WEBSITE ANALYSIS REPORT

https://eday.item.com.login.secured.karapapati.com/

17 Oct 2026 · 22:53:19.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

13341218.fls.doubleclick.net1 captured requests
ad.doubleclick.net3 captured requests
adservice.google.com1 captured requests
alb.reddit.com2 captured requests
connect.facebook.net4 captured requests
ct.pinterest.com10 captured requests
dnacdn.net2 captured requests
dynamic.criteo.com2 captured requests
eday.item.com.login.secured.karapapati.com7 captured requests
googleads.g.doubleclick.net10 captured requests
gum.criteo.com1 captured requests
ir.ebaystatic.com6 captured requests
mkttag.ebay.com18 captured requests
pixel-config.reddit.com2 captured requests
rover.ebay.com2 captured requests
s.pinimg.com4 captured requests
sc-static.net2 captured requests
svcs.ebay.com2 captured requests
tags.tiqcdn.com1 captured requests
tr.snapchat.com6 captured requests
tr6.snapchat.com1 captured requests
www.ebayadservices.com2 captured requests
www.facebook.com2 captured requests
www.google.com32 captured requests
www.google.no10 captured requests
www.googletagmanager.com6 captured requests
www.redditstatic.com2 captured requests

Connections

13341218.fls.doubleclick.net → adservice.google.comLoads from1 captured connections
ad.doubleclick.net → www.google.comRedirects to2 captured connections
eday.item.com.login.secured.karapapati.com → 13341218.fls.doubleclick.netEmbeds1 captured connections
eday.item.com.login.secured.karapapati.com → ad.doubleclick.netCalls3 captured connections
eday.item.com.login.secured.karapapati.com → alb.reddit.comCalls2 captured connections
eday.item.com.login.secured.karapapati.com → connect.facebook.netLoads from4 captured connections
eday.item.com.login.secured.karapapati.com → ct.pinterest.comCalls8 captured connections
eday.item.com.login.secured.karapapati.com → ct.pinterest.comEmbeds2 captured connections
eday.item.com.login.secured.karapapati.com → dynamic.criteo.comLoads from2 captured connections
eday.item.com.login.secured.karapapati.com → googleads.g.doubleclick.netLoads from10 captured connections
eday.item.com.login.secured.karapapati.com → gum.criteo.comEmbeds1 captured connections
eday.item.com.login.secured.karapapati.com → ir.ebaystatic.comLoads from6 captured connections
eday.item.com.login.secured.karapapati.com → mkttag.ebay.comLoads from18 captured connections
eday.item.com.login.secured.karapapati.com → pixel-config.reddit.comCalls2 captured connections
eday.item.com.login.secured.karapapati.com → rover.ebay.comLoads from2 captured connections
eday.item.com.login.secured.karapapati.com → s.pinimg.comLoads from4 captured connections
eday.item.com.login.secured.karapapati.com → sc-static.netLoads from2 captured connections
eday.item.com.login.secured.karapapati.com → svcs.ebay.comLoads from2 captured connections
eday.item.com.login.secured.karapapati.com → tags.tiqcdn.comLoads from1 captured connections
eday.item.com.login.secured.karapapati.com → tr.snapchat.comCalls2 captured connections
eday.item.com.login.secured.karapapati.com → tr.snapchat.comEmbeds2 captured connections
eday.item.com.login.secured.karapapati.com → tr.snapchat.comLoads from2 captured connections
eday.item.com.login.secured.karapapati.com → tr6.snapchat.comCalls1 captured connections
eday.item.com.login.secured.karapapati.com → www.ebayadservices.comLoads from2 captured connections
eday.item.com.login.secured.karapapati.com → www.facebook.comLoads from2 captured connections
eday.item.com.login.secured.karapapati.com → www.google.comCalls22 captured connections
eday.item.com.login.secured.karapapati.com → www.google.comLoads from10 captured connections
eday.item.com.login.secured.karapapati.com → www.google.noLoads from10 captured connections
eday.item.com.login.secured.karapapati.com → www.googletagmanager.comLoads from6 captured connections
eday.item.com.login.secured.karapapati.com → www.redditstatic.comLoads from2 captured connections
gum.criteo.com → dnacdn.netCalls2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
22:52:28.420	GET	200	document	33.4 KB	124 ms	5 alerts

