WEBSITE ANALYSIS REPORT

http://xfntiy.weebly.com/

11 Sep 2026 · 08:33:08.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:32:34.165 GET 200 document 24.1 KB 283 ms 3 alerts

08:32:34.819 GET 200 stylesheet 11.6 KB 93 ms —

08:32:34.822 GET 200 script 24.0 KB 215 ms 3 alerts

Transaction #01

Request / response

URL

GET HTTPS

https://xfntiy.weebly.com/files/theme/MutationObserver.js

IP / ASN

74.115.51.9

AS27647 · WEEBLY

Requested by: https://xfntiy.weebly.com/

Resource information

File type: JavaScript source, ASCII text
MIME type: application/javascript
First seen (UTC): 07 Mar 2023 · 01:32:42.000 UTC
Last seen (UTC): 17 Oct 2026 · 07:06:05.764 UTC
Times seen: 4910

Size: 24.0 KB (24573 bytes)
MD5: e52201e96af18dd02c85eb627c843491
SHA1: 5bcdd1480b9bebcddb0d82083bdf03a7435d59a1
SHA256: 397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a

Certificate information

Issuer: Let's Encrypt · YE2
Subject: weebly.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 3B:CE:88:08:2E:C3:E2:EB:4A:C0:1D:92:81:0D:A8:EA:57:65:16:10
Valid from: Sat, 08 Aug 2026 20:20:54 GMT
Valid until: Fri, 06 Nov 2026 20:20:53 GMT

Technology fingerprints

Amazon Web Services (PaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
OpenDNS Phishing Block	medium	Phishing
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /files/theme/MutationObserver.js HTTP/1.1
Host: xfntiy.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Referer: https://xfntiy.weebly.com/
Cookie: __cf_bm=C62oVLyp9DxUXsR5XTh2sdgoJ35fVVELHFjVzhW.AS8-1789115554.188325-1.0.1.1-fFKIGK546Ho5yXBRya6mTWgi2N1eJtNzvfEAaFY4mo_8.2SAencooaZ7SDM_KpzaKyRc1zjUpK0TVyYpHixscfd1Ji7Ta.VebPahtcIme3wTGExyHtF3uwhKyacdv9m9
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Fri, 11 Sep 2026 08:32:35 GMT
content-type: application/javascript
cf-ray: a395529999ab35a6-OSL
cf-cache-status: DYNAMIC
access-control-allow-origin: *
content-encoding: gzip
etag: W/"e52201e96af18dd02c85eb627c843491"
last-modified: Wed, 17 Sep 2025 08:35:42 GMT
server: cloudflare
vary: Accept-Encoding
access-control-allow-headers: Origin, Authorization, Content-Type
access-control-allow-methods: GET, POST, DELETE, OPTIONS
x-storage-bucket: z3974
x-storage-object: 397452d9f6a2ea6a2135b45c9e40139c68ac6661f3bab4413e7299586ccb408a
x-amz-id-2: NtGSxgd5PwmJAab9ALwxINX2j+GNw4HNoB/x9SeuAQugs2qTMXlH2gS4FnG+xETUPnNtiB0MN44=
x-amz-replication-status: COMPLETED
x-amz-request-id: 07Y521GS3HMZ4562
x-amz-server-side-encryption: AES256
x-amz-version-id: Rrvfuzc6WoAN7CYqd9_VlLJKn.zh..Fs
X-Firefox-Spdy: h2

08:32:34.824 GET 200 stylesheet 205.9 KB 59 ms —

08:32:34.826 GET 200 stylesheet 3.8 KB 264 ms —

08:32:34.827 GET 200 stylesheet 12.4 KB 263 ms —

08:32:34.829 GET 200 stylesheet 44.8 KB 200 ms 3 alerts

08:32:34.830 GET 200 stylesheet 1.7 KB 42 ms —

08:32:34.832 GET 200 stylesheet 1.7 KB 264 ms —

08:32:34.833 GET 200 stylesheet 1.2 KB 263 ms —

08:32:34.834 GET 200 script 7.0 KB 193 ms 3 alerts

08:32:34.836 GET 200 script 91.4 KB 39 ms —

08:32:34.837 GET 200 script 184.9 KB 53 ms —

08:32:34.839 GET 200 script 469.7 KB 56 ms —

08:32:34.842 GET 200 script 3.5 KB 55 ms —

08:32:34.843 GET 200 script 65.9 KB 203 ms 3 alerts

08:32:34.844 GET 200 script 3.6 KB 229 ms 3 alerts

08:32:34.845 GET 200 script 3.7 KB 617 ms 3 alerts

08:32:34.846 GET 200 script 2.8 KB 569 ms 3 alerts

08:32:34.848 GET 200 script 15.4 KB 538 ms 3 alerts

08:32:34.849 GET 200 script 521.8 KB 44 ms —

08:32:34.861 GET 200 img 940 B 596 ms 3 alerts

08:32:34.863 GET 200 img 1.1 KB 573 ms 3 alerts

08:32:34.864 GET 200 img 502.9 KB 1777 ms 3 alerts

08:32:34.865 GET 200 img 3.7 KB 591 ms 3 alerts

08:32:34.866 GET 200 img 9.5 KB 14 ms —

08:32:35.142 GET 200 script 184.9 KB 14 ms —

08:32:35.183 GET 200 img 886 B 190 ms 3 alerts

08:32:35.193 GET 200 font 11.3 KB 10 ms —

08:32:35.195 GET 200 font 12.0 KB 11 ms —

08:32:35.196 GET 200 font 11.1 KB 12 ms —

08:32:35.198 GET 200 font 9.9 KB 11 ms —

08:32:35.524 GET 301 script 0 B 9 ms —

08:32:35.536 GET 200 script 976 B 53 ms —

08:32:35.547 GET 200 stylesheet 2.6 KB 9 ms —

08:32:35.565 GET 200 script 73.3 KB 13 ms —

08:32:35.570 POST 200 xhr 348 B 245 ms 3 alerts

08:32:35.619 POST 200 xhr 2 B 545 ms —

08:32:35.620 OPTIONS 200 xhr 0 B 703 ms —

08:32:35.621 GET 200 script 824.7 KB 124 ms —

08:32:36.019 GET 200 img 4.2 KB 209 ms 3 alerts

http://xfntiy.weebly.com/

Domain graph

Hostnames

Connections