WEBSITE ANALYSIS REPORT

http://srglswebmail.coisadeprof.com/

15 May 2026 · 06:49:15.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.conditionfuneral.com5 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com18 captured requests
exemplarfederallithe.com18 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com5 captured requests
kettledroopingcontinuation.com12 captured requests
pl29038234.profitablecpmratenetwork.com1 captured requests
pl29038235.profitablecpmratenetwork.com1 captured requests
pl29038243.profitablecpmratenetwork.com1 captured requests
playafterdark.com22 captured requests
preferencenail.com2 captured requests
protrafficinspector.com8 captured requests
realizationnewestfangs.com6 captured requests
sourshaped.com9 captured requests
srglswebmail.coisadeprof.com1 captured requests
static.addtoany.com8 captured requests
web-main.dev2 captured requests
workdeadlinededicate.com6 captured requests
www.highperformanceformat.com8 captured requests
www.profitablecpmratenetwork.com3 captured requests

Connections

playafterdark.com → static.addtoany.comEmbeds1 captured connections
playafterdark.com → static.addtoany.comLoads from7 captured connections
srglswebmail.coisadeprof.com → web-main.devRedirects to1 captured connections
web-main.dev → cdn.conditionfuneral.comCalls3 captured connections
web-main.dev → cdn.conditionfuneral.comLoads from2 captured connections
web-main.dev → cdn.show-sb.comCalls1 captured connections
web-main.dev → cdn.storageimagedisplay.comLoads from18 captured connections
web-main.dev → exemplarfederallithe.comCalls2 captured connections
web-main.dev → exemplarfederallithe.comLoads from16 captured connections
web-main.dev → flushpersist.comLoads from2 captured connections
web-main.dev → fonts.googleapis.comLoads from2 captured connections
web-main.dev → fonts.gstatic.comLoads from5 captured connections
web-main.dev → kettledroopingcontinuation.comCalls3 captured connections
web-main.dev → kettledroopingcontinuation.comLoads from9 captured connections
web-main.dev → pl29038234.profitablecpmratenetwork.comLoads from1 captured connections
web-main.dev → pl29038235.profitablecpmratenetwork.comLoads from1 captured connections
web-main.dev → pl29038243.profitablecpmratenetwork.comLoads from1 captured connections
web-main.dev → preferencenail.comLoads from2 captured connections
web-main.dev → protrafficinspector.comCalls7 captured connections
web-main.dev → realizationnewestfangs.comCalls4 captured connections
web-main.dev → realizationnewestfangs.comLoads from2 captured connections
web-main.dev → sourshaped.comCalls6 captured connections
web-main.dev → sourshaped.comLoads from3 captured connections
web-main.dev → workdeadlinededicate.comCalls4 captured connections
web-main.dev → workdeadlinededicate.comLoads from2 captured connections
web-main.dev → www.highperformanceformat.comLoads from8 captured connections
web-main.dev → www.profitablecpmratenetwork.comRedirects to1 captured connections
www.profitablecpmratenetwork.com → playafterdark.comRedirects to2 captured connections
www.profitablecpmratenetwork.com → protrafficinspector.comCalls1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:48:52.065 GET 302 document 15.2 KB 2055 ms —

