WEBSITE ANALYSIS REPORT

https://kh3a.de/internationalmicro/

17 Sep 2026 · 19:20:36.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:19:58.361 GET 200 document 2.7 KB 156 ms 4 alerts

19:19:58.755 GET 200 stylesheet 4.7 KB 80 ms —

19:19:58.757 GET 200 img 69.0 KB 66 ms 4 alerts

19:19:59.109 GET 200 font 7.7 KB 58 ms —

19:19:59.110 GET 200 font 7.6 KB 53 ms —

19:19:59.197 GET 404 img 3.6 KB 23 ms 4 alerts

19:20:04.230 GET 200 document 3.4 KB 70 ms 4 alerts

19:20:04.336 GET 200 img 19.4 KB 45 ms 4 alerts

19:20:04.338 GET 200 img 49.5 KB 66 ms 4 alerts

19:20:04.411 GET 404 img 3.6 KB 23 ms 4 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://kh3a.de/favicon.ico

IP / ASN

193.34.145.201

AS51167 · Contabo GmbH

Requested by: https://kh3a.de/internationalmicro/download.html

Resource information

File type: HTML document, Unicode text, UTF-8 text
MIME type: text/html
First seen (UTC): 19 May 2026 · 11:06:40.313 UTC
Last seen (UTC): 17 Sep 2026 · 19:20:38.622 UTC
Times seen: 8

Size: 3.6 KB (3667 bytes)
MD5: 1c8b68bfe44cf3d5e1debcbd896e4dfd
SHA1: 14296ca222390362fa43329423627415a3126d61
SHA256: 21c14b53b755760da4a32bb8811d104bf1083126aa5fd1497466c2861a7ffdab

Certificate information

Issuer: Let's Encrypt · YR1
Subject: cpcontacts.kh3a.de
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 53:95:1F:C5:26:AD:4E:F2:D1:27:7E:D5:92:2A:43:85:50:26:FE:24
Valid from: Tue, 01 Sep 2026 07:00:46 GMT
Valid until: Mon, 30 Nov 2026 07:00:45 GMT

Technology fingerprints

Apache HTTP Server (Web servers)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /favicon.ico HTTP/1.1
Host: kh3a.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://kh3a.de/internationalmicro/download.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=6
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 404 
accept-ranges: bytes
content-length: 3667
content-type: text/html
date: Thu, 17 Sep 2026 19:20:04 GMT
server: Apache
X-Firefox-Spdy: h2

https://kh3a.de/internationalmicro/

Domain graph

Hostnames

Connections

Network requests

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://kh3a.de/internationalmicro/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #05

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://kh3a.de/internationalmicro/

Domain graph

Network requests