WEBSITE ANALYSIS REPORT

https://universalmobility.pro/Snapit/mail&_mbox=inbox.html#generalbugs@zippenhop.com

05 Oct 2026 · 00:37:46.000 UTCpublic

Report tags: phishing
Submit tags

Request review

Phishing detected

7 detections · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Domain graph details

Hostnames

ajax.googleapis.com1 captured requests
cdnjs.cloudflare.com2 captured requests
code.jquery.com1 captured requests
maxcdn.bootstrapcdn.com1 captured requests
sh001.webhostbox.net15 captured requests
stackpath.bootstrapcdn.com1 captured requests
universalmobility.pro1 captured requests
unpkg.com2 captured requests

Connections

universalmobility.pro → ajax.googleapis.comLoads from1 captured connections
universalmobility.pro → cdnjs.cloudflare.comLoads from2 captured connections
universalmobility.pro → code.jquery.comLoads from1 captured connections
universalmobility.pro → maxcdn.bootstrapcdn.comLoads from1 captured connections
universalmobility.pro → sh001.webhostbox.netLoads from15 captured connections
universalmobility.pro → stackpath.bootstrapcdn.comLoads from1 captured connections
universalmobility.pro → unpkg.comLoads from2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

00:37:14.154 GET 200 document 20.0 KB 849 ms 6 alerts

00:37:15.438 GET 200 stylesheet 6.2 KB 749 ms 1 alerts

00:37:15.440 GET 200 stylesheet 139.1 KB 861 ms 1 alerts

00:37:15.441 GET 200 script 68.0 KB 130 ms —

00:37:15.444 GET 200 script 18.7 KB 56 ms —

00:37:15.445 GET 200 script 47.8 KB 82 ms —

00:37:15.446 GET 200 script 83.6 KB 123 ms —

00:37:15.448 GET 200 script 49.8 KB 48 ms —

00:37:15.450 GET 302 script 0 B 58 ms —

00:37:15.451 GET 200 stylesheet 9.4 KB 41 ms —

00:37:15.458 GET 200 img 5.2 KB 995 ms 1 alerts

00:37:15.600 GET 200 script 39.9 KB 21 ms —

00:37:16.332 GET 200 img 1.0 KB 151 ms 1 alerts

00:37:16.333 GET 200 img 976 B 715 ms 1 alerts

00:37:16.335 GET 200 img 962 B 731 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://sh001.webhostbox.net:2096/cPanel_magic_revision_1660251973/unprotected/cpanel/images/notice-success.png

IP / ASN

162.241.27.10

AS46606 · UNIFIEDLAYER-AS-1

United States

Requested by: https://universalmobility.pro/Snapit/mail&_mbox=inbox.html#generalbugs@zippenhop.com

Resource information

File type: PNG image data, 28 x 28, 8-bit/color RGBA, non-interlaced
MIME type: image/png
First seen (UTC): 08 Apr 2023 · 05:54:15.000 UTC
Last seen (UTC): 17 Oct 2026 · 05:29:42.560 UTC
Times seen: 10028

Size: 962 B (962 bytes)
MD5: 0a0ec2a6468d4d1aa3fc2baa70271ac8
SHA1: a31fb01790aca8dc1976450e4234cb6ccc328956
SHA256: cafbe3036533fe094931f5745f8cb9962a34409522e93d63ac8427acb9a02c79

Certificate information

Issuer: Sectigo Limited · Sectigo Public Server Authentication CA DV R36
Subject: *.webhostbox.net
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 69:92:4B:8A:19:A2:45:C8:80:EB:2E:50:2D:FD:4B:BE:5B:66:72:16
Valid from: Fri, 10 Apr 2026 00:00:00 GMT
Valid until: Sun, 25 Oct 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cPanel_magic_revision_1660251973/unprotected/cpanel/images/notice-success.png HTTP/1.1
Host: sh001.webhostbox.net:2096
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://sh001.webhostbox.net:2096/cPanel_magic_revision_1560357916/unprotected/cpanel/style_v2_optimized.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=4, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Content-Type: image/png
Last-Modified: Thu, 11 Aug 2022 21:06:13 GMT
Date: Mon, 05 Oct 2026 00:37:17 GMT
Cache-Control: max-age=5184000, public
Expires: Fri, 04 Dec 2026 00:37:17 GMT
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Content-Length: 962

00:37:16.337 GET 200 img 1.0 KB 721 ms 1 alerts

00:37:16.338 GET 200 img 320 B 276 ms 1 alerts

00:37:16.340 GET 200 img 450 B 289 ms 1 alerts

00:37:16.353 GET 200 font 22.1 KB 878 ms 1 alerts

00:37:16.354 GET 200 font 22.4 KB 877 ms 1 alerts

00:37:16.357 GET 200 font 21.9 KB 875 ms 1 alerts

00:37:17.240 GET 200 font 31.7 KB 157 ms 1 alerts

00:37:17.242 GET 200 font 15.7 KB 155 ms 1 alerts

00:37:17.243 GET 200 font 31.7 KB 154 ms 1 alerts

https://universalmobility.pro/Snapit/mail&_mbox=inbox.html#generalbugs@zippenhop.com

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://universalmobility.pro/Snapit/mail&_mbox=inbox.html#generalbugs@zippenhop.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://universalmobility.pro/Snapit/mail&_mbox=inbox.html#generalbugs@zippenhop.com

Domain graph

Network requests