06:48:53.195 GET 200 document 15.2 KB 1625 ms —

06:48:54.274 GET 200 stylesheet 7.3 KB 408 ms —

06:48:54.275 GET 200 script 49.9 KB 755 ms 2 alerts

06:48:54.278 GET 200 script 49.9 KB 758 ms 2 alerts

06:48:54.280 GET 200 script 49.9 KB 766 ms 2 alerts

06:48:54.281 GET 200 script 46.9 KB 781 ms 2 alerts

06:48:54.282 GET 200 script 49.9 KB 654 ms 2 alerts

06:48:54.283 GET 200 script 49.9 KB 459 ms 2 alerts

06:48:54.292 GET 200 script 49.9 KB 480 ms 2 alerts

06:48:54.296 GET 200 script 95.4 KB 480 ms 2 alerts

06:48:54.299 GET 200 script 90.7 KB 483 ms 2 alerts

06:48:54.542 GET 200 font 44.6 KB 175 ms —

06:48:54.894 GET 200 xhr 40 B 433 ms —

06:48:54.961 GET 200 xhr 40 B 303 ms —

06:48:54.966 GET 200 xhr 40 B 306 ms —

06:48:54.978 GET 200 font 44.6 KB 15 ms —

06:48:54.991 GET 200 font 44.6 KB 22 ms —

06:48:55.000 GET 200 xhr 40 B 302 ms —

06:48:55.045 GET 200 xhr 40 B 211 ms —

06:48:55.048 GET 200 script 49.9 KB 103 ms 2 alerts

06:48:55.066 GET 200 xhr 40 B 56 ms —

06:48:55.071 GET 200 xhr 14.3 KB 769 ms 1 alerts

06:48:55.317 GET 200 xhr 40 B 21 ms —

06:48:55.319 GET 200 script 49.9 KB 102 ms 2 alerts

06:48:55.324 GET 307 xhr 4.4 KB 752 ms 1 alerts

06:48:55.332 GET 307 xhr 4.0 KB 690 ms 2 alerts

06:48:55.333 GET 307 xhr 4.0 KB 755 ms 1 alerts

06:48:55.335 GET 307 xhr 4.0 KB 714 ms 2 alerts

06:48:55.338 GET 307 xhr 4.3 KB 742 ms 1 alerts

06:48:55.349 GET 307 xhr 4.0 KB 730 ms 3 alerts

06:48:55.435 GET 307 xhr 4.3 KB 383 ms 1 alerts

06:48:55.445 GET 307 xhr 4.0 KB 297 ms 2 alerts

06:48:55.461 GET 200 img 0 B 692 ms 3 alerts

06:48:55.462 GET 200 script 83.4 KB 203 ms 2 alerts

06:48:55.468 GET 200 script 83.4 KB 183 ms 2 alerts

06:48:55.490 GET 200 xhr 14.8 KB 144 ms 1 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://exemplarfederallithe.com/ntv.json?key=923c72344c4d6aa324f19609dae8261a&vstc=4&uuid=defb2b12-f47f-48c3-ba95-0db4b180bd8f%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D&rb=

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://web-main.dev/

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 15 May 2026 · 06:49:24.055 UTC
Last seen (UTC): 15 May 2026 · 06:49:24.055 UTC
Times seen: 1

Size: 14.8 KB (15166 bytes)
MD5: c8f4f53a21fa4c95103c61e7cd127737
SHA1: b4e4eac0414c26088c730312cd59821168b941e3
SHA256: 9517cbafc581fb415d7615acc21f37c02ea502fb349939b09b3c5a152b5ee92d

Certificate information

Issuer: Let's Encrypt · R12
Subject: exemplarfederallithe.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 4D:6E:59:1A:16:B1:8F:5E:FE:37:10:51:89:46:9F:30:99:AB:85:30
Valid from: Sun, 26 Apr 2026 21:09:29 GMT
Valid until: Sat, 25 Jul 2026 21:09:28 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ntv.json?key=923c72344c4d6aa324f19609dae8261a&vstc=4&uuid=defb2b12-f47f-48c3-ba95-0db4b180bd8f%3A1%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D&rb= HTTP/1.1
Host: exemplarfederallithe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://web-main.dev
DNT: 1
Connection: keep-alive
Referer: https://web-main.dev/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Fri, 15 May 2026 06:48:55 GMT
Content-Type: application/json
Content-Length: 9671
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Device-Stock-UA,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA,Sec-CH-UA-Full-Version-List
access-control-allow-origin: https://web-main.dev
access-control-allow-credentials: true
vary: Accept-Encoding
set-cookie: uid_id2=defb2b12-f47f-48c3-ba95-0db4b180bd8f:1:1; expires=Fri, 22 May 2026 06:48:55 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Sat, 16 May 2026 06:48:55 GMT; path=/; secure; SameSite=None
uncs=1; expires=Sat, 16 May 2026 06:48:55 GMT; path=/; secure; SameSite=None
pdhtkv49=true; expires=Sat, 16 May 2026 06:48:55 GMT; path=/; secure; SameSite=None
uncs49=1; expires=Sat, 16 May 2026 06:48:55 GMT; path=/; secure; SameSite=None
u_pl28937736=1; expires=Sat, 16 May 2026 06:48:55 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 31
Host: exemplarfederallithe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: ec64debf4dd5bd8328a5429750aca862
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

06:48:55.631 GET 200 img 0 B 474 ms 1 alerts

06:48:55.633 GET 200 img 0 B 102 ms 1 alerts

06:48:55.655 GET 200 img 0 B 619 ms 1 alerts

06:48:55.677 GET 200 img 0 B 591 ms 1 alerts

06:48:55.679 GET 200 img 24.8 KB 108 ms —

06:48:55.681 GET 200 img 25.3 KB 174 ms —

06:48:55.694 GET 200 img 80.1 KB 84 ms —

06:48:55.696 GET 200 img 16.6 KB 83 ms —

06:48:55.698 GET 200 img 0 B 587 ms 1 alerts

06:48:55.706 GET 200 img 0 B 596 ms 1 alerts

06:48:55.709 GET 200 img 0 B 123 ms 1 alerts

06:48:55.712 GET 200 img 0 B 219 ms 1 alerts

06:48:55.853 GET 200 img 0 B 152 ms 1 alerts

http://srglswebmail.coisadeprof.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://srglswebmail.coisadeprof.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://srglswebmail.coisadeprof.com/

Domain graph

Network requests