WEBSITE ANALYSIS REPORT

https://eday.item.com.login.secured.karapapati.com

17 Oct 2026 · 17:34:32.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:34:01.702 GET 200 document 33.4 KB 444 ms 5 alerts

17:34:02.399 GET 200 stylesheet 89.6 KB 106 ms 5 alerts

17:34:02.404 GET 200 stylesheet 110.2 KB 118 ms 5 alerts

17:34:02.671 GET 200 subdocument 33.4 KB 112 ms 5 alerts

17:34:02.802 GET 404 img 796 B 30 ms 5 alerts

17:34:02.818 GET 200 stylesheet 89.6 KB 32 ms 5 alerts

17:34:02.820 GET 200 stylesheet 110.2 KB 53 ms 5 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://eday.item.com.login.secured.karapapati.com/signin-render-vYK5rce4.css

IP / ASN

157.173.106.238

AS51167 · Contabo GmbH

Requested by: https://eday.item.com.login.secured.karapapati.com/#

Resource information

File type: ASCII text, with very long lines (65536), with no line terminators
MIME type: text/css
First seen (UTC): 22 Jan 2025 · 11:27:21.541 UTC
Last seen (UTC): 18 Oct 2026 · 09:00:47.253 UTC
Times seen: 53

Size: 110.2 KB (112806 bytes)
MD5: 34b53571208a8c1c370340a88042d80d
SHA1: 97c2410613525487e81b04c45b34cf2a012b9a3e
SHA256: e8741873f3ac7447188cdfadca3ceeabfca39a31b0c3817cfe13b8f9edc5c9a4

Certificate information

Issuer: Let's Encrypt · YR2
Subject: eday.item.com.login.secured.karapapati.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: C2:53:B1:92:81:A0:F1:A9:41:D3:CC:F1:83:CB:A6:E5:53:10:D8:DF
Valid from: Fri, 11 Sep 2026 18:02:17 GMT
Valid until: Thu, 10 Dec 2026 18:02:16 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
CIRA Canadian Shield DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing

HTTP headers

Request headers

GET /signin-render-vYK5rce4.css HTTP/1.1
Host: eday.item.com.login.secured.karapapati.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://eday.item.com.login.secured.karapapati.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
cache-control: public, max-age=604800
expires: Sat, 24 Oct 2026 17:34:02 GMT
content-type: text/css
last-modified: Wed, 02 Jul 2025 12:07:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
content-length: 17837
date: Sat, 17 Oct 2026 17:34:02 GMT
X-Firefox-Spdy: h2

https://eday.item.com.login.secured.karapapati.com

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://eday.item.com.login.secured.karapapati.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://eday.item.com.login.secured.karapapati.com

Domain graph

Network requests