WEBSITE ANALYSIS REPORT

http://psfh.link

02 Apr 2026 · 07:47:29.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

07:47:08.316 GET 200 document 11.9 KB 348 ms 1 alerts

07:47:08.726 GET 200 script 819 B 48 ms 1 alerts

07:47:09.088 GET 200 script 49.4 KB 873 ms 2 alerts

07:47:09.187 GET 200 img 535.1 KB 263 ms 1 alerts

07:47:09.722 GET 200 script 5.0 KB 674 ms 1 alerts

07:47:09.732 GET 200 xhr 40 B 243 ms —

07:47:09.933 GET 307 xhr 4.2 KB 657 ms 1 alerts

07:47:10.329 GET 200 xhr 4.2 KB 121 ms 1 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://realizationnewestfangs.com/watch.1698239264838.js?key=21b0e994d14a596d05cc4cc50311bbc7&kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D&refer=https%3A%2F%2Fpsfh.link%2F&tz=0&dev=e&res=14.3095&rb=&uuid=d6765633-e0bd-41c8-acf8-a6e10af05f7f%3A1%3A1&shu=f7eb510c38f01b06e49d03f8f91df63e3adadd0105a5d09e9823da90d148b5b83a8c390799323b9a6881580158453a4e027bad121713a71e6c57709d9ae024721007a398df2bc72a00bf3aa40f38a1451e8ce8fa060562ab1c97f8&pst=1775116090&rmtc=t&st1=6a812a5cb69d13c6325f7cb152833377&ps1=1775116030

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://psfh.link/

Resource information

File type: JavaScript source, ASCII text, with very long lines (3450)
MIME type: text/html
First seen (UTC): 02 Apr 2026 · 07:47:31.728 UTC
Last seen (UTC): 02 Apr 2026 · 07:47:31.728 UTC
Times seen: 1

Size: 4.2 KB (4326 bytes)
MD5: 90091fcf2559d72c09a2752b56c591eb
SHA1: 0ed10ac1b28ab5eda19e168cda1aab22c4268c7b
SHA256: 333edf63a0a3a986e330ca3f1eb3b5068fcda6a33f24e6c10dcdc8cf1435a00d

Certificate information

Issuer: Let's Encrypt · R12
Subject: realizationnewestfangs.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96
Valid from: Thu, 26 Feb 2026 23:39:43 GMT
Valid until: Wed, 27 May 2026 23:39:42 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.1698239264838.js?key=21b0e994d14a596d05cc4cc50311bbc7&kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D&refer=https%3A%2F%2Fpsfh.link%2F&tz=0&dev=e&res=14.3095&rb=&uuid=d6765633-e0bd-41c8-acf8-a6e10af05f7f%3A1%3A1&shu=f7eb510c38f01b06e49d03f8f91df63e3adadd0105a5d09e9823da90d148b5b83a8c390799323b9a6881580158453a4e027bad121713a71e6c57709d9ae024721007a398df2bc72a00bf3aa40f38a1451e8ce8fa060562ab1c97f8&pst=1775116090&rmtc=t&st1=6a812a5cb69d13c6325f7cb152833377&ps1=1775116030 HTTP/1.1
Host: realizationnewestfangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://psfh.link
Referer: https://psfh.link/
DNT: 1
Connection: keep-alive
Cookie: uid_id2=d6765633-e0bd-41c8-acf8-a6e10af05f7f:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5LArfrsrA9iDNX7CvkYrQavEvjhLS6U7kUeL4z6TEOg
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 02 Apr 2026 07:47:10 GMT
Content-Type: text/html
Content-Length: 3057
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://psfh.link
access-control-allow-credentials: true
vary: Accept-Encoding
set-cookie: uid_id2=d6765633-e0bd-41c8-acf8-a6e10af05f7f:1:1; expires=Thu, 09 Apr 2026 07:47:10 GMT; path=/; secure; SameSite=None
pdhtkv=true; expires=Fri, 03 Apr 2026 07:47:10 GMT; path=/; secure; SameSite=None
uncs=1; expires=Fri, 03 Apr 2026 07:47:10 GMT; path=/; secure; SameSite=None
pdhtkv23=true; expires=Fri, 03 Apr 2026 07:47:10 GMT; path=/; secure; SameSite=None
uncs23=1; expires=Fri, 03 Apr 2026 07:47:10 GMT; path=/; secure; SameSite=None
u_pl28759353=1; expires=Fri, 03 Apr 2026 07:47:10 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 23
Host: realizationnewestfangs.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9a8f6c9718353301a670c33deeb12530
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

07:47:10.496 GET 200 img 52.0 KB 273 ms —

07:47:10.499 GET 200 img 0 B 102 ms 1 alerts

http://psfh.link

Domain graph

Hostnames

Connections