WEBSITE ANALYSIS REPORT

https://microsoft-flight-simulator-free-download-for-andro.pages.dev

27 Apr 2026 · 02:46:06.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:45:44.002 GET 200 document 30.0 KB 239 ms —

02:45:44.363 GET 404 img 7.2 KB 135 ms —

02:45:44.365 GET 200 script 46.7 KB 751 ms 3 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://normallydemandedalter.com/fedef41719f1d9862355f0372b1f5afc/invoke.js

IP / ASN

172.240.127.234

AS7979 · SERVERS-COM

Requested by: https://microsoft-flight-simulator-free-download-for-andro.pages.dev/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (47849), with no line terminators
MIME type: application/javascript
First seen (UTC): 27 Mar 2026 · 20:40:36.488 UTC
Last seen (UTC): 27 Apr 2026 · 02:46:13.150 UTC
Times seen: 15

Size: 46.7 KB (47851 bytes)
MD5: 6b161493f280ff4a1f26554487dec9db
SHA1: 6ca723c4c710ddb87c9e8bbff0ab08f70a4f7b4e
SHA256: 0c10e3c8bee7252c267338dc25fa8b8ca1c11c31c0d3f27f7dea03d6e36ec8e6

Certificate information

Issuer: Let's Encrypt · R13
Subject: normallydemandedalter.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 83:4D:47:8A:6F:CC:59:3B:0D:7F:5E:DF:1F:BA:BF:17:46:4B:20:0A
Valid from: Sat, 18 Apr 2026 22:11:45 GMT
Valid until: Fri, 17 Jul 2026 22:11:44 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /fedef41719f1d9862355f0372b1f5afc/invoke.js HTTP/1.1
Host: normallydemandedalter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://microsoft-flight-simulator-free-download-for-andro.pages.dev/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 27 Apr 2026 02:45:44 GMT
Content-Type: application/javascript
Content-Length: 17550
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 6
Host: normallydemandedalter.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 72a18b2876a54033454f12f013c144ae
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

02:45:44.367 GET 200 stylesheet 17.2 KB 48 ms —

02:45:44.443 GET 200 subdocument 135.9 KB 359 ms —

02:45:44.600 GET 404 img 7.2 KB 17 ms —

02:45:44.602 GET 404 img 7.2 KB 15 ms —

02:45:44.860 GET 200 xhr 40 B 289 ms —

02:45:44.862 GET 200 xhr 14.3 KB 748 ms 1 alerts

02:45:44.877 GET 200 stylesheet 506.6 KB 36 ms —

02:45:44.880 GET 200 stylesheet 354.2 KB 46 ms —

02:45:44.886 GET 200 script 412.8 KB 57 ms —

02:45:44.888 GET 200 script 1.42 MB 93 ms 1 alerts

02:45:44.908 GET 200 font 39.2 KB 200 ms —

02:45:44.912 GET 200 font 39.2 KB 361 ms —

02:45:45.352 GET 200 img 0 B 107 ms 1 alerts

02:45:45.355 GET 200 img 0 B 692 ms 1 alerts

02:45:45.359 GET 200 img 0 B 194 ms 1 alerts

02:45:45.362 GET 200 img 0 B 684 ms 1 alerts

02:45:45.369 GET 200 img 74.1 KB 182 ms —

02:45:45.370 GET 200 img 39.9 KB 215 ms —

02:45:45.371 GET 200 img 55.9 KB 207 ms —

02:45:45.372 GET 200 img 44.0 KB 158 ms —

02:45:45.401 GET 200 script 630.1 KB 50 ms —

02:45:45.690 GET 200 img 84.1 KB 277 ms —

02:45:45.874 GET 200 fetch 478 B 74 ms —

02:45:45.911 GET 200 script 60.6 KB 196 ms —

02:45:46.269 GET 204 img 0 B 8 ms —

02:45:46.448 OPTIONS 200 xhr 0 B 240 ms —

02:45:46.605 POST 200 xhr 98 B 38 ms —

02:45:48.661 POST 200 xhr 28 B 29 ms —

https://microsoft-flight-simulator-free-download-for-andro.pages.dev

Domain graph

Hostnames

Connections