WEBSITE ANALYSIS REPORT

https://short.engineerdanyal.com/xBtKRAJ

12 Oct 2026 · 14:34:37.000 UTCpublic

Report tags: malicious loader anti_analysis
Submit tags

Request review

Malicious detection

4 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:34:01.290 GET 302 document 0 B 476 ms 1 alerts

14:34:01.779 GET 200 document 7.4 KB 686 ms 2 alerts

14:34:07.923 GET 307 document 0 B 816 ms —

14:34:08.746 GET 302 document 0 B 105 ms 1 alerts

14:34:08.856 GET 429 document 33.2 KB 61 ms —

14:34:09.085 GET 403 img 33.2 KB 11 ms —

14:34:09.246 GET 200 script 40.3 KB 12 ms —

14:34:09.416 GET 200 fetch 483.8 KB 29 ms —

14:34:19.985 POST 204 fetch 0 B 0 ms —

14:34:20.016 GET 302 document 0 B 11 ms —

14:34:20.111 GET 302 document 0 B 105 ms 1 alerts

14:34:20.222 GET 200 document 3.8 KB 777 ms 1 alerts

14:34:21.470 GET 302 script 0 B 26 ms —

14:34:21.484 GET 404 img 0 B 614 ms 1 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://wkcvkwijjk.kidscommercials.com/favicon.ico

IP / ASN

104.21.8.82

AS13335 · CLOUDFLARENET

Requested by: https://wkcvkwijjk.kidscommercials.com/

Resource information

File type: Not recorded
MIME type: text/html; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 18 Oct 2026 · 21:37:13.472 UTC
Times seen: 19194253

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YE2
Subject: kidscommercials.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 6B:70:5A:A1:A5:24:65:ED:EF:4B:5E:F3:FD:20:9D:AF:D5:B3:D4:98
Valid from: Wed, 07 Oct 2026 17:58:09 GMT
Valid until: Tue, 05 Jan 2027 17:58:08 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: wkcvkwijjk.kidscommercials.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://wkcvkwijjk.kidscommercials.com/
Cookie: PHPSESSID=0b22c67cb002369772a501c72fd07765
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 404 
date: Mon, 12 Oct 2026 14:34:22 GMT
server: cloudflare
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
vary: User-Agent
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ibRjFinhKuIGYZ5jhxipP%2BSSetSWcZhQxi%2Bvjc2dEwQqoVffY1rYHx2fLtpBq4d2rhL8D1Fd6PQS9oe5YZypRU8LpLm%2FVD34KEx4ii1ee3GtonJOEM5wzzcsSWCxCHkM2n7x4fDRxDwx2kkULNtTprQ%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=6,i=?0
content-type: text/html; charset=UTF-8
cf-cache-status: BYPASS
content-encoding: zstd
cf-ray: a496d32c4818b51e-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

14:34:21.512 GET 200 script 84.7 KB 12 ms —

14:34:21.601 GET 200 subdocument 261.6 KB 26 ms —

14:34:22.064 POST 200 xhr 767.6 KB 252 ms —

14:34:23.777 GET 200 img 3.1 KB 6 ms —

14:34:24.070 POST 200 xhr 117.7 KB 48 ms —

14:34:28.619 POST 200 xhr 2.3 KB 37 ms —

https://short.engineerdanyal.com/xBtKRAJ

Domain graph

Hostnames

Connections

Network requests

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://short.engineerdanyal.com/xBtKRAJ

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://short.engineerdanyal.com/xBtKRAJ

Domain graph

Network requests