WEBSITE ANALYSIS REPORT

http://www.lewdarcade.com/?m=1

02 Nov 2025 · 21:12:15.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.bp.blogspot.com1 captured requests
blogger.googleusercontent.com11 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com18 captured requests
cdnjs.cloudflare.com2 captured requests
creative-sb1.com8 captured requests
fertilehybridsstep.com6 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com9 captured requests
kettledroopingcontinuation.com19 captured requests
nodthunderthis.com1 captured requests
preferencenail.com2 captured requests
professionaltrafficmonitor.com6 captured requests
sentimentalrailing.com31 captured requests
torchfriendlypay.com2 captured requests
wayfarerorthodox.com5 captured requests
weirdopt.com1 captured requests
www.blogger.com1 captured requests
www.google.com8 captured requests
www.googletagmanager.com1 captured requests
www.gstatic.com5 captured requests
www.lewdarcade.com4 captured requests

Connections

www.google.com → fonts.gstatic.comLoads from2 captured connections
www.google.com → www.gstatic.comLoads from4 captured connections
www.lewdarcade.com → 4.bp.blogspot.comLoads from1 captured connections
www.lewdarcade.com → blogger.googleusercontent.comLoads from11 captured connections
www.lewdarcade.com → cdn.show-sb.comCalls1 captured connections
www.lewdarcade.com → cdn.storageimagedisplay.comLoads from18 captured connections
www.lewdarcade.com → cdnjs.cloudflare.comLoads from2 captured connections
www.lewdarcade.com → creative-sb1.comCalls3 captured connections
www.lewdarcade.com → creative-sb1.comLoads from5 captured connections
www.lewdarcade.com → fertilehybridsstep.comLoads from6 captured connections
www.lewdarcade.com → flushpersist.comLoads from2 captured connections
www.lewdarcade.com → fonts.googleapis.comLoads from2 captured connections
www.lewdarcade.com → fonts.gstatic.comLoads from7 captured connections
www.lewdarcade.com → kettledroopingcontinuation.comCalls7 captured connections
www.lewdarcade.com → kettledroopingcontinuation.comLoads from12 captured connections
www.lewdarcade.com → nodthunderthis.comLoads from1 captured connections
www.lewdarcade.com → preferencenail.comLoads from2 captured connections
www.lewdarcade.com → professionaltrafficmonitor.comCalls6 captured connections
www.lewdarcade.com → sentimentalrailing.comCalls6 captured connections
www.lewdarcade.com → sentimentalrailing.comLoads from25 captured connections
www.lewdarcade.com → torchfriendlypay.comLoads from2 captured connections
www.lewdarcade.com → wayfarerorthodox.comCalls2 captured connections
www.lewdarcade.com → wayfarerorthodox.comLoads from3 captured connections
www.lewdarcade.com → weirdopt.comLoads from1 captured connections
www.lewdarcade.com → www.blogger.comLoads from1 captured connections
www.lewdarcade.com → www.google.comCalls4 captured connections
www.lewdarcade.com → www.google.comEmbeds1 captured connections
www.lewdarcade.com → www.google.comLoads from1 captured connections
www.lewdarcade.com → www.googletagmanager.comLoads from1 captured connections
www.lewdarcade.com → www.gstatic.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:11:50.666 GET 200 document 211.1 KB 1148 ms —

