WEBSITE ANALYSIS REPORT

http://newstime99.com

18 Apr 2026 · 14:20:10.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

14:19:47.098 GET 200 document 187.7 KB 430 ms —

14:19:47.796 GET 200 stylesheet 161.2 KB 411 ms —

14:19:47.799 GET 200 script 46.7 KB 849 ms 4 alerts

14:19:47.800 GET 200 script 1.2 KB 3 ms —

14:19:48.380 GET 200 xhr 40 B 292 ms —

14:19:48.381 GET 200 script 5.0 KB 808 ms —

14:19:48.383 GET 200 xhr 3.9 KB 844 ms —

14:19:49.271 GET 200 document 187.7 KB 143 ms —

14:19:49.425 GET 200 stylesheet 161.2 KB 17 ms —

14:19:49.427 GET 200 script 46.7 KB 811 ms 4 alerts

14:19:49.431 GET 200 script 1.2 KB 6 ms —

14:19:49.707 GET 200 img 4.6 KB 1190 ms —

14:19:49.708 GET 200 img 1.9 KB 1110 ms —

14:19:49.958 GET 200 script 5.0 KB 789 ms 1 alerts

14:19:49.959 GET 200 xhr 3.8 KB 725 ms —

14:19:50.402 GET 200 img 0 B 103 ms 1 alerts

14:19:50.446 GET 200 img 55.9 KB 150 ms —

14:19:50.447 GET 200 img 0 B 555 ms 1 alerts

14:19:50.449 GET 200 xhr 3.8 KB 109 ms —

14:19:50.582 GET 200 img 0 B 104 ms 1 alerts

14:19:50.587 GET 200 img 91.3 KB 143 ms —

14:19:50.588 GET 200 img 0 B 694 ms 1 alerts

14:19:50.996 GET No response other 0 B 3 ms —

14:19:51.009 GET 200 imageset 53.5 KB 12 ms —

14:19:51.016 GET 200 imageset 50.3 KB 16 ms —

14:19:51.018 GET 200 lazy-imageset 16.3 KB 13 ms —

14:19:51.020 GET 200 lazy-imageset 17.1 KB 13 ms —

14:19:51.022 GET 200 lazy-imageset 20.2 KB 10 ms —

14:19:51.023 GET 200 lazy-imageset 16.2 KB 11 ms —

14:19:51.039 GET 200 script 27.0 KB 44 ms —

14:19:51.073 POST 200 fetch 92 B 147 ms —

14:19:51.075 GET 200 script 466.5 KB 126 ms —

14:19:51.290 GET 200 script 839.7 KB 365 ms —

14:19:51.298 GET 200 script 50.1 KB 103 ms 3 alerts

14:19:51.477 GET 200 script 5.0 KB 762 ms 4 alerts

14:19:51.488 GET 307 xhr 4.3 KB 747 ms 4 alerts

14:19:51.491 GET 200 script 17.0 KB 116 ms —

14:19:51.933 GET 200 xhr 3.9 KB 112 ms —

14:19:51.934 GET 200 xhr 4.3 KB 141 ms 4 alerts

14:19:52.050 GET 200 img 0 B 100 ms 1 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_4RTvY8bxRvevSS_nwQFgiBqFykAxb6d3fGuh3QRHw3kgCRKEUVovvZu8Hp3s7NrO5YQHEEpqA7R0LF-7PsooggkEEqDkA8qJCRc4SLXRPwBCCkFFfKdpYOKKd6PeUbzPO8779wbV0dOCxVfvP1WNjJJwtfbLa_x4g2TqmxgG1euNYjX8i41bpg0pJcaw6Up-q-QgLa8lxpvaNnN1n2PeB7xSON1U-g4G64fozD5fUZazGtRv0XaFMPi37mtzsHyc1D9I-c5GDV_5nF8E0bOkPa-elXbbpnlF1_rVQkvswJ9tX897abZIEXvNIwLF3G6vzqNzM4d54s1ZOn-qgJk_emyAggzd9ZeeASR7q9kQvR3T5SKBDqFUE9j0J9BJzMYPoPM7sKoXx1AKlzZQNrbu5IVA37nBOVLdO6cffInzGDunH30PNLeg8uJGTauZklVmiy1GMY1zHAGszlDXs1QjtZgBoeQ5ccw6hdn_cmbSHvTDZtkMGpxQQuiPZ_5TeKFskmJZk0uCGuq0ItiKkkUtOlxi0w8A7drqKyLyrioYhdV7qKnFg3qdagkPAhjpmTkUU6p0sJjHd_zOJMRKrkNo3Ygi3sHudoqu33KpmVR6b0qlZayMb1fvZcnficMok4UjcniQppoGYesEwqhJQ2EYMQXmmoZqZhzn3aiOHh4k4TMIyG5GNIgCoPgYptREhBya--E5ZhjuuQYU-TF9oEKIh0ISccCXbMDu1XDqjOw5dxx3_kQfVXvqsT6tt5Tia0EWXl_5YN6kpWbY76blZs6dcCLHRSqnpr8tr0LWZ6ZjGKrJtnScFHWEy5UPTGqdFDcXlzwCFPci8NmO_JFM9Id1uww7jejqBO0lYpjJoJxfuQ8u3xo95u_vkVXLxr_1QVYU8PYNXDrYmTmzvWD75CbubP-8AMIfgibHEKaM-AVAR_U4Fs1RumDVA9saXqasZbMelBZjbw8i_KOO06OnPOTd69d_uF44m799hO0_NlZLciiRl7UeN_86GAz2f56Iy9Nz4z4cgSvlrzU_wM3c-epPz6FNHPn_PdfHv-G9su_Q-Yfweand9nMgchdJMZBok_3uahh_5GL03hsP8Fm4UIk7kQkhTsVSZF8diLTmkWj7Ysg7HRCHYcqDlTgB4q1Pc0oZyFltI3Szs3jz___dwAAAP__O_K6aIsEAAA=

