WEBSITE ANALYSIS REPORT

https://ninjanopea.pages.dev/?app_vl=ZYJwlW1ramKEmLqxy5qmnnx0YsC2wa-TpaiVYsBxj2phmqOgnLFwrYw&dd=XTUiKSoqNycpLyxkIiIrIQ&e=huuhaa%40verkosta.fi&sui=%7Bsui%7D&fn=&ln=&p=&z=FINONACL-1410-IND02

14 Oct 2026 · 14:07:12.000 UTCpublic

Report tags: scam urlquery_fir deceptive_site fake_prize
Submit tags: soteria

Request review

Suspicious activity

1 detection · review the detection signals

Review evidence →

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:06:32.219 GET 200 document 24.5 KB 113 ms 1 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://ninjanopea.pages.dev/?app_vl=ZYJwlW1ramKEmLqxy5qmnnx0YsC2wa-TpaiVYsBxj2phmqOgnLFwrYw&dd=XTUiKSoqNycpLyxkIiIrIQ&e=huuhaa%40verkosta.fi&sui=%7Bsui%7D&fn=&ln=&p=&z=FINONACL-1410-IND02

IP / ASN

172.66.44.156

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with very long lines (626), with CRLF line terminators
MIME type: text/html; charset=utf-8
First seen (UTC): 14 Oct 2026 · 14:07:16.259 UTC
Last seen (UTC): 14 Oct 2026 · 14:07:16.259 UTC
Times seen: 1

Size: 24.5 KB (25093 bytes)
MD5: 5023366d681c4f67e6a2fc53116f245e
SHA1: b6e8f0a8dc988c4e8bf2a3344cedc1cbc1051502
SHA256: 39052349583079ba46caf9728daed7c8878d17791e1e0b779d6e542b60864c36

Certificate information

Issuer: Let's Encrypt · YE1
Subject: ninjanopea.pages.dev
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 33:F6:7A:12:9B:C0:14:2E:E3:E8:FB:B6:09:3F:DA:C6:83:46:53:C0
Valid from: Tue, 13 Oct 2026 06:19:57 GMT
Valid until: Mon, 11 Jan 2027 06:19:56 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
urlquery Scam - Deceptive Site (Fir)	medium	scam

HTTP headers

Request headers

GET /?app_vl=ZYJwlW1ramKEmLqxy5qmnnx0YsC2wa-TpaiVYsBxj2phmqOgnLFwrYw&dd=XTUiKSoqNycpLyxkIiIrIQ&e=huuhaa%40verkosta.fi&sui=%7Bsui%7D&fn=&ln=&p=&z=FINONACL-1410-IND02 HTTP/1.1
Host: ninjanopea.pages.dev
User-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
date: Wed, 14 Oct 2026 14:06:32 GMT
content-encoding: br
content-type: text/html; charset=utf-8
server: cloudflare
access-control-allow-origin: *
cache-control: public, max-age=0, must-revalidate
priority: u=0,i
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=96aygTPR7G9T27Nz%2FKysVU0z1iNyNRlFeYOyzKkg1uu7rW66%2FwDsuYWTdy6MgR2jgA0HACP0eJGxZZFji365nVvUXia4qdmVCnRZ26HBtWg1dDWqBEGlYzXzMg%2FaibMKgFs4bxAWvQ%3D%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a4a7252b98a0569c-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

14:06:32.513 GET 200 stylesheet 26.8 KB 60 ms —

14:06:32.518 GET 200 img 1.3 KB 61 ms —

14:06:32.519 GET 200 img 3.5 KB 43 ms —

14:06:32.521 GET 200 img 21.2 KB 23 ms —

14:06:32.524 GET 200 img 52.9 KB 60 ms —

14:06:32.628 GET 200 img 24.5 KB 108 ms —

https://ninjanopea.pages.dev/?app_vl=ZYJwlW1ramKEmLqxy5qmnnx0YsC2wa-TpaiVYsBxj2phmqOgnLFwrYw&dd=XTUiKSoqNycpLyxkIiIrIQ&e=huuhaa%40verkosta.fi&sui=%7Bsui%7D&fn=&ln=&p=&z=FINONACL-1410-IND02

Domain graph

Hostnames

Connections

Network requests

Transaction #06

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://ninjanopea.pages.dev/?app_vl=ZYJwlW1ramKEmLqxy5qmnnx0YsC2wa-TpaiVYsBxj2phmqOgnLFwrYw&dd=XTUiKSoqNycpLyxkIiIrIQ&e=huuhaa%40verkosta.fi&sui=%7Bsui%7D&fn=&ln=&p=&z=FINONACL-1410-IND02

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #06

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://ninjanopea.pages.dev/?app_vl=ZYJwlW1ramKEmLqxy5qmnnx0YsC2wa-TpaiVYsBxj2phmqOgnLFwrYw&dd=XTUiKSoqNycpLyxkIiIrIQ&e=huuhaa%40verkosta.fi&sui=%7Bsui%7D&fn=&ln=&p=&z=FINONACL-1410-IND02

Domain graph

Network requests