21:11:51.659 GET 200 stylesheet 5.1 KB 309 ms —

21:11:51.661 GET 200 stylesheet 18.4 KB 91 ms —

21:11:51.663 GET 200 script 417.8 KB 315 ms —

21:11:51.668 GET No response script 0 B 247 ms 2 alerts

21:11:51.669 GET 200 img 4.3 KB 322 ms —

21:11:51.677 GET 200 script 42.3 KB 846 ms 2 alerts

21:11:51.680 GET 200 script 45.3 KB 836 ms 2 alerts

21:11:51.681 GET 200 script 1.0 KB 351 ms —

21:11:51.683 GET 200 script 104.2 KB 515 ms 2 alerts

21:11:51.685 GET 200 script 87.8 KB 66 ms —

21:11:51.687 GET 200 script 6.4 KB 34 ms —

21:11:51.688 GET 200 script 144.3 KB 200 ms —

21:11:52.189 GET 200 script 45.3 KB 123 ms 2 alerts

21:11:52.191 GET 200 font 41.2 KB 263 ms —

21:11:52.192 GET 200 font 170.2 KB 193 ms —

21:11:52.194 GET 200 font 41.2 KB 256 ms —

21:11:52.195 GET 200 font 41.2 KB 339 ms —

21:11:52.243 GET 200 script 45.3 KB 99 ms 2 alerts

21:11:52.248 GET 200 script 45.3 KB 100 ms 2 alerts

21:11:52.255 GET 200 script 6.3 KB 716 ms 2 alerts

21:11:52.264 GET 200 font 41.2 KB 42 ms —

21:11:52.382 GET 200 xhr 40 B 232 ms —

21:11:52.398 GET 200 img 0 B 718 ms 3 alerts

21:11:52.404 GET 200 script 6.3 KB 707 ms 3 alerts

21:11:52.405 GET 200 script 83.4 KB 154 ms 3 alerts

21:11:52.416 GET 200 xhr 40 B 224 ms —

21:11:52.454 GET 200 script 0 B 158 ms 2 alerts

21:11:52.455 GET 200 xhr 40 B 52 ms —

21:11:52.459 GET 200 xhr 15.1 KB 784 ms 2 alerts

21:11:52.460 GET 200 script 83.0 KB 525 ms 2 alerts

21:11:52.463 GET 200 script 6.3 KB 431 ms 4 alerts

21:11:52.471 GET 200 xhr 40 B 36 ms —

21:11:52.513 GET 200 xhr 40 B 22 ms —

21:11:52.598 GET 200 script 6.3 KB 591 ms 4 alerts

21:11:52.717 GET 200 xhr 40 B 21 ms —

21:11:52.719 GET 200 script 6.3 KB 96 ms 2 alerts

21:11:52.842 GET 200 xhr 15.1 KB 219 ms 2 alerts

21:11:52.856 GET 200 xhr 15.2 KB 688 ms 2 alerts

21:11:52.859 GET 200 xhr 15.2 KB 570 ms 2 alerts

21:11:53.021 GET 200 xhr 15.8 KB 147 ms 2 alerts

21:11:53.023 GET 307 xhr 4.5 KB 107 ms 2 alerts

21:11:53.024 GET 307 xhr 4.5 KB 106 ms 4 alerts

21:11:53.025 GET 307 xhr 4.5 KB 123 ms 4 alerts

21:11:53.028 GET 307 xhr 4.7 KB 664 ms 4 alerts

21:11:53.033 GET 200 xhr 16.4 KB 150 ms 2 alerts

21:11:53.060 GET 200 img 0 B 538 ms 2 alerts

21:11:53.063 GET 200 img 0 B 193 ms 2 alerts

21:11:53.065 GET 200 img 0 B 226 ms 2 alerts

21:11:53.069 GET 200 img 0 B 216 ms 2 alerts

Transaction #32

Request / response

URL

GET HTTPS

https://sentimentalrailing.com/ren.gif?sid=H4sIAAAAAAAC_1RSwW8bxReezc_6gcoB2iLEcbkBQs7au3ZsegBCCYoISUiDckAcZmfGzpDxzjKz63V8ioiEKk5GcAAubD4njYCqgjstlcOlqkTVPRGJ5sJfgJB6RptYCjxpvvfefHP43vfm0730hPhI6fHqu3oolaKzjarnvrghI64z6y6vuzWv6l1xN2TUDK64gxJM_9WaH1S9l9y3BdvSs3Wv5nk1r-YuSCM6ejB7ykLGN9u1aturBvVqrRFgYP7b29SBpQ54_4RcguTF0392PoBkE0S9H68Ku5Xo-JW3eqmiiTbo88P3o61IZxF652XHOOhEh9PX0LYg5KsZ6OhwOgF0f7-cAKEsyMxzjxBGh1OZCPsHZ0pDBREh5E8h608g1ASSTsD0LiR_SADGsbyCqHdjWZuMbp-xtGQLUnn8N2RWkMqjZxH1bs0rOXCvaZUmUkcWg04OOZhAdieI0yMkQwcyOwJLPoHkv5HZx0uIevsrVmlInp9OLzsTUOsgLY90kHYcpLGDHj92A68VsBr1m502Z3NeQIOAi9Brt-qeR9tsDikrZY2QxCMwNQIzO4jNDrbk5w8bl2DSu7CbOSx3YJOCOO_toM9zZIIgswQZJcgkQZYQZP38gCtbt_kNrmwa1qa5Ps1-PtZJd48e6KQrIgJqRjA835fxx3YXLPnfeNixfKxLoGGSj2nI8734hFwsjXPSJx9gSxy7rOGzdsufY2GrEbI6bc0126HfpK1mK2i0fAErc0g7c-rJUBbk9S9cxLIgL1x8gJAewaojMPkMaFoDzXLQzRzD6JYSGaeGUS6qTPfAdY44qSDZdvbUCbk8Xlufv3u6wQ9__xmC3SfTADM5YpPjI_krQVddH6_pjOyv6cySn1biRPbkkJbbvZbQRPz_-3fEdqYNX7xqR9-9wUqiLG-uC5ss0YjLqGvJD_OSc2EWtGGC3F60GyJcTe3mfGqiNF5afXNhsRcbYa3U0QRUFuTCX5-ByYJcvvPt6c9tvPwHWLwDG5_rtJogjCtQkkCJ83sa5rD_6sPzes9eR9dUQJNdRL0cfZOjr3JQNYJNL4yT2Nx_7d7XZXyDUFXGoTKV_VAZ9WXp0-0SfinhzpltVh67jXroN1utpug0ecfnft3n7YYn2gFtN4N20EBiC_nEvef_CQAA__-UPFViawQAAA==

