WEBSITE ANALYSIS REPORT

https://microsoft-flight-simulator-free-download-for-andro.pages.dev

27 Apr 2026 · 02:46:06.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:45:44.002 GET 200 document 30.0 KB 239 ms —

02:45:44.363 GET 404 img 7.2 KB 135 ms —

02:45:44.365 GET 200 script 46.7 KB 751 ms 3 alerts

02:45:44.367 GET 200 stylesheet 17.2 KB 48 ms —

02:45:44.443 GET 200 subdocument 135.9 KB 359 ms —

02:45:44.600 GET 404 img 7.2 KB 17 ms —

02:45:44.602 GET 404 img 7.2 KB 15 ms —

02:45:44.860 GET 200 xhr 40 B 289 ms —

02:45:44.862 GET 200 xhr 14.3 KB 748 ms 1 alerts

02:45:44.877 GET 200 stylesheet 506.6 KB 36 ms —

02:45:44.880 GET 200 stylesheet 354.2 KB 46 ms —

02:45:44.886 GET 200 script 412.8 KB 57 ms —

02:45:44.888 GET 200 script 1.42 MB 93 ms 1 alerts

02:45:44.908 GET 200 font 39.2 KB 200 ms —

02:45:44.912 GET 200 font 39.2 KB 361 ms —

02:45:45.352 GET 200 img 0 B 107 ms 1 alerts

02:45:45.355 GET 200 img 0 B 692 ms 1 alerts

Transaction #08

Request / response

URL

GET HTTPS

https://exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1RSTYgcRRit3gwe4kE0QfDWiAcVZ7b_5qfdgxA0XnRXTSSgeKjq6potp6ar09U9MzunjREFTzmoeLPnzWxWUPy5eJQwK4KIwrYXB8we9C6IEPAgykwG1hTU91OvKN77Xr0zKU5IAwVdvPSiHkul6Gaz4diPX5EJ10Njb1-2XafhbNlXZNIKtuzRMmSDp10_aDhP2M_HUU9veo7rOK7j2hdlFgs92lyhkOlnodsInUbgNdxmgFF2b28KC4Za4IMT8hAkrx74XbwOGc2R9L98Nja9XKdPPdcvFM11hgE_fDXpJXqYoH9aisyCSA7Xt6FNRchHG9DJ4VoB9GC2VAAmK7Lx8G2w5HBNE2xwcJcpU4gTMH4_hoM5YjWHpHNE-jokPyZAxLG9g6R_c1tnQ7p3F6VLtCK1O39BDitSu30eSf_zC0qO7EtaFbnUicFIlJCjOWR3jrQ4Qj7egBweIcrfguQ_kc07LyDpz3aM0pC8XKmXYg5qLBTLLS0UwkKRWujzhR04nSByqd8SIY_aTkCDgMfMCTue49AwaqOIrkHyG4iyfaTZPnryg4qQf85XxDr76zH5_viRTytCfv4bhlsweUWsl_cx4OUBV8Yz5U2uTMHcdfbW2S-nOu9O6IHOu3FCQLMbyHg5k-lVcx1RfmY6FoZP9TJQlpdTyng5lTwnyK4uHnPckEcRD-pup8Prbdb26h0nEHXX44HvMspc2p4JkxflJD0hDy7Har37xS568cIWMY9F4LbdULg87LQ8v9kUjt_2mCuaVEQwsoQ0G6uJjWVFLv57C-nS60c_BKNHMOoIkTwDWrigwxJ0t8Q4-ZpLmsT1fpGlu3uNlHZj0-DxAFyXSPMa8j1rok7Iuekrly_cWvn8xi9zxNEPZL0QZSXSrMSb8luCrrr21U6ay74c06Xxl3Kax_eByoqc_fM9RLIi5775ePUHm0_-hijdh0lP3zKagKUbUJJAxafnlJUw_-vZaT0xb6Ob1cBUbcpUVpsxlan3lzS_W3GtyGufPFMRtmXByIXd9Jjf6nRasWhx4XPf83nYdOIwoGErCIMmclPJP35c_BcAAP__oXI4IBAEAAA=

IP / ASN

172.240.108.68

AS7979 · SERVERS-COM

Requested by: https://microsoft-flight-simulator-free-download-for-andro.pages.dev/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 10:29:58.057 UTC
Times seen: 19329754

