WEBSITE ANALYSIS REPORT

https://sadxq.shkul.com/DHX5gHumBjuUprgB?q=Y2xpZW50LXJlcXVlc3QtaWQ9Y2RkMjUyN2QtMjI3OS00NTJjLWI3M2EtNzBiNTJhMmNiNzQ0JmNsaWVudF9pZD00NzY1NDQ1Yi0zMmM2LTQ5YjAtODNlNi0xZDkzNzY1Mjc2Y2EmbWt0PWVuLVVTJm5vbmNlPTYzOTE3OTMzNjQ2OTk0MDgxNi5NbU5oWW1NeVpEY3RZakpoTkMwMFptRm1MVGc1WmpndE16VXdNVEJrWkdabU16TmhaamhoTm1NeE1tUXRNMkZoTnkwME5qVXhMV0ZsTkdVdFpUYzFNbVptT1RBeVpXSmgmcmVkaXJlY3RfdXJpPWh0dHBzJTNBJTJGJTJGd3d3Lm9mZmljZS5jb20lMkZsYW5kaW5ndjImcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3QmcmVzcG9uc2VfdHlwZT1jb2RlK2lkX3Rva2VuJnNjb3BlPW9wZW5pZCtwcm9maWxlK2h0dHBzJTNBJTJGJTJGd3d3Lm9mZmljZS5jb20lMkZ2MiUyRk9mZmljZUhvbWUuQWxsJnN0YXRlPU1fNGpnV1JBY1NBY3VxOHBRQi16R3oyMktxaEVSdWVMdjExR0ZfSHVMcHd4Yl9wbFoyZDlUNjRndTdkOGdfUG01Q01qdXFrNGllVllhR1E4Rk5GZ2lUUVJrOVVNUG54YUZTTEdxQzY3UWhCQWs1a19taktkVS1JMmMzYmxHRnB6Nkc5YWdwMzlqTTJqMTBua0wxX0tNV3duZzk2MDhEZlkwX3VfTjFoaEJuWlY5UllsSzBTZ18xaFVBUVdITkwyX01mbUtfTWVCLVJKbmVaaWJJLVFmam1JX1Q1eU1ZM1VBdUNiLWhVRkMxcUpxdkViLXVmLUtzS05UdFVMUEFjZVZ1ZkNqd3U4MXppSFhyMS1iV3RkNEJlVWZXQ28xNjAxRW9LbjRiUTdoYVg3NUxkTGxhMmhnXzZxSmpEZzdKbFlUSHhUdEp5V1ZlckNpVHdnQVIzZnlnRVo3SG5hRVFJQnNiQ1VqUDhtT21ROUFybEtITGc0ZHhvand1eGJOc2NFZWdwV3Z5Mm9CMG5FQ3I3S2licE9ROTVqdnZxajRTU05VbXExQTZaU2hEMTgmdWlfbG9jYWxlcz1lbi1VUyZ4LWNsaWVudC1TS1U9SURfTkVUOF8wJngtY2xpZW50LXZlcj04LjE0LjAuMA%3D%3D

25 Jun 2026 · 01:12:31.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

01:12:05.037 GET 200 document 0 B 0 ms 2 alerts

Transaction #26

Request / response

URL

GET HTTPS

https://sadxq.shkul.com/DHX5gHumBjuUprgB?q=Y2xpZW50LXJlcXVlc3QtaWQ9Y2RkMjUyN2QtMjI3OS00NTJjLWI3M2EtNzBiNTJhMmNiNzQ0JmNsaWVudF9pZD00NzY1NDQ1Yi0zMmM2LTQ5YjAtODNlNi0xZDkzNzY1Mjc2Y2EmbWt0PWVuLVVTJm5vbmNlPTYzOTE3OTMzNjQ2OTk0MDgxNi5NbU5oWW1NeVpEY3RZakpoTkMwMFptRm1MVGc1WmpndE16VXdNVEJrWkdabU16TmhaamhoTm1NeE1tUXRNMkZoTnkwME5qVXhMV0ZsTkdVdFpUYzFNbVptT1RBeVpXSmgmcmVkaXJlY3RfdXJpPWh0dHBzJTNBJTJGJTJGd3d3Lm9mZmljZS5jb20lMkZsYW5kaW5ndjImcmVzcG9uc2VfbW9kZT1mb3JtX3Bvc3QmcmVzcG9uc2VfdHlwZT1jb2RlK2lkX3Rva2VuJnNjb3BlPW9wZW5pZCtwcm9maWxlK2h0dHBzJTNBJTJGJTJGd3d3Lm9mZmljZS5jb20lMkZ2MiUyRk9mZmljZUhvbWUuQWxsJnN0YXRlPU1fNGpnV1JBY1NBY3VxOHBRQi16R3oyMktxaEVSdWVMdjExR0ZfSHVMcHd4Yl9wbFoyZDlUNjRndTdkOGdfUG01Q01qdXFrNGllVllhR1E4Rk5GZ2lUUVJrOVVNUG54YUZTTEdxQzY3UWhCQWs1a19taktkVS1JMmMzYmxHRnB6Nkc5YWdwMzlqTTJqMTBua0wxX0tNV3duZzk2MDhEZlkwX3VfTjFoaEJuWlY5UllsSzBTZ18xaFVBUVdITkwyX01mbUtfTWVCLVJKbmVaaWJJLVFmam1JX1Q1eU1ZM1VBdUNiLWhVRkMxcUpxdkViLXVmLUtzS05UdFVMUEFjZVZ1ZkNqd3U4MXppSFhyMS1iV3RkNEJlVWZXQ28xNjAxRW9LbjRiUTdoYVg3NUxkTGxhMmhnXzZxSmpEZzdKbFlUSHhUdEp5V1ZlckNpVHdnQVIzZnlnRVo3SG5hRVFJQnNiQ1VqUDhtT21ROUFybEtITGc0ZHhvand1eGJOc2NFZWdwV3Z5Mm9CMG5FQ3I3S2licE9ROTVqdnZxajRTU05VbXExQTZaU2hEMTgmdWlfbG9jYWxlcz1lbi1VUyZ4LWNsaWVudC1TS1U9SURfTkVUOF8wJngtY2xpZW50LXZlcj04LjE0LjAuMA%3D%3D

