WEBSITE ANALYSIS REPORT

http://thomas-a-moorehead-net-worth.pages.dev/

07 Jul 2026 · 02:50:40.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:50:05.776 GET 200 document 8.8 KB 244 ms —

02:50:06.611 GET No response script 0 B 0 ms 1 alerts

02:50:06.615 GET 200 script 91.3 KB 537 ms 3 alerts

02:50:06.617 GET 200 stylesheet 17.2 KB 60 ms —

02:50:06.623 GET 404 img 6.8 KB 63 ms —

02:50:07.180 GET 200 script 83.4 KB 116 ms —

02:50:07.185 GET 200 xhr 40 B 114 ms —

02:50:07.187 GET 200 script 101.3 KB 567 ms 1 alerts

02:50:07.517 GET 404 img 6.8 KB 26 ms —

02:50:07.520 GET 404 img 6.8 KB 25 ms —

02:50:07.725 GET 200 xhr 5.6 KB 189 ms 3 alerts

02:50:07.788 GET 200 script 83.4 KB 20 ms —

02:50:07.791 GET 200 img 0 B 464 ms —

02:50:07.924 GET 200 xhr 1.5 KB 495 ms 2 alerts

02:50:07.927 GET 200 img 0 B 0 ms 3 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://normallydemandedalter.com/ren.gif?sid=H4sIAAAAAAAC_1xSS4scVRS-1RlwIST4QEFQCskigt1T7-oyCyH42JiJmEgWLuQ-25uprlupW9Xd6dXEiAtX40Zc1nw9k9kF9Q8oPW5kIDC960Vm4x8QfKylZxoGchbnnHu_C_c75_u-3WtOSQ8NXX5600x1ntPNuOe51-7qQpixdbfuuL7X8667d3WRRNfdySpVo_f8MOp577gfS75tNgPP9zzf892PdCWVmWyeodDlEz-Le0nU8_1-z48DTKrnb2zjwFIHYnRKXoYWiyt_qi-g-RzF8KcPpN2uTfnuh8Mmp7WpMBKHnxfbhRkXGF60qnKgisP1axi7IOTHDkxxuJ4CZrS_mgJML0jntWdgxeGaKtjo4JwtyyELMPEixqM5ZD6HpnNw8whanBCAC2zdQjF8vGWqMX1wjtIVuiAb__0NPV6QjWevohg-uZHriXvb5E2tTWExUS30ZA49mKNsjlBPO9DjI_D6a2jxlHidt1AMD27SpqLQYnlVZLTf51napQlj3YjSpJvFnt_lzE9imkWSiehsR1rNQW0HjXXQaAeN6qApOxiKpUuzvmJZEtFMqlQJz085jcMwS6M4UAmP0fCH0GIXvNpBWe1gW-_CCge2JhiJ9kDkNrDtY5HbhvnrGqxr2M5MPdijB6YeyIKAVruoRLuvy_v2EXh9aTZVVszMKlFWtzPKRDvToiao7i-ven6mQpqybiYDr5smadTNsoh3ueelgvUzzkW8r2zdtHvlKXlptWNHfHcF23LpxiwM-nGSJGkUBklIU09lUaRk6PWVklzB6hbadkCtg6lekOjkH5Qr4d_-AYweweZH4PoSaPMm6LgF_arFtPhlaqTVpbS9kg6k7Qk5gjAtynoD9QNnLz8lr8w-u3PjtzPB5dNrkPyYrAO8alFWLe7p3wkG-cOfb5W1HuopXTngdk1r6YDqk8uXwfWCvPDHv2dWfP30DfByB7Y8fv8oPAtYQ8BKB7kmyOXFD5S1sPL417_WZ3bR79lvMKgcsNyZsbxy9lle5d-fk7R66Xoikj7PaJwqGccxi6OAK8W8NFBhGPQz1HZx7xP95f8BAAD__y2f2xMMBAAA

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://thomas-a-moorehead-net-worth.pages.dev/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 10:29:58.057 UTC
Times seen: 19329754

