WEBSITE ANALYSIS REPORT

https://www.r.oblox.com.et/users/1085927564/profileexploitmalwarenetwork

17 Oct 2026 · 23:38:57.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:37:48.433 GET 200 document 94.9 KB 264 ms 4 alerts

23:37:49.365 GET 200 stylesheet 120.0 KB 74 ms —

23:37:49.373 GET 200 stylesheet 914.5 KB 241 ms —

23:37:49.376 GET 200 stylesheet 21.2 KB 55 ms —

23:37:49.379 GET 200 stylesheet 2.2 KB 50 ms —

23:37:49.384 GET 200 stylesheet 249 B 48 ms —

23:37:49.387 GET 200 stylesheet 2.5 KB 43 ms —

23:37:49.389 GET 200 stylesheet 43.4 KB 6 ms —

23:37:49.391 GET 200 stylesheet 10.1 KB 41 ms —

23:37:49.393 GET 200 stylesheet 475 B 4 ms —

23:37:49.395 GET 200 stylesheet 12.8 KB 5 ms —

23:37:49.397 GET 200 stylesheet 288 B 3 ms —

23:37:49.399 GET 200 stylesheet 275.8 KB 15 ms —

23:37:49.409 GET 200 stylesheet 130.4 KB 7 ms —

23:37:49.413 GET 200 stylesheet 2.4 KB 5 ms —

23:37:49.415 GET 200 stylesheet 6.1 KB 4 ms —

23:37:49.420 GET 200 stylesheet 12.3 KB 240 ms —

23:37:49.423 GET 200 stylesheet 37.5 KB 36 ms —

23:37:49.425 GET 200 stylesheet 6.7 KB 5 ms —

23:37:49.426 GET 200 stylesheet 3.7 KB 5 ms —

23:37:49.428 GET 200 stylesheet 6.9 KB 5 ms —

23:37:49.429 GET 200 stylesheet 5.9 KB 5 ms —

23:37:49.431 GET 200 stylesheet 4.2 KB 3 ms —

23:37:49.432 GET 200 stylesheet 1.4 KB 3 ms —

23:37:49.436 GET 200 stylesheet 9.3 KB 32 ms —

23:37:49.438 GET 200 stylesheet 739 B 3 ms —

23:37:49.440 GET 200 stylesheet 3.5 KB 4 ms —

23:37:49.444 GET 200 stylesheet 254 B 4 ms —

23:37:49.446 GET 200 stylesheet 29.7 KB 6 ms —

23:37:49.453 GET 200 stylesheet 31.2 KB 6 ms —

23:37:49.456 GET 200 stylesheet 1.4 KB 4 ms —

23:37:49.458 GET 200 stylesheet 2.2 KB 3 ms —

23:37:49.461 GET 200 stylesheet 5.7 KB 4 ms —

23:37:49.464 GET 200 stylesheet 784 B 3 ms —

23:37:49.466 GET 200 stylesheet 3.3 KB 3 ms —

23:37:49.470 GET 200 stylesheet 85 B 3 ms —

23:37:49.474 GET 200 script 11.2 KB 60 ms 4 alerts

Transaction #174

Request / response

URL

GET HTTPS

https://www.r.oblox.com.et/js/EnvironmentUrls.js

IP / ASN

202.170.75.201

Unknown

Requested by: https://www.r.oblox.com.et/users/1085927564/profileexploitmalwarenetwork

Resource information

File type: JavaScript source, ASCII text, with very long lines (4345), with CRLF line terminators
MIME type: text/javascript
First seen (UTC): 13 Sep 2026 · 20:07:50.020 UTC
Last seen (UTC): 18 Oct 2026 · 20:31:37.949 UTC
Times seen: 872

Size: 11.2 KB (11508 bytes)
MD5: 28b08ec44301cab8ef4b4db6bbd33c66
SHA1: 086afb6fa1b7d26db149cf86f39d56b4a3e04fc0
SHA256: ae24e5faaa825dfe2e5ae39be3084d3a7fe1eb24ab35ddb7cb682e5b31430c1b

Certificate information

Issuer: Let's Encrypt · YE2
Subject: www.r.oblox.com.et
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AF:C7:BE:DE:78:62:7A:71:F1:AB:1A:42:DC:8E:CE:49:5F:AF:6B:E9
Valid from: Fri, 21 Aug 2026 02:31:05 GMT
Valid until: Thu, 19 Nov 2026 02:31:04 GMT

Technology fingerprints

Plesk (Hosting panels)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /js/EnvironmentUrls.js HTTP/1.1
Host: www.r.oblox.com.et
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://www.r.oblox.com.et/users/1085927564/profileexploitmalwarenetwork
Cookie: A2L0g1nC3ssto=1792280268
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
date: Sat, 17 Oct 2026 23:37:49 GMT
content-type: text/javascript
last-modified: Sun, 13 Sep 2026 15:02:59 GMT
etag: W/"6aa6bb23-2cf4"
alt-svc: h3=":443"; ma=86400
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2

23:37:49.477 GET 200 script 137.9 KB 45 ms —

23:37:49.478 GET 200 script 209.2 KB 262 ms —

23:37:49.481 GET 200 script 4.5 KB 252 ms —

23:37:49.483 GET 200 script 6.4 KB 28 ms —

23:37:49.485 GET 200 script 103.5 KB 28 ms —

23:37:49.488 GET 200 script 6.1 KB 25 ms —

23:37:49.490 GET 200 script 0 B 0 ms —

23:37:49.493 GET 200 script 3.1 KB 5 ms —

23:37:49.497 GET 200 script 1.7 KB 4 ms —

23:37:49.500 GET 200 script 244.9 KB 9 ms —

23:37:49.503 GET 200 script 23.5 KB 6 ms —

23:37:49.505 GET 200 script 5.5 KB 5 ms —

23:37:49.509 GET 200 script 151.6 KB 10 ms —

https://www.r.oblox.com.et/users/1085927564/profileexploitmalwarenetwork

Domain graph

Hostnames

Connections