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://www.lewdarcade.com/?m=1

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 06:29:56.727 UTC
Times seen: 19325208

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: sentimentalrailing.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 9C:28:E4:24:2B:A1:07:8B:87:20:DD:E9:14:7F:66:DA:A8:FC:28:95
Valid from: Wed, 15 Oct 2025 08:53:54 GMT
Valid until: Tue, 13 Jan 2026 08:53:53 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1RSwW8bxReezc_6gcoB2iLEcbkBQs7au3ZsegBCCYoISUiDckAcZmfGzpDxzjKz63V8ioiEKk5GcAAubD4njYCqgjstlcOlqkTVPRGJ5sJfgJB6RptYCjxpvvfefHP43vfm0730hPhI6fHqu3oolaKzjarnvrghI64z6y6vuzWv6l1xN2TUDK64gxJM_9WaH1S9l9y3BdvSs3Wv5nk1r-YuSCM6ejB7ykLGN9u1aturBvVqrRFgYP7b29SBpQ54_4RcguTF0392PoBkE0S9H68Ku5Xo-JW3eqmiiTbo88P3o61IZxF652XHOOhEh9PX0LYg5KsZ6OhwOgF0f7-cAKEsyMxzjxBGh1OZCPsHZ0pDBREh5E8h608g1ASSTsD0LiR_SADGsbyCqHdjWZuMbp-xtGQLUnn8N2RWkMqjZxH1bs0rOXCvaZUmUkcWg04OOZhAdieI0yMkQwcyOwJLPoHkv5HZx0uIevsrVmlInp9OLzsTUOsgLY90kHYcpLGDHj92A68VsBr1m502Z3NeQIOAi9Brt-qeR9tsDikrZY2QxCMwNQIzO4jNDrbk5w8bl2DSu7CbOSx3YJOCOO_toM9zZIIgswQZJcgkQZYQZP38gCtbt_kNrmwa1qa5Ps1-PtZJd48e6KQrIgJqRjA835fxx3YXLPnfeNixfKxLoGGSj2nI8734hFwsjXPSJx9gSxy7rOGzdsufY2GrEbI6bc0126HfpK1mK2i0fAErc0g7c-rJUBbk9S9cxLIgL1x8gJAewaojMPkMaFoDzXLQzRzD6JYSGaeGUS6qTPfAdY44qSDZdvbUCbk8Xlufv3u6wQ9__xmC3SfTADM5YpPjI_krQVddH6_pjOyv6cySn1biRPbkkJbbvZbQRPz_-3fEdqYNX7xqR9-9wUqiLG-uC5ss0YjLqGvJD_OSc2EWtGGC3F60GyJcTe3mfGqiNF5afXNhsRcbYa3U0QRUFuTCX5-ByYJcvvPt6c9tvPwHWLwDG5_rtJogjCtQkkCJ83sa5rD_6sPzes9eR9dUQJNdRL0cfZOjr3JQNYJNL4yT2Nx_7d7XZXyDUFXGoTKV_VAZ9WXp0-0SfinhzpltVh67jXroN1utpug0ecfnft3n7YYn2gFtN4N20EBiC_nEvef_CQAA__-UPFViawQAAA== HTTP/1.1
Host: sentimentalrailing.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.lewdarcade.com/
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl24447183=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 02 Nov 2025 21:11:53 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 0
Host: sentimentalrailing.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2e734a262b71afc4f2dddcc8822396eb
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

http://www.lewdarcade.com/?m=1

Domain graph

Hostnames

Connections

Network requests

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.lewdarcade.com/?m=1

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.lewdarcade.com/?m=1

Domain graph

Network requests