WEBSITE ANALYSIS REPORT

http://www.scan-vf.net/one_piece/chapitre-1170

31 Dec 2025 · 09:01:23.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

bowlingprosperhalfbrother.com1 captured requests
cdn.storageimagedisplay.com1 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com5 captured requests
imp9.bidgear.com1 captured requests
platform.bidgear.com1 captured requests
preferencenail.com1 captured requests
protrafficinspector.com1 captured requests
realizationnewestfangs.com2 captured requests
static.cloudflareinsights.com1 captured requests
trampsalmonsentiments.com3 captured requests
walnutneckvariability.com1 captured requests
weirdopt.com1 captured requests
www.google.com2 captured requests
www.googletagmanager.com1 captured requests
www.gstatic.com4 captured requests
www.scan-vf.net32 captured requests

Connections

www.google.com → fonts.gstatic.comLoads from1 captured connections
www.google.com → www.gstatic.comLoads from3 captured connections
www.scan-vf.net → bowlingprosperhalfbrother.comLoads from1 captured connections
www.scan-vf.net → cdn.storageimagedisplay.comLoads from1 captured connections
www.scan-vf.net → flushpersist.comLoads from1 captured connections
www.scan-vf.net → fonts.googleapis.comLoads from1 captured connections
www.scan-vf.net → fonts.gstatic.comLoads from4 captured connections
www.scan-vf.net → imp9.bidgear.comLoads from1 captured connections
www.scan-vf.net → platform.bidgear.comLoads from1 captured connections
www.scan-vf.net → preferencenail.comLoads from1 captured connections
www.scan-vf.net → protrafficinspector.comCalls1 captured connections
www.scan-vf.net → realizationnewestfangs.comLoads from2 captured connections
www.scan-vf.net → static.cloudflareinsights.comLoads from1 captured connections
www.scan-vf.net → trampsalmonsentiments.comCalls1 captured connections
www.scan-vf.net → trampsalmonsentiments.comLoads from2 captured connections
www.scan-vf.net → walnutneckvariability.comLoads from1 captured connections
www.scan-vf.net → weirdopt.comLoads from1 captured connections
www.scan-vf.net → www.google.comEmbeds1 captured connections
www.scan-vf.net → www.google.comLoads from1 captured connections
www.scan-vf.net → www.googletagmanager.comLoads from1 captured connections
www.scan-vf.net → www.gstatic.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:00:59.805 GET 200 document 229.9 KB 261 ms —

