WEBSITE ANALYSIS REPORT

http://a60ij4492r.pages.dev/

23 May 2026 · 12:19:05.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a60ij4492r.pages.dev2 captured requests
cdn.conditionfuneral.com8 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com16 captured requests
exemplarfederallithe.com19 captured requests
fizzyacerbitymellow.com18 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
furiousexpansion.com3 captured requests
go.realus.lt2 captured requests
kettledroopingcontinuation.com1 captured requests
preferencenail.com2 captured requests
protrafficinspector.com4 captured requests
racingorchestra.com5 captured requests
zoologyfibre.com9 captured requests

Connections

a60ij4492r.pages.dev → cdn.conditionfuneral.comCalls3 captured connections
a60ij4492r.pages.dev → cdn.conditionfuneral.comLoads from5 captured connections
a60ij4492r.pages.dev → cdn.show-creative1.comCalls1 captured connections
a60ij4492r.pages.dev → cdn.storageimagedisplay.comLoads from16 captured connections
a60ij4492r.pages.dev → exemplarfederallithe.comCalls2 captured connections
a60ij4492r.pages.dev → exemplarfederallithe.comLoads from17 captured connections
a60ij4492r.pages.dev → fizzyacerbitymellow.comCalls2 captured connections
a60ij4492r.pages.dev → fizzyacerbitymellow.comLoads from16 captured connections
a60ij4492r.pages.dev → flushpersist.comLoads from2 captured connections
a60ij4492r.pages.dev → fonts.googleapis.comLoads from1 captured connections
a60ij4492r.pages.dev → fonts.gstatic.comLoads from2 captured connections
a60ij4492r.pages.dev → furiousexpansion.comCalls2 captured connections
a60ij4492r.pages.dev → furiousexpansion.comLoads from1 captured connections
a60ij4492r.pages.dev → go.realus.ltLoads from2 captured connections
a60ij4492r.pages.dev → kettledroopingcontinuation.comLoads from1 captured connections
a60ij4492r.pages.dev → preferencenail.comLoads from2 captured connections
a60ij4492r.pages.dev → protrafficinspector.comCalls4 captured connections
a60ij4492r.pages.dev → racingorchestra.comLoads from5 captured connections
a60ij4492r.pages.dev → zoologyfibre.comCalls1 captured connections
a60ij4492r.pages.dev → zoologyfibre.comLoads from8 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

