WEBSITE ANALYSIS REPORT

https://mysoftinc.com/?JRdTNFld

01 Oct 2026 · 14:30:13.000 UTCpublic

Report tags: phishing gcore aitm
Submit tags

Request review

Phishing detected

2 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:29:36.063 GET 200 document 2.2 KB 340 ms 2 alerts

14:29:36.677 GET 302 script 0 B 18 ms —

14:29:36.682 GET 200 img 156 B 327 ms 2 alerts

Transaction #11

Request / response

URL

GET HTTPS

https://mysoftinc.com/favicon.ico

IP / ASN

172.67.147.128

AS13335 · CLOUDFLARENET

Requested by: https://mysoftinc.com/?JRdTNFld

Resource information

File type: HTML document, ASCII text, with no line terminators
MIME type: text/html
First seen (UTC): 07 Dec 2025 · 20:45:29.990 UTC
Last seen (UTC): 21 Oct 2026 · 19:52:50.735 UTC
Times seen: 4185

Size: 156 B (156 bytes)
MD5: 28daf8d7234cc95e4eb08afee580cb2a
SHA1: 0e74baa5eafcbdf304413634d64e813ca41d8405
SHA256: 6a4b9a926854deab8337807f72cb53e74a48c1b243a0bc9a76aa258cff072044

Certificate information

Issuer: Let's Encrypt · YE2
Subject: mysoftinc.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 71:89:DF:F0:1E:37:74:E0:72:7D:FE:F2:D7:27:5A:3E:59:EF:8C:2D
Valid from: Tue, 15 Sep 2026 13:18:59 GMT
Valid until: Mon, 14 Dec 2026 13:18:58 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Phishing - Gcore Phishing Kit	high	Phishing
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: mysoftinc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://mysoftinc.com/?JRdTNFld
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
cache-control: no-cache, no-store
priority: u=6,i=?0
content-type: text/html
content-encoding: zstd
cf-cache-status: BYPASS
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
date: Thu, 01 Oct 2026 14:29:37 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=rzqmQquAxjMrm0t%2FVl57CIZwuZ2rJFOyS03c9SJTVrTaxwDcil9kF88BI%2F%2BjyJzv%2FwD1min%2FTgCt4oHPkOpAjMYtqRO8m12GcVKbcvX%2Bg2Y%2F4WdiyFlWDJT24vJTCUZE"}]}
cf-ray: a43c29184b1e4e4c-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

14:29:36.710 GET 200 script 84.7 KB 8 ms —

14:29:36.769 GET 200 subdocument 257.1 KB 21 ms —

14:29:37.169 POST 200 xhr 779.7 KB 118 ms —

14:29:38.092 GET 200 img 3.3 KB 5 ms —

14:29:38.598 POST 200 xhr 115.2 KB 31 ms —

14:29:42.504 POST 200 xhr 2.3 KB 28 ms —

14:29:42.541 POST 200 fetch 15 B 319 ms 2 alerts

14:29:52.551 GET 200 subdocument 247.5 KB 26 ms —

14:29:52.921 POST 200 xhr 779.8 KB 112 ms —

14:29:53.850 GET 200 img 6.0 KB 7 ms —

14:29:54.342 POST 200 xhr 115.2 KB 36 ms —

https://mysoftinc.com/?JRdTNFld

Domain graph

Hostnames

Connections

Network requests

Transaction #11

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://mysoftinc.com/?JRdTNFld

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #11

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://mysoftinc.com/?JRdTNFld

Domain graph

Network requests