IP / ASN

172.67.209.38

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: Not recorded
First seen (UTC): Not recorded
Last seen (UTC): 21 Oct 2026 · 05:43:32.236 UTC
Times seen: 19250043

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YE2
Subject: shkul.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 33:53:21:76:B1:C9:E5:01:24:3C:FD:75:F9:09:E9:D9:28:22:D1:A4
Valid from: Sun, 31 May 2026 03:25:39 GMT
Valid until: Sat, 29 Aug 2026 03:25:38 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /DHX5gHumBjuUprgB?q=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%3D%3D HTTP/1.1
Host: sadxq.shkul.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
cache-control: no-cache, no-store
priority: u=0,i
content-type: text/html
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
server: cloudflare
content-encoding: zstd
date: Thu, 25 Jun 2026 01:12:05 GMT
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=AJKDTJ%2FkNOmhK30XILZe%2FujJAOLnpwSoZ5J2q5BRs7TyDygvcuitm8fb0Q2EZGFVcntwKFtF%2FJo0PMXBOGGTdqE%2FWhEicnNneIva2ILZGg%2BLVXmh8qMI3Ki53LE5fzxUCRg%3D"}]}
cf-ray: a1101a17bca5b1b8-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

01:12:05.853 GET 301 document 0 B 532 ms —

01:12:06.390 GET 200 document 357.5 KB 345 ms —

01:12:07.286 GET 200 img 49 B 56 ms —

01:12:07.292 GET 200 stylesheet 114.7 KB 57 ms —

01:12:07.294 GET 200 script 340 B 79 ms —

01:12:07.296 GET 200 script 136.2 KB 77 ms —

01:12:07.297 GET 200 script 275.0 KB 76 ms —

01:12:07.299 GET 200 script 1.09 MB 82 ms —

01:12:07.301 GET 200 script 130 B 62 ms —

01:12:07.303 GET 200 script 99 B 11 ms —

01:12:07.306 GET 200 script 360.2 KB 31 ms —

01:12:07.308 GET 200 script 2.8 KB 13 ms —

01:12:07.310 GET 200 stylesheet 590.3 KB 38 ms —

01:12:07.319 GET 200 script 86.2 KB 39 ms —

01:12:07.322 GET 200 script 150.2 KB 19 ms —

01:12:07.360 GET 200 script 85.5 KB 12 ms —

01:12:07.362 GET 200 script 3.0 KB 19 ms —

01:12:07.365 GET 200 script 242.6 KB 18 ms —

01:12:07.366 GET 200 script 8.5 KB 17 ms —

01:12:07.369 GET 200 script 9.7 KB 15 ms —

01:12:07.370 GET 200 script 24.5 KB 14 ms —

01:12:07.373 GET 200 script 410.4 KB 16 ms —

01:12:07.399 GET 200 img 142.8 KB 57 ms —

01:12:07.401 GET 200 img 198.1 KB 65 ms —

01:12:07.427 GET 200 img 5.7 KB 9 ms —

01:12:07.448 GET 200 img 9.7 KB 19 ms —

01:12:07.470 GET 200 img 3.6 KB 9 ms —

01:12:07.471 GET 200 img 15.6 KB 9 ms —

01:12:07.473 GET 200 img 5.3 KB 9 ms —

01:12:07.474 GET 200 img 10.0 KB 9 ms —

01:12:07.475 GET 200 img 11.4 KB 9 ms —

01:12:07.513 GET 200 img 17.4 KB 9 ms —

01:12:07.515 GET 200 img 25.6 KB 9 ms —

01:12:07.516 GET 200 img 11.9 KB 9 ms —

01:12:07.517 GET 200 img 18.3 KB 10 ms —

01:12:07.519 GET 200 img 25.4 KB 9 ms —

01:12:07.520 GET 200 img 15.5 KB 9 ms —

01:12:07.521 GET 200 img 27.2 KB 9 ms —

01:12:07.522 GET 200 img 22.4 KB 10 ms —

01:12:07.524 GET 200 img 22.1 KB 10 ms —

01:12:07.525 GET 200 img 27.2 KB 10 ms —

01:12:07.526 GET 200 img 39.9 KB 11 ms —

01:12:07.528 GET 200 img 18.6 KB 10 ms —

01:12:07.529 GET 200 img 28.0 KB 10 ms —

01:12:07.530 GET 200 img 17.3 KB 10 ms —

01:12:07.532 GET 200 img 12.3 KB 10 ms —

01:12:07.533 GET 200 img 9.1 KB 9 ms —

01:12:07.534 GET 200 img 11.6 KB 9 ms —

01:12:07.535 GET 200 img 9.2 KB 9 ms —

Domain graph

Hostnames

Connections

Network requests

Transaction #26

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #26

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Domain graph

Network requests