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: exemplarfederallithe.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 4D:6E:59:1A:16:B1:8F:5E:FE:37:10:51:89:46:9F:30:99:AB:85:30
Valid from: Sun, 26 Apr 2026 21:09:29 GMT
Valid until: Sat, 25 Jul 2026 21:09:28 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1RSTYgcRRit3gwe4kE0QfDWiAcVZ7b_5qfdgxA0XnRXTSSgeKjq6potp6ar09U9MzunjREFTzmoeLPnzWxWUPy5eJQwK4KIwrYXB8we9C6IEPAgykwG1hTU91OvKN77Xr0zKU5IAwVdvPSiHkul6Gaz4diPX5EJ10Njb1-2XafhbNlXZNIKtuzRMmSDp10_aDhP2M_HUU9veo7rOK7j2hdlFgs92lyhkOlnodsInUbgNdxmgFF2b28KC4Za4IMT8hAkrx74XbwOGc2R9L98Nja9XKdPPdcvFM11hgE_fDXpJXqYoH9aisyCSA7Xt6FNRchHG9DJ4VoB9GC2VAAmK7Lx8G2w5HBNE2xwcJcpU4gTMH4_hoM5YjWHpHNE-jokPyZAxLG9g6R_c1tnQ7p3F6VLtCK1O39BDitSu30eSf_zC0qO7EtaFbnUicFIlJCjOWR3jrQ4Qj7egBweIcrfguQ_kc07LyDpz3aM0pC8XKmXYg5qLBTLLS0UwkKRWujzhR04nSByqd8SIY_aTkCDgMfMCTue49AwaqOIrkHyG4iyfaTZPnryg4qQf85XxDr76zH5_viRTytCfv4bhlsweUWsl_cx4OUBV8Yz5U2uTMHcdfbW2S-nOu9O6IHOu3FCQLMbyHg5k-lVcx1RfmY6FoZP9TJQlpdTyng5lTwnyK4uHnPckEcRD-pup8Prbdb26h0nEHXX44HvMspc2p4JkxflJD0hDy7Har37xS568cIWMY9F4LbdULg87LQ8v9kUjt_2mCuaVEQwsoQ0G6uJjWVFLv57C-nS60c_BKNHMOoIkTwDWrigwxJ0t8Q4-ZpLmsT1fpGlu3uNlHZj0-DxAFyXSPMa8j1rok7Iuekrly_cWvn8xi9zxNEPZL0QZSXSrMSb8luCrrr21U6ay74c06Xxl3Kax_eByoqc_fM9RLIi5775ePUHm0_-hijdh0lP3zKagKUbUJJAxafnlJUw_-vZaT0xb6Ob1cBUbcpUVpsxlan3lzS_W3GtyGufPFMRtmXByIXd9Jjf6nRasWhx4XPf83nYdOIwoGErCIMmclPJP35c_BcAAP__oXI4IBAEAAA= HTTP/1.1
Host: exemplarfederallithe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://microsoft-flight-simulator-free-download-for-andro.pages.dev/
DNT: 1
Connection: keep-alive
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl25669480=1; nlecfedef41719f1d9862355f0372b1f5afc=[5941311,6437633]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Mon, 27 Apr 2026 02:45:45 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: exemplarfederallithe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 16feb5ccbfe79660986680a7523af80e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

02:45:45.359 GET 200 img 0 B 194 ms 1 alerts

02:45:45.362 GET 200 img 0 B 684 ms 1 alerts

02:45:45.369 GET 200 img 74.1 KB 182 ms —

02:45:45.370 GET 200 img 39.9 KB 215 ms —

02:45:45.371 GET 200 img 55.9 KB 207 ms —

02:45:45.372 GET 200 img 44.0 KB 158 ms —

02:45:45.401 GET 200 script 630.1 KB 50 ms —

02:45:45.690 GET 200 img 84.1 KB 277 ms —

02:45:45.874 GET 200 fetch 478 B 74 ms —

02:45:45.911 GET 200 script 60.6 KB 196 ms —

02:45:46.269 GET 204 img 0 B 8 ms —

02:45:46.448 OPTIONS 200 xhr 0 B 240 ms —

02:45:46.605 POST 200 xhr 98 B 38 ms —

02:45:48.661 POST 200 xhr 28 B 29 ms —

https://microsoft-flight-simulator-free-download-for-andro.pages.dev

Domain graph

Hostnames

Connections