22:52:28.831	GET	200	stylesheet	89.6 KB	52 ms	5 alerts

22:52:28.835	GET	200	stylesheet	110.2 KB	48 ms	5 alerts

22:52:29.094	GET	200	subdocument	33.4 KB	37 ms	5 alerts

22:52:29.099	GET	200	img	125 B	531 ms	—

22:52:29.102	GET	200	img	42 B	194 ms	—

22:52:29.104	GET	200	img	1.1 KB	48 ms	—

22:52:29.113	GET	200	img	6.7 KB	40 ms	—

22:52:29.118	GET	200	img	42 B	204 ms	—

22:52:29.166	GET	200	font	21.6 KB	13 ms	—

22:52:29.254	GET	200	font	21.9 KB	27 ms	—

22:52:29.267	GET	200	script	1.5 KB	139 ms	—

22:52:29.276	GET	200	stylesheet	89.6 KB	25 ms	5 alerts

22:52:29.278	GET	200	stylesheet	110.2 KB	46 ms	5 alerts

22:52:29.284	GET	200	img	125 B	531 ms	—

22:52:29.285	GET	200	img	42 B	192 ms	—

22:52:29.286	GET	200	img	1.1 KB	10 ms	—

22:52:29.287	GET	200	img	6.7 KB	10 ms	—

22:52:29.289	GET	200	img	42 B	191 ms	—

22:52:29.382	GET	200	script	1.5 KB	24 ms	—

22:52:29.490	GET	200	script	71.4 KB	19 ms	—

22:52:29.493	GET	200	script	71.4 KB	22 ms	—

22:52:29.576	GET	200	script	16.4 KB	31 ms	—

22:52:29.580	GET	200	script	22.8 KB	278 ms	—

22:52:29.583	GET	200	script	15.0 KB	25 ms	—

22:52:29.585	GET	200	script	14.0 KB	23 ms	—

22:52:29.588	GET	200	script	14.5 KB	21 ms	—

22:52:29.749	GET	200	script	18.1 KB	34 ms	—

22:52:29.754	GET	200	script	17.5 KB	31 ms	—

22:52:29.827	GET	200	script	16.4 KB	30 ms	—

22:52:29.828	GET	200	script	22.8 KB	242 ms	—
Transaction #100 Request / response URL GET HTTPS https://mkttag.ebay.com/tag-manager/v1/tag/utag.9.js?utv=ut4.51.202601261643 IP / ASN 95.101.11.171 AS20940 · Akamai International B.V. Transaction actions#100 Investigate Download resource22.8 KB (23300 bytes) Captured resources may contain malicious code. Sign in to download Raw file and protected ZIP External sources Requested by https://eday.item.com.login.secured.karapapati.com/ Resource information File type JavaScript source, ASCII text, with very long lines (2993) MIME type application/javascript First seen (UTC) 17 Oct 2026 · 22:48:42.405 UTC Last seen (UTC) 17 Oct 2026 · 22:53:34.395 UTC Times seen 2 Size 22.8 KB (23300 bytes) MD5 2364f5d20e8b87ce4c5113b40064aebe SHA1 7f91da31ec6d30065d1392d521eab49f5fa00a7e SHA256 6a276bf872956b4278173c300fdbb27063bfb46c63f579795517f5fd8e6a61f2 Certificate information Issuer Sectigo Limited · Sectigo Public Server Authentication CA OV R40 Subject anywhere.ebay.com Protocol / cipher TLSv1.3 · TLS_AES_128_GCM_SHA256 SHA1 fingerprint 27:EE:A5:3B:16:EE:95:4C:AE:44:96:2C:A8:22:A2:49:58:32:1F:15 Valid from Tue, 06 Oct 2026 00:00:00 GMT Valid until Thu, 22 Apr 2027 23:59:59 GMT Technology fingerprints HSTS (Security) Envoy (Reverse proxies) HTTP headers Request headers GET /tag-manager/v1/tag/utag.9.js?utv=ut4.51.202601261643 HTTP/1.1 Host: mkttag.ebay.