12:18:42.543 GET 200 document 5.0 KB 309 ms —

12:18:43.021 GET 200 script 47.0 KB 762 ms 2 alerts

12:18:43.024 GET 200 script 47.0 KB 769 ms 2 alerts

12:18:43.026 GET 200 script 47.0 KB 767 ms 2 alerts

12:18:43.029 GET 200 script 46.9 KB 743 ms 2 alerts

12:18:43.034 GET 200 script 90.7 KB 748 ms 2 alerts

12:18:43.089 GET No response script 0 B 0 ms —

12:18:43.537 GET 200 xhr 40 B 336 ms —

12:18:43.538 GET 200 xhr 13.8 KB 692 ms —

12:18:43.546 GET 200 xhr 40 B 283 ms —

12:18:43.548 GET 200 xhr 0 B 681 ms 1 alerts

12:18:43.556 GET 200 xhr 40 B 252 ms —

12:18:43.557 GET 200 xhr 13.8 KB 672 ms 1 alerts

12:18:43.561 GET 200 script 101.3 KB 479 ms 1 alerts

12:18:43.564 GET 200 img 0 B 389 ms 1 alerts

12:18:43.569 GET 200 script 83.4 KB 100 ms 2 alerts

12:18:43.571 GET 200 xhr 40 B 134 ms —

12:18:43.572 GET 200 script 5.0 KB 376 ms 2 alerts

12:18:43.574 GET No response script 0 B 0 ms —

12:18:44.120 GET 200 img 0 B 102 ms —

12:18:44.123 GET 200 img 0 B 653 ms —

12:18:44.127 GET 200 img 0 B 649 ms —

12:18:44.130 GET 200 img 0 B 172 ms —

12:18:44.133 GET 200 img 25.4 KB 113 ms —

12:18:44.135 GET 200 img 27.1 KB 81 ms —

12:18:44.137 GET 200 img 17.3 KB 165 ms —

12:18:44.138 GET 200 img 20.7 KB 138 ms —

12:18:44.140 GET 200 img 0 B 391 ms —

12:18:44.142 GET 200 img 0 B 392 ms —

12:18:44.144 GET 200 img 0 B 257 ms —

12:18:44.145 GET 200 img 0 B 354 ms —

12:18:44.147 GET 200 img 0 B 98 ms 1 alerts

12:18:44.148 GET 200 img 0 B 369 ms 1 alerts

12:18:44.149 GET 200 img 0 B 453 ms 1 alerts

12:18:44.150 GET 200 img 0 B 171 ms 1 alerts

Transaction #32

Request / response

URL

GET HTTPS

https://exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1SSvW8cRRjGZ52DhgKFj9QroAApPs9-3PoWF0gRXwXYkASlQBTztWbiuZ31zu7d5QrkEETtggKJZv2cHQsJUKhp0JkOCSlb4SJu-AOQQIpSojufZDLSvB_zjka_533n64P6jHRRs9OPPrQTbQxb63Wp__otnUs7cv7mTT-gXbrh39J5Em_447kph28GUdylb_jvKbFj10IaUBrQwH9Xlyqz47VFFbr4IQ26Ke3GYTfoxRiXT-eu9uCYBzk8Iy9Ay_b5v7JPocUM-eDB28rtVLa4-s6gNqyyJYby-JN8J7ejHIOLMCs9ZPnx8jasawn5dgU2P14qgB0ezhWA65asXHkEnh8vMcGHR-ek3EDl4PI5jIYzKDODZjMIew9aPiSAkNjcQj64v2nLEbtzXmXzaks6j_-FHrWk8-gl5IOfrhk99m9YU1fa5g7jrIEez6C3ZyjqE1STFejRCUT1JbT8g6w9_gD54HDLGQstm4V6nc3AnId6vrWHOvNQFx4G8tSPaT8WAYuSLJVincYsjqXiNO2HlLJUrKMWd6HlPkS5h6Lcw47eh5MeXNUS7-M9DGVzJI0LXXNfGlfzYOnDpY-aqa22D9iRrbZVTsDKfZSyOdTFrrsHUV2aTjInp3ZuGK-aKeOymWpZEZS7p6_RIFW9WCSrNA7V6nqQylUWSbEaZTETmQqzJBOHmavq5qA4I5cXHfz7rS-wo059KcQ65YzzIO3J9SxIVNBPGO3RMFUqiPpwuoF2K4vmTHRLXvbeRzEf6z8WnJ3AmRMIfQmsDsBGDdjnDSb5j8yYUjmmuk5XCtI2KKoOqjvegTkjL06v37z264LjavI9lPidLBdE2aAoG9zWvxFsm7s_bxWVHugJm4_2RsUq9SyYfrj1BEK35Jknryz-2JXrXYhiD664eMlZAl50YDSBURfnjDdw_8v5RXzgvsJ22QE3nSk3ZeeQm9J805LP_vxlTvqgJRvt7jmz06d-L-RR0u8nKktkFskojGTaoyqNWZrEadxD5drbl7979b8AAAD__9aZ0WrwAwAA

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://a60ij4492r.pages.dev/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 22:29:55.418 UTC
Times seen: 19317673

