WEBSITE ANALYSIS REPORT

https://www.r.oblox.com.et/users/1085927564/profileexploitmalwarenetwork

17 Oct 2026 · 23:38:57.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:37:48.433 GET 200 document 94.9 KB 264 ms 4 alerts

Transaction #107

Request / response

URL

GET HTTPS

https://www.r.oblox.com.et/users/1085927564/profileexploitmalwarenetwork

IP / ASN

202.170.75.201

Unknown

Requested by: Not recorded

Resource information

File type: HTML document, ASCII text, with very long lines (5202)
MIME type: text/html; charset=UTF-8
First seen (UTC): 17 Oct 2026 · 21:19:38.754 UTC
Last seen (UTC): 17 Oct 2026 · 23:45:28.191 UTC
Times seen: 8

Size: 94.9 KB (97202 bytes)
MD5: 0d99a8134c021f95499218c1d227a926
SHA1: 6c4b7dd181b2149e33dac747828ea9858cf53b01
SHA256: 50a7e95c219d495015d2021bcf6ae55fc3b43049b3171fc96ad51345deb98b32

Certificate information

Issuer: Let's Encrypt · YE2
Subject: www.r.oblox.com.et
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AF:C7:BE:DE:78:62:7A:71:F1:AB:1A:42:DC:8E:CE:49:5F:AF:6B:E9
Valid from: Fri, 21 Aug 2026 02:31:05 GMT
Valid until: Thu, 19 Nov 2026 02:31:04 GMT

Technology fingerprints

AngularJS (JavaScript frameworks)
Plesk (Hosting panels)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /users/1085927564/profileexploitmalwarenetwork HTTP/1.1
Host: www.r.oblox.com.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Sat, 17 Oct 2026 23:37:48 GMT
content-type: text/html; charset=UTF-8
content-length: 18398
set-cookie: A2L0g1nC3ssto=1792280268; expires=Thu, 22 Oct 2026 03:37:48 GMT; Max-Age=360000; path=/; secure; HttpOnly; SameSite=Strict
vary: Accept-Encoding
content-encoding: gzip
alt-svc: h3=":443"; ma=86400
x-powered-by: PleskLin
X-Firefox-Spdy: h2

23:37:49.365 GET 200 stylesheet 120.0 KB 74 ms —

23:37:49.373 GET 200 stylesheet 914.5 KB 241 ms —

23:37:49.376 GET 200 stylesheet 21.2 KB 55 ms —

23:37:49.379 GET 200 stylesheet 2.2 KB 50 ms —

23:37:49.384 GET 200 stylesheet 249 B 48 ms —

23:37:49.387 GET 200 stylesheet 2.5 KB 43 ms —

23:37:49.389 GET 200 stylesheet 43.4 KB 6 ms —

23:37:49.391 GET 200 stylesheet 10.1 KB 41 ms —

23:37:49.393 GET 200 stylesheet 475 B 4 ms —

23:37:49.395 GET 200 stylesheet 12.8 KB 5 ms —

23:37:49.397 GET 200 stylesheet 288 B 3 ms —

23:37:49.399 GET 200 stylesheet 275.8 KB 15 ms —

23:37:49.409 GET 200 stylesheet 130.4 KB 7 ms —

23:37:49.413 GET 200 stylesheet 2.4 KB 5 ms —

23:37:49.415 GET 200 stylesheet 6.1 KB 4 ms —

23:37:49.420 GET 200 stylesheet 12.3 KB 240 ms —

23:37:49.423 GET 200 stylesheet 37.5 KB 36 ms —

23:37:49.425 GET 200 stylesheet 6.7 KB 5 ms —

23:37:49.426 GET 200 stylesheet 3.7 KB 5 ms —

23:37:49.428 GET 200 stylesheet 6.9 KB 5 ms —

23:37:49.429 GET 200 stylesheet 5.9 KB 5 ms —

23:37:49.431 GET 200 stylesheet 4.2 KB 3 ms —

23:37:49.432 GET 200 stylesheet 1.4 KB 3 ms —

23:37:49.436 GET 200 stylesheet 9.3 KB 32 ms —

23:37:49.438 GET 200 stylesheet 739 B 3 ms —

23:37:49.440 GET 200 stylesheet 3.5 KB 4 ms —

23:37:49.444 GET 200 stylesheet 254 B 4 ms —

23:37:49.446 GET 200 stylesheet 29.7 KB 6 ms —

23:37:49.453 GET 200 stylesheet 31.2 KB 6 ms —

23:37:49.456 GET 200 stylesheet 1.4 KB 4 ms —

23:37:49.458 GET 200 stylesheet 2.2 KB 3 ms —

23:37:49.461 GET 200 stylesheet 5.7 KB 4 ms —

23:37:49.464 GET 200 stylesheet 784 B 3 ms —

23:37:49.466 GET 200 stylesheet 3.3 KB 3 ms —

23:37:49.470 GET 200 stylesheet 85 B 3 ms —

23:37:49.474 GET 200 script 11.2 KB 60 ms 4 alerts

23:37:49.477 GET 200 script 137.9 KB 45 ms —

23:37:49.478 GET 200 script 209.2 KB 262 ms —

23:37:49.481 GET 200 script 4.5 KB 252 ms —

23:37:49.483 GET 200 script 6.4 KB 28 ms —

23:37:49.485 GET 200 script 103.5 KB 28 ms —

23:37:49.488 GET 200 script 6.1 KB 25 ms —

23:37:49.490 GET 200 script 0 B 0 ms —

23:37:49.493 GET 200 script 3.1 KB 5 ms —

23:37:49.497 GET 200 script 1.7 KB 4 ms —

23:37:49.500 GET 200 script 244.9 KB 9 ms —

23:37:49.503 GET 200 script 23.5 KB 6 ms —

23:37:49.505 GET 200 script 5.5 KB 5 ms —

23:37:49.509 GET 200 script 151.6 KB 10 ms —

https://www.r.oblox.com.et/users/1085927564/profileexploitmalwarenetwork

Domain graph

Hostnames

Connections