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Sec-Fetch-Storage-Access: none Sec-GPC: 1 Connection: keep-alive Referer: https://eday.item.com.login.secured.karapapati.com/ Cookie: dp1=bbl/NO6e96632d^; nonsession=BAQAAAaBptwfqAAaAADMABGy1L60yMDMyAMoAIG6WYy00YzExMTE1MDFhMTBhZGI4ZjdjYmZkZmFmZjUwOTc2OQDLAAFq1AM1MeYeq81j2/GV7HrzBUcqA5Rgenk7; s=CgAD4ACBq1U2tNGMxMTExNTAxYTEwYWRiOGY3Y2JmZGZhZmY1MDk3NjlcnrZD; ds2=amsg/4c1111501a10adb8f7cbfdfaff509769^; ebay=%5Esbf%3D%23000000%5E Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Response headers HTTP/2 200 rlogid: t6nnrsbbkfmdabqfiiw%3F%3Cjhqrfdhgibbcu%60jhs.3bcg101%3Ba1w%60ut27%3Fto4qk-1a14c111382-0x232a access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS access-control-allow-headers: Origin, Accept, Content-Type, X-Requested-With, authorization, ebay-marketing-tag-manager-user, APPName access-control-allow-credentials: true access-control-max-age: 500000 x-content-type-options: nosniff x-xss-protection: 0 x-frame-options: DENY vary: accept-encoding content-type: application/javascript x-envoy-upstream-service-time: 28 server: ebay-proxy-server x-ebay-pop-id: SLBLVSAZ01 x-traffic-request-id: cebb4ccc921a0dab886953beffec54fe2 content-length: 23300 cache-control: no-transform, max-age=3600 date: Sat, 17 Oct 2026 22:52:30 GMT set-cookie: __uzma=ed15d270-1cab-4aa6-95c2-64899ca650a2; Path=/; Domain=.ebay.com; Expires=Thu, 15 Apr 2027 22:52:29 UTC __uzmb=1792277549; Path=/; Domain=.ebay.com; Expires=Thu, 15 Apr 2027 22:52:29 UTC __uzmc=384091059773; Path=/; Domain=.ebay.com; Expires=Thu, 15 Apr 2027 22:52:29 UTC __uzmd=1792277549; Path=/; Domain=.ebay.com; Expires=Thu, 15 Apr 2027 22:52:29 UTC __uzme=5566; Path=/; Domain=.ebay.com; Expires=Thu, 15 Apr 2027 22:52:29 UTC __uzmf=7f600082a9b528-200d-4e3e-8a3e-188617c2c32117922775499390-81e4927fe23101a310; Path=/; Domain=.ebay.com; Expires=Thu, 15 Apr 2027 22:52:29 UTC x-cdn: Akamai strict-transport-security: max-age=31536000 X-Firefox-Spdy: h2
22:52:29.831	GET	200	script	15.0 KB	26 ms	—

22:52:29.833	GET	200	script	14.0 KB	24 ms	—

22:52:29.836	GET	200	script	14.5 KB	21 ms	—

22:52:29.838	GET	200	script	18.1 KB	20 ms	—

22:52:29.840	GET	200	script	17.5 KB	39 ms	—

22:52:29.848	GET	404	img	796 B	25 ms	5 alerts

22:52:29.872	GET	200	script	75.8 KB	3620 ms	—

22:52:29.876	GET	200	script	484.8 KB	156 ms	—

22:52:29.877	GET	200	script	57.9 KB	113 ms	—

22:52:29.897	GET	200	script	86.4 KB	50 ms	—

22:52:29.899	GET	200	script	5.0 KB	47 ms	—

22:52:29.911	GET	200	script	423.2 KB	117 ms	—

22:52:29.917	GET	200	script	75.8 KB	124 ms	—

22:52:29.920	GET	200	script	484.8 KB	104 ms	—

22:52:29.922	GET	200	script	57.9 KB	45 ms	—

22:52:29.924	GET	200	script	86.4 KB	26 ms	—

22:52:29.927	GET	200	script	5.0 KB	14 ms	—

22:52:30.219	POST	200	fetch	0 B	140 ms	—

22:52:30.221	GET	200	xhr	478 B	46 ms	—

https://eday.item.com.login.secured.karapapati.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #100

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://eday.item.com.login.secured.karapapati.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #100

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

https://eday.item.com.login.secured.karapapati.com/

Domain graph

Network requests