09:01:00.283 GET 200 stylesheet 122.6 KB 147 ms —

09:01:00.286 GET 200 stylesheet 13.3 KB 119 ms —

09:01:00.288 GET 200 stylesheet 21.5 KB 122 ms —

09:01:00.290 GET 200 stylesheet 4.6 KB 115 ms —

09:01:00.296 GET 200 script 94.1 KB 150 ms —

09:01:00.298 GET 200 script 34.6 KB 110 ms —

09:01:00.299 GET 200 script 16.9 KB 109 ms —

09:01:00.300 GET 200 script 1.3 KB 115 ms —

09:01:00.302 GET 200 script 23.1 KB 113 ms —

09:01:00.303 GET 200 script 104.4 KB 957 ms 3 alerts

09:01:00.305 GET 200 script 423.4 KB 357 ms —

09:01:00.306 GET 200 img 416.7 KB 241 ms —

09:01:00.307 GET 200 script 1017 B 346 ms —

09:01:00.308 GET 200 script 19.5 KB 32 ms —

09:01:00.423 GET 200 stylesheet 10.5 KB 316 ms —

09:01:00.950 GET 200 img 0 B 759 ms 4 alerts

09:01:00.954 GET 200 script 6.3 KB 732 ms 4 alerts

09:01:00.956 GET 200 script 83.4 KB 166 ms 3 alerts

09:01:00.957 GET 200 xhr 40 B 241 ms —

09:01:00.967 GET 200 script 6.3 KB 188 ms —

09:01:01.000 GET 200 font 39.2 KB 236 ms —

09:01:01.004 GET 200 font 63.9 KB 96 ms —

09:01:01.017 GET 200 font 19.9 KB 267 ms —

09:01:01.244 GET 200 img 654.5 KB 481 ms —

09:01:01.245 GET 200 img 625.9 KB 520 ms —

09:01:01.246 GET 200 img 632.8 KB 558 ms —

09:01:01.248 GET 200 img 610.8 KB 548 ms —

09:01:01.249 GET 200 img 726.5 KB 576 ms —

09:01:01.250 GET 200 img 616.2 KB 376 ms —

09:01:01.252 GET 200 img 634.8 KB 455 ms —

09:01:01.255 GET 200 img 564.0 KB 430 ms —

09:01:01.256 GET 200 img 681.1 KB 482 ms —

09:01:01.258 GET 200 img 464.3 KB 396 ms —

09:01:01.259 GET 200 img 1.18 MB 615 ms —

09:01:01.260 GET 200 img 533.3 KB 490 ms —

09:01:01.261 GET 200 img 606.3 KB 517 ms —

09:01:01.263 GET 200 img 1.31 MB 634 ms —

09:01:01.264 GET 200 script 0 B 162 ms 3 alerts

09:01:01.265 GET 302 script 10.1 KB 12 ms —

09:01:01.347 GET 200 img 0 B 140 ms —

09:01:01.348 GET 200 script 42.7 KB 939 ms 3 alerts

09:01:01.350 GET 200 script 10.1 KB 12 ms —

09:01:01.351 GET 200 font 39.7 KB 15 ms —

09:01:01.485 POST 204 xhr 0 B 5 ms —

09:01:01.572 POST 200 xhr 0 B 22 ms —

09:01:01.943 GET 200 script 829.6 KB 233 ms —

09:01:01.947 GET 200 img 2.4 KB 36 ms —

09:01:02.081 GET 200 xhr 3.9 KB 732 ms 2 alerts

Transaction #45

Request / response

URL

GET HTTPS

https://trampsalmonsentiments.com/ntv.json?key=4fd826c8eaf6e395e27c31555c37cd04&vstc=1&uuid=1bcc2f40-7b62-431d-849f-b8b9cb9fcc15%3A2%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D&rb=

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://www.scan-vf.net/one_piece/chapitre-1170

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 31 Dec 2025 · 09:01:32.410 UTC
Last seen (UTC): 31 Dec 2025 · 09:01:32.410 UTC
Times seen: 1

Size: 3.9 KB (4020 bytes)
MD5: 8532346af86abe999091569d6d2a0a53
SHA1: 6e81142667b627e445490618f42b444cc22ea01b
SHA256: 7653c7e6c122ff161bf611bb17d4e0e484d7bea5829b62897b69712262981ca4

Certificate information

Issuer: Let's Encrypt · R13
Subject: trampsalmonsentiments.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: FF:CC:36:8C:9B:5D:DF:36:56:3B:B1:FB:CC:AA:BD:5E:D8:B7:45:AE
Valid from: Mon, 15 Dec 2025 08:35:59 GMT
Valid until: Sun, 15 Mar 2026 08:35:58 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ntv.json?key=4fd826c8eaf6e395e27c31555c37cd04&vstc=1&uuid=1bcc2f40-7b62-431d-849f-b8b9cb9fcc15%3A2%3A1&custom=%7B%22d37e3bc4%22%3A%22b%22%7D&rb= HTTP/1.1
Host: trampsalmonsentiments.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.scan-vf.net
DNT: 1
Connection: keep-alive
Referer: https://www.scan-vf.net/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 31 Dec 2025 09:01:02 GMT
Content-Type: application/json
Content-Length: 4045
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://www.scan-vf.net
access-control-allow-credentials: true
vary: Accept-Encoding
set-cookie: uid_id2=1bcc2f40-7b62-431d-849f-b8b9cb9fcc15:2:1; expires=Wed, 07 Jan 2026 09:01:02 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Thu, 01 Jan 2026 09:01:02 GMT; path=/; secure; SameSite=None
uncs=1; expires=Thu, 01 Jan 2026 09:01:02 GMT; path=/; secure; SameSite=None
pdhtkv49=true; expires=Thu, 01 Jan 2026 09:01:02 GMT; path=/; secure; SameSite=None
uncs49=1; expires=Thu, 01 Jan 2026 09:01:02 GMT; path=/; secure; SameSite=None
u_pl15385831=1; expires=Thu, 01 Jan 2026 09:01:02 GMT; path=/; secure; SameSite=None
nlec4fd826c8eaf6e395e27c31555c37cd04=[5941311]; expires=Wed, 31 Dec 2025 09:01:07 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 23
Host: trampsalmonsentiments.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 07c8ad191f085b24c542c3f0340894a6
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

09:01:02.321 GET 200 subdocument 16.5 KB 61 ms —

http://www.scan-vf.net/one_piece/chapitre-1170

Domain graph

Hostnames

Connections

Network requests

Transaction #45

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.scan-vf.net/one_piece/chapitre-1170

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #45

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.scan-vf.net/one_piece/chapitre-1170

Domain graph

Network requests