WEBSITE ANALYSIS REPORT

http://www.evicgame232.blogspot.com/

24 Jul 2026 · 16:44:39.000 UTCpublic

Report tags
Submit tags: openphish

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.storageimagedisplay.com1 captured requests
d15skjf5hy9xr6.cloudfront.net1 captured requests
d1cdbd1x576ga0.cloudfront.net5 captured requests
d1g1lhd4vferpn.cloudfront.net1 captured requests
de6jvomfbm0af.cloudfront.net1 captured requests
evicgame232.blogspot.com4 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
i.postimg.cc2 captured requests
images.rbxcdn.com2 captured requests
protrafficinspector.com1 captured requests
realizationnewestfangs.com1 captured requests
www.evicgame232.blogspot.com1 captured requests
www.googletagmanager.com4 captured requests
www.highperformanceformat.com1 captured requests
zoologyfibre.com5 captured requests
zr-dqb.pages.dev1 captured requests

Connections

evicgame232.blogspot.com → cdn.storageimagedisplay.comLoads from1 captured connections
evicgame232.blogspot.com → d15skjf5hy9xr6.cloudfront.netLoads from1 captured connections
evicgame232.blogspot.com → d1cdbd1x576ga0.cloudfront.netLoads from5 captured connections
evicgame232.blogspot.com → d1g1lhd4vferpn.cloudfront.netLoads from1 captured connections
evicgame232.blogspot.com → de6jvomfbm0af.cloudfront.netLoads from1 captured connections
evicgame232.blogspot.com → fonts.googleapis.comLoads from1 captured connections
evicgame232.blogspot.com → fonts.gstatic.comLoads from2 captured connections
evicgame232.blogspot.com → i.postimg.ccLoads from2 captured connections
evicgame232.blogspot.com → images.rbxcdn.comLoads from2 captured connections
evicgame232.blogspot.com → protrafficinspector.comCalls1 captured connections
evicgame232.blogspot.com → realizationnewestfangs.comCalls1 captured connections
evicgame232.blogspot.com → www.googletagmanager.comLoads from4 captured connections
evicgame232.blogspot.com → www.highperformanceformat.comLoads from1 captured connections
evicgame232.blogspot.com → zoologyfibre.comCalls2 captured connections
evicgame232.blogspot.com → zoologyfibre.comLoads from3 captured connections
evicgame232.blogspot.com → zr-dqb.pages.devLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:44:11.750 GET No response document 0 B 0 ms 3 alerts

16:44:11.864 GET 200 document 18.5 KB 354 ms 3 alerts

16:44:12.604 GET 200 stylesheet 13.0 KB 83 ms —

16:44:12.607 GET 200 script 26.7 KB 271 ms —

16:44:12.608 GET 200 script 6.4 KB 17 ms 3 alerts

16:44:12.611 GET 200 script 477.0 KB 126 ms —

16:44:12.612 GET 200 script 26.7 KB 202 ms 2 alerts

16:44:12.615 GET 200 script 361.1 KB 344 ms —

16:44:12.616 GET 200 script 50.2 KB 474 ms 4 alerts

16:44:12.622 GET 200 img 27.4 KB 1343 ms —

16:44:12.626 GET 200 img 23.1 KB 88 ms 1 alerts

16:44:12.628 GET 200 img 922.1 KB 3061 ms —

16:44:12.629 GET 404 img 1.8 KB 647 ms 3 alerts

16:44:12.630 GET 404 img 1.8 KB 649 ms 3 alerts

16:44:12.747 GET 200 font 28.7 KB 60 ms —

16:44:12.894 GET 200 stylesheet 6.0 KB 209 ms 1 alerts

16:44:12.909 GET 200 img 192.3 KB 250 ms —

16:44:12.920 GET 200 font 13.0 KB 17 ms —

16:44:13.103 GET 200 script 5.0 KB 392 ms —

16:44:13.109 GET 200 xhr 40 B 95 ms —

16:44:13.112 GET 200 script 30.4 KB 390 ms —

16:44:13.183 GET 200 script 429.8 KB 69 ms —

16:44:13.202 GET 200 script 477.0 KB 70 ms —

16:44:13.220 GET 307 xhr 0 B 377 ms —

16:44:13.520 GET 200 xhr 0 B 485 ms 1 alerts

Transaction #33

Request / response

URL

GET HTTPS

https://realizationnewestfangs.com/pop.json?key=f58b08c81f9baed4b1382509b1b6cb18&uuid=ed61fae6-1136-49dc-9d9e-7f6bd45caefd%3A2%3A1

IP / ASN

172.240.108.68

AS7979 · SERVERS-COM

Requested by: https://evicgame232.blogspot.com/

Resource information

File type: Not recorded
MIME type: application/json
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 12:29:43.415 UTC
Times seen: 19306850

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: realizationnewestfangs.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: FF:25:5D:E6:54:B9:D0:3D:09:93:4C:6D:F1:36:1E:6B:76:95:60:03
Valid from: Sat, 27 Jun 2026 02:15:34 GMT
Valid until: Fri, 25 Sep 2026 02:15:33 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /pop.json?key=f58b08c81f9baed4b1382509b1b6cb18&uuid=ed61fae6-1136-49dc-9d9e-7f6bd45caefd%3A2%3A1 HTTP/1.1
Host: realizationnewestfangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://evicgame232.blogspot.com
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://evicgame232.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Fri, 24 Jul 2026 16:44:13 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform
access-control-allow-credentials: true
access-control-allow-origin: https://evicgame232.blogspot.com
set-cookie: uid_id2=ed61fae6-1136-49dc-9d9e-7f6bd45caefd:2:1; Path=/; Expires=Fri, 31 Jul 2026 16:44:13 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 22
Host: realizationnewestfangs.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 3a33360364c3f7bd7d6af1ac2a7a9535
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

16:44:13.602 GET 200 xhr 4.0 KB 134 ms —

16:44:13.778 GET 200 img 38.8 KB 186 ms —

16:44:13.779 GET 200 img 0 B 0 ms —

16:44:14.124 GET 200 img 8.5 KB 11 ms —

16:44:14.324 GET 200 stylesheet 1.8 KB 188 ms —

16:44:16.334 GET 200 script 72 B 187 ms —

16:44:16.356 GET 200 script 72 B 185 ms —

16:44:31.529 GET 200 script 72 B 185 ms —

16:44:31.548 GET 200 script 72 B 187 ms —

http://www.evicgame232.blogspot.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #33

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.evicgame232.blogspot.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #33

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.evicgame232.blogspot.com/

Domain graph

Network requests