WEBSITE ANALYSIS REPORT

https://s-verkkopankin-paivitys-fi.9-l.click/spnk/DUVzTTavlOw/VRX0V28xKbKQt4m58rOsMEOJ

05 Oct 2026 · 13:22:48.000 UTCpublic

Report tags
Submit tags: soteria

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:21:24.315 GET 302 document 0 B 1754 ms 1 alerts

Transaction #15

Request / response

URL

GET HTTPS

https://s-verkkopankin-paivitys-fi.9-l.click/spnk/DUVzTTavlOw/VRX0V28xKbKQt4m58rOsMEOJ

IP / ASN

104.21.4.108

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html; charset=utf-8
First seen (UTC): Not recorded
Last seen (UTC): 18 Oct 2026 · 15:37:08.323 UTC
Times seen: 19187428

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WE1
Subject: 9-l.click
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: B1:05:F1:2A:18:E5:8F:B0:22:7B:20:AB:DF:BA:65:52:34:FB:AA:50
Valid from: Thu, 01 Oct 2026 04:17:17 GMT
Valid until: Wed, 30 Dec 2026 05:16:03 GMT

Technology fingerprints

PHP (Programming languages)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /spnk/DUVzTTavlOw/VRX0V28xKbKQt4m58rOsMEOJ HTTP/1.1
Host: s-verkkopankin-paivitys-fi.9-l.click
User-Agent: Mozilla/5.0 (Linux; Android 9; SM-G960F Build/PPR1.180610.011; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/74.0.3729.157 Mobile Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 302 
date: Mon, 05 Oct 2026 13:21:26 GMT
content-type: text/html; charset=UTF-8
location: https://www.s-pankki.fi/
server: cloudflare
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=ac5be824fff3e4ad841a556f40de86bd; path=/
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=beMJIWyCyVSnTCxDInUowvBBk4qlnn5rAgAfKOJbK9fzus62YLh%2BOJdSiChmUPsuDb6bCI5vCdvdxlLLUqpDyGbqG%2BqZX0VfBIOiA3NxemwnDd5%2FGCplnSaiUYknTQEyTRMjdqezy7ym9hDAn7opP4k2actAPHU%3D"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
cf-ray: a45cbaaf2b4c5684-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

13:21:26.080 GET 200 document 183.9 KB 230 ms —

13:21:26.603 GET 200 font 32.9 KB 44 ms —

13:21:26.605 GET 200 font 33.6 KB 76 ms —

13:21:26.607 GET 200 stylesheet 594 B 95 ms —

13:21:26.608 GET 200 stylesheet 1.0 KB 94 ms —

13:21:26.610 GET 200 stylesheet 25.1 KB 92 ms —

13:21:26.615 GET 200 stylesheet 269.9 KB 87 ms —

13:21:26.616 GET 200 stylesheet 1008.0 KB 110 ms —

13:21:26.618 GET 200 script 76.9 KB 107 ms —

13:21:26.963 GET No response script 0 B 0 ms —

13:21:26.965 GET No response script 0 B 0 ms —

13:21:26.968 GET No response script 0 B 0 ms —

13:21:26.969 GET No response script 0 B 0 ms —

13:21:26.972 GET No response script 0 B 0 ms —

13:21:26.974 GET No response script 0 B 0 ms —

13:21:26.976 GET No response script 0 B 0 ms —

13:21:31.901 GET No response img 0 B 0 ms —

13:21:31.903 GET No response img 0 B 0 ms —

https://s-verkkopankin-paivitys-fi.9-l.click/spnk/DUVzTTavlOw/VRX0V28xKbKQt4m58rOsMEOJ

Domain graph

Hostnames

Connections