WEBSITE ANALYSIS REPORT

http://phonations.com/

29 May 2026 · 10:36:56.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

10:36:31.145 GET No response document 0 B 404 ms 2 alerts

10:36:31.777 GET 200 document 402.4 KB 1090 ms 2 alerts

10:36:32.360 GET 200 script 1.3 KB 740 ms —

10:36:32.361 GET 200 script 1.2 KB 638 ms 2 alerts

10:36:32.362 GET 200 stylesheet 38.0 KB 635 ms 2 alerts

10:36:32.364 GET 200 stylesheet 43.2 KB 299 ms —

10:36:32.365 GET 200 stylesheet 155.0 KB 902 ms 2 alerts

10:36:32.367 GET 200 stylesheet 169.0 KB 911 ms 2 alerts

10:36:32.368 GET 200 stylesheet 717.7 KB 888 ms 2 alerts

10:36:32.370 GET 200 stylesheet 47.1 KB 499 ms 2 alerts

10:36:32.371 GET 200 script 85.5 KB 848 ms 2 alerts

10:36:32.373 GET 200 script 13.3 KB 627 ms 2 alerts

10:36:32.374 GET 200 img 1.9 KB 1762 ms 2 alerts

10:36:32.453 GET 200 script 189.8 KB 645 ms 2 alerts

10:36:32.699 GET 200 img 6.6 KB 1605 ms 2 alerts

10:36:32.701 GET 200 script 156.4 KB 953 ms 2 alerts

10:36:32.702 GET 200 script 2.4 KB 565 ms 2 alerts

10:36:32.704 GET 200 script 9.7 KB 575 ms 2 alerts

10:36:32.705 GET 200 script 2.6 KB 611 ms 2 alerts

10:36:32.706 GET 200 script 8.7 KB 729 ms 2 alerts

10:36:32.706 GET 200 script 3.0 KB 752 ms 2 alerts

10:36:32.707 GET 200 script 29.0 KB 789 ms 2 alerts

10:36:32.709 GET 200 script 1.4 KB 823 ms 2 alerts

10:36:32.709 GET 200 script 2.6 KB 799 ms 2 alerts

10:36:32.710 GET 200 script 6.0 KB 940 ms 2 alerts

10:36:32.711 GET 200 script 10.5 KB 970 ms 2 alerts

10:36:32.713 GET 200 script 5.8 KB 1011 ms 2 alerts

10:36:32.714 GET 200 script 440 B 1036 ms 2 alerts

10:36:32.714 GET 200 script 19.7 KB 1027 ms 2 alerts

10:36:32.852 GET 200 script 29.2 KB 2052 ms —

10:36:32.859 GET 200 subdocument 53.0 KB 1462 ms —

10:36:33.089 GET 200 font 42.1 KB 276 ms —

10:36:33.279 POST 210 xhr 0 B 323 ms —

10:36:33.280 POST 210 xhr 0 B 324 ms —

10:36:33.410 GET 200 font 47.2 KB 47 ms —

10:36:33.413 GET 200 font 34.1 KB 559 ms 2 alerts

10:36:33.427 GET 200 font 47.2 KB 50 ms —

10:36:33.432 GET 200 font 47.2 KB 61 ms —

10:36:33.476 GET 200 font 42.1 KB 26 ms —

10:36:33.492 GET 200 script 189.8 KB 596 ms 2 alerts

10:36:33.500 GET 200 script 189.8 KB 590 ms 2 alerts

Transaction #76

Request / response

URL

GET HTTP

http://phonations.com/txt/f.txt

IP / ASN

35.220.195.29

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by: http://phonations.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (3737)
MIME type: text/plain
First seen (UTC): 29 May 2026 · 10:37:10.867 UTC
Last seen (UTC): 29 May 2026 · 10:37:10.867 UTC
Times seen: 1

Size: 189.8 KB (194395 bytes)
MD5: 340dae805032b8e75040da495286f441
SHA1: dc17efe8cddd699dec08271eea9c1a25532b1d3f
SHA256: a5eb8672a1dd9358d5b1e0972ba0ce5be4e72f17e80671f975848d7000e55644

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /txt/f.txt HTTP/1.1
Host: phonations.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://phonations.com/
Cookie: __vtins__Kbu0ae6HwHakHTZk=%7B%22sid%22%3A%20%22927993d1-9eba-5441-9652-2604a6028306%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201780052793224%2C%20%22ct%22%3A%201780050993224%7D; __51uvsct__Kbu0ae6HwHakHTZk=1; __51vcke__Kbu0ae6HwHakHTZk=73f364e4-e0d8-5156-8710-18146ee252c6; __51vuft__Kbu0ae6HwHakHTZk=1780050993231; __vtins__Kbu2OEMjpQo3aETC=%7B%22sid%22%3A%20%22b1088607-e35c-5553-bf4f-553bad13d34b%22%2C%20%22vd%22%3A%201%2C%20%22stt%22%3A%200%2C%20%22dr%22%3A%200%2C%20%22expires%22%3A%201780052793245%2C%20%22ct%22%3A%201780050993245%7D; __51uvsct__Kbu2OEMjpQo3aETC=1; __51vcke__Kbu2OEMjpQo3aETC=3aa4328e-40e4-568a-b913-7ab862bbba27; __51vuft__Kbu2OEMjpQo3aETC=1780050993248
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx
Date: Fri, 29 May 2026 10:36:33 GMT
Content-Type: text/plain
Last-Modified: Wed, 02 Jul 2025 01:27:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"68648b07-2f75b"
Content-Encoding: gzip

10:36:33.506 GET 200 script 189.8 KB 409 ms 2 alerts

10:36:33.509 GET 200 script 189.8 KB 676 ms 2 alerts

10:36:33.511 GET 200 script 189.8 KB 697 ms 2 alerts

10:36:33.537 GET 200 img 257.5 KB 1020 ms 2 alerts

10:36:33.946 GET 200 stylesheet 21.0 KB 218 ms —

10:36:33.947 GET 200 stylesheet 16.8 KB 218 ms —

10:36:33.949 GET 200 stylesheet 3.9 KB 218 ms —

10:36:33.950 GET 200 stylesheet 22.4 KB 218 ms —

10:36:33.951 GET 200 stylesheet 33.5 KB 218 ms —

http://phonations.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #76

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://phonations.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #76

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://phonations.com/

Domain graph

Network requests