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://newstime99.com/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 02:29:54.290 UTC
Times seen: 19321257

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: exemplarfederallithe.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 31:25:08:2F:B3:61:96:5D:01:5F:9A:9B:73:51:1B:55:A4:85:FD:D0
Valid from: Wed, 25 Feb 2026 07:12:18 GMT
Valid until: Tue, 26 May 2026 07:12:17 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_4RTvY8bxRvevSS_nwQFgiBqFykAxb6d3fGuh3QRHw3kgCRKEUVovvZu8Hp3s7NrO5YQHEEpqA7R0LF-7PsooggkEEqDkA8qJCRc4SLXRPwBCCkFFfKdpYOKKd6PeUbzPO8779wbV0dOCxVfvP1WNjJJwtfbLa_x4g2TqmxgG1euNYjX8i41bpg0pJcaw6Up-q-QgLa8lxpvaNnN1n2PeB7xSON1U-g4G64fozD5fUZazGtRv0XaFMPi37mtzsHyc1D9I-c5GDV_5nF8E0bOkPa-elXbbpnlF1_rVQkvswJ9tX897abZIEXvNIwLF3G6vzqNzM4d54s1ZOn-qgJk_emyAggzd9ZeeASR7q9kQvR3T5SKBDqFUE9j0J9BJzMYPoPM7sKoXx1AKlzZQNrbu5IVA37nBOVLdO6cffInzGDunH30PNLeg8uJGTauZklVmiy1GMY1zHAGszlDXs1QjtZgBoeQ5ccw6hdn_cmbSHvTDZtkMGpxQQuiPZ_5TeKFskmJZk0uCGuq0ItiKkkUtOlxi0w8A7drqKyLyrioYhdV7qKnFg3qdagkPAhjpmTkUU6p0sJjHd_zOJMRKrkNo3Ygi3sHudoqu33KpmVR6b0qlZayMb1fvZcnficMok4UjcniQppoGYesEwqhJQ2EYMQXmmoZqZhzn3aiOHh4k4TMIyG5GNIgCoPgYptREhBya--E5ZhjuuQYU-TF9oEKIh0ISccCXbMDu1XDqjOw5dxx3_kQfVXvqsT6tt5Tia0EWXl_5YN6kpWbY76blZs6dcCLHRSqnpr8tr0LWZ6ZjGKrJtnScFHWEy5UPTGqdFDcXlzwCFPci8NmO_JFM9Id1uww7jejqBO0lYpjJoJxfuQ8u3xo95u_vkVXLxr_1QVYU8PYNXDrYmTmzvWD75CbubP-8AMIfgibHEKaM-AVAR_U4Fs1RumDVA9saXqasZbMelBZjbw8i_KOO06OnPOTd69d_uF44m799hO0_NlZLciiRl7UeN_86GAz2f56Iy9Nz4z4cgSvlrzU_wM3c-epPz6FNHPn_PdfHv-G9su_Q-Yfweand9nMgchdJMZBok_3uahh_5GL03hsP8Fm4UIk7kQkhTsVSZF8diLTmkWj7Ysg7HRCHYcqDlTgB4q1Pc0oZyFltI3Szs3jz___dwAAAP__O_K6aIsEAAA= HTTP/1.1
Host: exemplarfederallithe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://newstime99.com/
Cookie: iprc_l+6a10b50dec25e3db492eb8e78ac1bfd3=5941311; iprc_l:5941311=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sat, 18 Apr 2026 14:19:52 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 4
Host: exemplarfederallithe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: fce0b7e944c20d83b054f25041e813d1
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

14:19:52.057 GET 200 img 79.5 KB 27 ms —

14:19:52.060 GET 200 img 0 B 102 ms 1 alerts

14:19:52.115 GET 200 img 86.6 KB 28 ms —

14:19:52.120 GET 200 img 0 B 101 ms 4 alerts

14:19:52.164 GET 200 script 40.0 KB 11 ms —

14:19:52.190 GET 200 script 8.3 KB 64 ms —

http://newstime99.com

Domain graph

Hostnames

Connections