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: normallydemandedalter.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 7E:8D:CE:23:D3:CB:90:53:29:79:03:84:11:4E:CC:40:2D:F7:05:72
Valid from: Wed, 17 Jun 2026 23:16:36 GMT
Valid until: Tue, 15 Sep 2026 23:16:35 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1xSS4scVRS-1RlwIST4QEFQCskigt1T7-oyCyH42JiJmEgWLuQ-25uprlupW9Xd6dXEiAtX40Zc1nw9k9kF9Q8oPW5kIDC960Vm4x8QfKylZxoGchbnnHu_C_c75_u-3WtOSQ8NXX5600x1ntPNuOe51-7qQpixdbfuuL7X8667d3WRRNfdySpVo_f8MOp577gfS75tNgPP9zzf892PdCWVmWyeodDlEz-Le0nU8_1-z48DTKrnb2zjwFIHYnRKXoYWiyt_qi-g-RzF8KcPpN2uTfnuh8Mmp7WpMBKHnxfbhRkXGF60qnKgisP1axi7IOTHDkxxuJ4CZrS_mgJML0jntWdgxeGaKtjo4JwtyyELMPEixqM5ZD6HpnNw8whanBCAC2zdQjF8vGWqMX1wjtIVuiAb__0NPV6QjWevohg-uZHriXvb5E2tTWExUS30ZA49mKNsjlBPO9DjI_D6a2jxlHidt1AMD27SpqLQYnlVZLTf51napQlj3YjSpJvFnt_lzE9imkWSiehsR1rNQW0HjXXQaAeN6qApOxiKpUuzvmJZEtFMqlQJz085jcMwS6M4UAmP0fCH0GIXvNpBWe1gW-_CCge2JhiJ9kDkNrDtY5HbhvnrGqxr2M5MPdijB6YeyIKAVruoRLuvy_v2EXh9aTZVVszMKlFWtzPKRDvToiao7i-ven6mQpqybiYDr5smadTNsoh3ueelgvUzzkW8r2zdtHvlKXlptWNHfHcF23LpxiwM-nGSJGkUBklIU09lUaRk6PWVklzB6hbadkCtg6lekOjkH5Qr4d_-AYweweZH4PoSaPMm6LgF_arFtPhlaqTVpbS9kg6k7Qk5gjAtynoD9QNnLz8lr8w-u3PjtzPB5dNrkPyYrAO8alFWLe7p3wkG-cOfb5W1HuopXTngdk1r6YDqk8uXwfWCvPDHv2dWfP30DfByB7Y8fv8oPAtYQ8BKB7kmyOXFD5S1sPL417_WZ3bR79lvMKgcsNyZsbxy9lle5d-fk7R66Xoikj7PaJwqGccxi6OAK8W8NFBhGPQz1HZx7xP95f8BAAD__y2f2xMMBAAA HTTP/1.1
Host: normallydemandedalter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://thomas-a-moorehead-net-worth.pages.dev/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=d9a88c97-a6bb-4aa6-9501-cb165a94ebd4:2:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl23366159=1; slec5b3285666743263a70f944fe308ffecf=[6671912]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Tue, 07 Jul 2026 02:50:07 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin,Accept-Encoding
x-envoy-upstream-service-time: 1
Host: normallydemandedalter.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: f35a8bd0d0152a84ebdd4bbc4cee1b44
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

02:50:08.453 GET 200 xhr 76.8 KB 479 ms —

02:50:08.455 GET 200 xhr 3.6 KB 460 ms —

02:50:08.462 GET 200 xhr 386 B 480 ms —

02:50:08.464 GET 200 img 0 B 96 ms 1 alerts

02:50:08.561 GET 200 stylesheet 16.4 KB 85 ms —

02:50:08.567 GET 200 img 63.1 KB 13 ms —

02:50:08.921 GET 200 img 0 B 94 ms 1 alerts

02:50:08.945 GET 200 img 0 B 166 ms 1 alerts

02:50:08.952 GET 200 img 0 B 375 ms 1 alerts

02:50:08.962 GET 200 img 0 B 0 ms 3 alerts

02:50:08.964 GET 200 img 0 B 380 ms 3 alerts

02:50:09.063 GET 200 font 42.1 KB 81 ms —

02:50:09.065 GET 200 font 42.1 KB 82 ms —

http://thomas-a-moorehead-net-worth.pages.dev/

Domain graph

Hostnames

Connections