urlquery.net
Investigate/Report/df489570-bf77-4bf1-871d-e4293be398ab
WEBSITE ANALYSIS REPORT

https://kh3a.de/internationalmicro/

public
Report tags
Submit tags
openphish
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…
Domain graph details

Hostnames

Connections

  • kh3a.de → fonts.googleapis.comLoads from1 captured connections
  • kh3a.de → fonts.gstatic.comLoads from2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document2.7 KB156 ms4 alerts
GET200stylesheet4.7 KB80 ms—
GET200img69.0 KB66 ms4 alerts
GET200font7.7 KB58 ms—
GET200font7.6 KB53 ms—
GET404img3.6 KB23 ms4 alerts
GET200document3.4 KB70 ms4 alerts

Transaction #03

Request / response

URL

Navigation request GET HTTPS
https://kh3a.de/internationalmicro/download.html

IP / ASN

Germany 193.34.145.201

AS51167 · Contabo GmbH

Germany
Requested by
Not recorded

Resource information

File type
HTML document, ASCII text, with CRLF line terminators
MIME type
text/html
First seen (UTC)
19 May 2026 · 11:06:40.323 UTC
Last seen (UTC)
17 Sep 2026 · 19:20:38.621 UTC
Times seen
5
Size
3.4 KB (3447 bytes)
MD5
bd7cb15d4bfce4139a83c6dc00c0307c
SHA1
24ff09688e24e5895cdc823ce0cbf77df1fffee8
SHA256
df82a846fbd627cbb2f9e6d4084b55023414a1a63e2949665f577971f8eca351

Certificate information

Issuer
Let's Encrypt · YR1
Subject
cpcontacts.kh3a.de
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
53:95:1F:C5:26:AD:4E:F2:D1:27:7E:D5:92:2A:43:85:50:26:FE:24
Valid from
Tue, 01 Sep 2026 07:00:46 GMT
Valid until
Mon, 30 Nov 2026 07:00:45 GMT

Technology fingerprints

  • Apache HTTP Server (Web servers)

Detections

Detection observations attached to this HTTP transaction.
DetectionSeverityVerdict
DNS4EU SinkholedmediumMalicious
Quad9 DNS SinkholedmediumMalicious
Cloudflare DNS SinkholedmediumMalicious
OpenDNS Phishing BlockmediumPhishing

HTTP headers

Request headers

GET /internationalmicro/download.html HTTP/1.1
Host: kh3a.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://kh3a.de/internationalmicro/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
last-modified: Mon, 18 May 2026 17:23:12 GMT
accept-ranges: bytes
content-length: 3447
content-type: text/html
date: Thu, 17 Sep 2026 19:20:04 GMT
server: Apache
X-Firefox-Spdy: h2
GET200img19.4 KB45 ms4 alerts
GET200img49.5 KB66 ms4 alerts
GET404img3.6 KB23 ms4 alerts
10 visible / 10 matching / 10 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot