WEBSITE ANALYSIS REPORT

http://retrotowerdefenses.wiki/codes/

30 Aug 2026 · 08:45:45.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:45:15.813 GET 200 document 39.5 KB 268 ms —

08:45:16.283 GET 200 stylesheet 64.3 KB 120 ms —

08:45:16.284 GET 200 script 1.2 KB 56 ms —

08:45:16.287 GET 200 script 24.6 KB 101 ms —

08:45:16.423 GET 200 img 51 B 123 ms —

08:45:16.553 GET 200 img 2.2 KB 110 ms —

08:45:16.554 GET 200 img 424 B 93 ms —

08:45:16.932 GET 200 script 47.9 KB 695 ms 2 alerts

08:45:16.943 GET 200 script 47.9 KB 661 ms 2 alerts

08:45:17.624 GET 200 xhr 40 B 115 ms —

08:45:17.644 GET 200 xhr 40 B 109 ms —

08:45:17.769 GET 307 xhr 0 B 579 ms 1 alerts

08:45:17.771 GET 307 xhr 0 B 1172 ms 2 alerts

08:45:18.354 GET 200 xhr 4.0 KB 133 ms 1 alerts

08:45:18.536 GET 200 img 60.0 KB 124 ms —

08:45:18.538 GET 200 img 0 B 0 ms 1 alerts

Transaction #19

Request / response

URL

GET HTTPS

https://realizationnewestfangs.com/impr.gif?sid=H4sIAAAAAAAC_1ySP4wbRRTGx84JgSiQUIAOubgCBPbt7O54d5Mu_KtyQSQoRar5e5l4vbvZ2bUdVxeCqCgOIaGIAu19vst1ERSIFtmIBgnp3CAXuYaGBlEgUaO7WBwwxXtv5nuaed_o98l-fUJ6qPnq_av51KYp32I9r_PaTZupfOw62zc61Ot5lzs3bdYPL3cmp6EcXaJB2PNe77yn5SDf8j3qedSjnXdtqU0-2TpTYYvHNGG9ftijNO5R5mNS_v_E1S043oIanZAXYdXyhV_NLVg5Rzb8-m3tBlVevPnOsE55lZcYqaMPs0GWjzMMz0tTtmCyo3U3crck5GEbeXa0doF8dHDqAsIuSfvlJxDZ0XpUiNHh02lFCp1BqOcxHs2h0wUsn0PmD2DVMQGkwvY1ZMNH23k55veeqvxUXZKNv_6EHS_JxpOLyIaPr6R20rmep3Vl88xhYhrYyRx2Z46iXqCatmHHC8jqI1j1M_HaryIbHl7ldclh1WqTezpWOmBdj6qgG4aUdmMhwy71oiRQVIVGybM_smYO7tqoXQu1baE2bdRFG0O16vAkNiLphzzRJjLKo5HkLAiSKGS-6UuGWt6HVXuQ5S6KchcD-9lx-CmcasFVBCPVHKrU-a55pFJXC7rO_joHzSyvdvb5YV7t6IyAl3soVXNgi7vuAWR1YTY1Ts3y08BF1cy4UM3MqoqgvLva9Cj3GFVxN_Cl7kYe012uWdw1iWJS-JrRxD8wrqr_08rCbsSE6nLfF11pPBklwhg_SvaLNT-tX95aYKBXncgX0ijFFItZbKKEB4oHfWaoH4d9TyZwtoF1BNy1MLVLcuvhCIVdkjee_QKCL-DSBaS9AF6_Aj6eRX4MfhuJh2n2XamrMq_ysS6VNjpz2vXGdmCh8gZFtYHqXgu6IvvpCbk4--DGle_PMNE_fgktfyLrBVk2KMoGd-wPBDvp_W-uFZUd2ik_5eZ6xSv9DLg9vv0bpF2Sl_7QZwBf2vwWstiFK_65aZa6Ykn09Dm4nEAUBKklSPX5U1w0cP_ai_N6332MnbIFkbZmIi3JgUjLdA_Orjqx73uepH6iEhYmQWw0C2kUaUaDvvYChsot73z--1d_BwAA___z_8yGRgQAAA==

IP / ASN

172.240.127.242

AS7979 · SERVERS-COM

Requested by: https://retrotowerdefenses.wiki/codes/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 18:29:54.333 UTC
Times seen: 19313519

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: realizationnewestfangs.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: A3:C2:C5:43:AE:DC:93:53:9C:47:CF:02:16:1B:EB:87:63:59:E7:8E
Valid from: Wed, 26 Aug 2026 03:44:23 GMT
Valid until: Tue, 24 Nov 2026 03:44:22 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1ySP4wbRRTGx84JgSiQUIAOubgCBPbt7O54d5Mu_KtyQSQoRar5e5l4vbvZ2bUdVxeCqCgOIaGIAu19vst1ERSIFtmIBgnp3CAXuYaGBlEgUaO7WBwwxXtv5nuaed_o98l-fUJ6qPnq_av51KYp32I9r_PaTZupfOw62zc61Ot5lzs3bdYPL3cmp6EcXaJB2PNe77yn5SDf8j3qedSjnXdtqU0-2TpTYYvHNGG9ftijNO5R5mNS_v_E1S043oIanZAXYdXyhV_NLVg5Rzb8-m3tBlVevPnOsE55lZcYqaMPs0GWjzMMz0tTtmCyo3U3crck5GEbeXa0doF8dHDqAsIuSfvlJxDZ0XpUiNHh02lFCp1BqOcxHs2h0wUsn0PmD2DVMQGkwvY1ZMNH23k55veeqvxUXZKNv_6EHS_JxpOLyIaPr6R20rmep3Vl88xhYhrYyRx2Z46iXqCatmHHC8jqI1j1M_HaryIbHl7ldclh1WqTezpWOmBdj6qgG4aUdmMhwy71oiRQVIVGybM_smYO7tqoXQu1baE2bdRFG0O16vAkNiLphzzRJjLKo5HkLAiSKGS-6UuGWt6HVXuQ5S6KchcD-9lx-CmcasFVBCPVHKrU-a55pFJXC7rO_joHzSyvdvb5YV7t6IyAl3soVXNgi7vuAWR1YTY1Ts3y08BF1cy4UM3MqoqgvLva9Cj3GFVxN_Cl7kYe012uWdw1iWJS-JrRxD8wrqr_08rCbsSE6nLfF11pPBklwhg_SvaLNT-tX95aYKBXncgX0ijFFItZbKKEB4oHfWaoH4d9TyZwtoF1BNy1MLVLcuvhCIVdkjee_QKCL-DSBaS9AF6_Aj6eRX4MfhuJh2n2XamrMq_ysS6VNjpz2vXGdmCh8gZFtYHqXgu6IvvpCbk4--DGle_PMNE_fgktfyLrBVk2KMoGd-wPBDvp_W-uFZUd2ik_5eZ6xSv9DLg9vv0bpF2Sl_7QZwBf2vwWstiFK_65aZa6Ykn09Dm4nEAUBKklSPX5U1w0cP_ai_N6332MnbIFkbZmIi3JgUjLdA_Orjqx73uepH6iEhYmQWw0C2kUaUaDvvYChsot73z--1d_BwAA___z_8yGRgQAAA== HTTP/1.1
Host: realizationnewestfangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=a0e8de35-01d3-4411-8bc4-10793d1d4fdc:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjozMDg4NDgwMywiayI6IjcyYmNmZGQ1ZDU4NThmNzlhM2RhMzY1ZjEyODQ2MGM5Iiwic2lkIjoiIiwiaXNpZCI6MCwiYXNpZCI6MSwiemlkIjo2MDAyODA2LCJwaWQiOjI4MjAyNDYsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoiYmMyeXM1eDRhIiwiY3BrcyI6eyIyOCI6IjEwNDgwZTBkOGIwN2EyMTA5ZDc1NDRmNjg3NzEyYTg3In0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0NjI3MCwibiI6Ik1hdXJhIn0sInJnIjp7ImlkIjozMjcxLCJuIjoiVmlrZW4ifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9yZXRyb3Rvd2VyZGVmZW5zZXMud2lraSIsInR6IjoyLCJpZHVjIjowLCJhciI6W119fQ.HX77f9peJcMfC-jqlboTWwYemQV0VFjmUZQiphfFsTg; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl30884803=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 30 Aug 2026 08:45:18 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,X-Device-User-Agent
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
x-envoy-upstream-service-time: 2
Host: realizationnewestfangs.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7c31bc5ffe1edc7e2a9f974703253229
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

08:45:18.949 GET 200 xhr 4.0 KB 398 ms 2 alerts

08:45:19.389 GET 200 img 69.0 KB 37 ms —

08:45:19.391 GET 200 img 0 B 0 ms 2 alerts

08:45:19.555 POST 200 fetch 0 B 439 ms 1 alerts

08:45:20.374 POST 200 fetch 0 B 529 ms 2 alerts

http://retrotowerdefenses.wiki/codes/

Domain graph

Hostnames

Connections