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: exemplarfederallithe.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 4D:6E:59:1A:16:B1:8F:5E:FE:37:10:51:89:46:9F:30:99:AB:85:30
Valid from: Sun, 26 Apr 2026 21:09:29 GMT
Valid until: Sat, 25 Jul 2026 21:09:28 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1SSvW8cRRjGZ52DhgKFj9QroAApPs9-3PoWF0gRXwXYkASlQBTztWbiuZ31zu7d5QrkEETtggKJZv2cHQsJUKhp0JkOCSlb4SJu-AOQQIpSojufZDLSvB_zjka_533n64P6jHRRs9OPPrQTbQxb63Wp__otnUs7cv7mTT-gXbrh39J5Em_447kph28GUdylb_jvKbFj10IaUBrQwH9Xlyqz47VFFbr4IQ26Ke3GYTfoxRiXT-eu9uCYBzk8Iy9Ay_b5v7JPocUM-eDB28rtVLa4-s6gNqyyJYby-JN8J7ejHIOLMCs9ZPnx8jasawn5dgU2P14qgB0ezhWA65asXHkEnh8vMcGHR-ek3EDl4PI5jIYzKDODZjMIew9aPiSAkNjcQj64v2nLEbtzXmXzaks6j_-FHrWk8-gl5IOfrhk99m9YU1fa5g7jrIEez6C3ZyjqE1STFejRCUT1JbT8g6w9_gD54HDLGQstm4V6nc3AnId6vrWHOvNQFx4G8tSPaT8WAYuSLJVincYsjqXiNO2HlLJUrKMWd6HlPkS5h6Lcw47eh5MeXNUS7-M9DGVzJI0LXXNfGlfzYOnDpY-aqa22D9iRrbZVTsDKfZSyOdTFrrsHUV2aTjInp3ZuGK-aKeOymWpZEZS7p6_RIFW9WCSrNA7V6nqQylUWSbEaZTETmQqzJBOHmavq5qA4I5cXHfz7rS-wo059KcQ65YzzIO3J9SxIVNBPGO3RMFUqiPpwuoF2K4vmTHRLXvbeRzEf6z8WnJ3AmRMIfQmsDsBGDdjnDSb5j8yYUjmmuk5XCtI2KKoOqjvegTkjL06v37z264LjavI9lPidLBdE2aAoG9zWvxFsm7s_bxWVHugJm4_2RsUq9SyYfrj1BEK35Jknryz-2JXrXYhiD664eMlZAl50YDSBURfnjDdw_8v5RXzgvsJ22QE3nSk3ZeeQm9J805LP_vxlTvqgJRvt7jmz06d-L-RR0u8nKktkFskojGTaoyqNWZrEadxD5drbl7979b8AAAD__9aZ0WrwAwAA HTTP/1.1
Host: exemplarfederallithe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://a60ij4492r.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15679358=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 23 May 2026 12:18:44 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,X-OperaMini-Phone-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-Device-User-Agent,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent
x-envoy-upstream-service-time: 0
Host: exemplarfederallithe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 56fa8df24ab03596e9fa16e33db8ea96
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

12:18:44.151 GET 200 img 79.4 KB 99 ms —

12:18:44.152 GET 200 img 20.1 KB 71 ms —

12:18:44.153 GET 200 img 11.8 KB 50 ms —

12:18:44.154 GET 200 img 20.4 KB 90 ms —

12:18:44.155 GET 200 img 0 B 581 ms 1 alerts

12:18:44.160 GET 200 img 0 B 440 ms 1 alerts

12:18:44.162 GET 200 img 0 B 100 ms 1 alerts

12:18:44.163 GET 200 img 0 B 255 ms 1 alerts

12:18:44.164 GET 200 xhr 15.1 KB 605 ms —

12:18:44.165 GET 200 xhr 0 B 104 ms 1 alerts

12:18:44.166 GET 200 xhr 15.0 KB 156 ms 1 alerts

12:18:44.168 GET 200 xhr 5.0 KB 200 ms 2 alerts

12:18:44.177 GET 200 img 0 B 448 ms 3 alerts

12:18:44.178 GET 200 script 83.4 KB 31 ms 2 alerts

12:18:44.342 GET 200 img 0 B 102 ms 1 alerts

http://a60ij4492r.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://a60ij4492r.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://a60ij4492r.pages.dev/

Domain graph

Network requests