · YE1
Subject: 0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: E3:EA:23:95:1C:75:A7:5D:F6:64:D4:B8:5E:6E:CB:B9:FE:68:25:7F
Valid from: Fri, 25 Sep 2026 17:16:30 GMT
Valid until: Thu, 24 Dec 2026 17:16:29 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1
Host: 0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev/cdn-cgi/styles/cf.errors.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=4, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
content-type: image/png
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=te4u0yPRmm89l7iLPo5CCOdfSK2M564QS4RUsn13b4Jy11UzfOzwvPv%2B6vizICsO8lW4SIHqOCZqLNsNPChEMs80m8pcY8I1eS8u%2BUsKvmG7sK%2B3mGOHzVLeRlCzQKtC%2BOjrS%2BS3nj6UdFB%2BIlIH6NaGw%2FCKa9tjjpCyy7Pgsg%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
date: Wed, 21 Oct 2026 04:59:08 GMT
server: cloudflare
cf-ray: a4ddb0f449c456ca-OSL
content-length: 452

04:59:08.872 GET 200 img 4.2 KB 486 ms 4 alerts

04:59:08.900 GET 200 script 84.7 KB 7 ms —

04:59:08.962 GET 200 subdocument 263.2 KB 16 ms —

04:59:09.299 POST 200 xhr 786.4 KB 33 ms —

04:59:09.711 GET No response fetch 0 B 0 ms —

04:59:09.717 GET 401 fetch 1 B 4 ms —

04:59:11.210 GET 200 img 1.5 KB 5 ms —

04:59:11.442 POST 200 xhr 119.8 KB 28 ms —

04:59:15.475 POST 200 xhr 12.5 KB 17 ms —

04:59:25.519 GET 200 subdocument 261.2 KB 15 ms —

04:59:25.943 POST 200 xhr 786.4 KB 31 ms —

04:59:26.419 GET No response fetch 0 B 0 ms —

04:59:27.519 GET 200 img 1.5 KB 4 ms —

04:59:27.731 POST 200 xhr 119.8 KB 28 ms —

https://0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://0sz0b-rmt-8boy-pxg8e-29-09-2026-aa.pages.dev/

Domain graph

Network requests