WEBSITE ANALYSIS REPORT

http://psfh.link

07 Apr 2026 · 04:51:49.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:51:27.587 GET 200 document 11.8 KB 535 ms 1 alerts

04:51:28.049 GET 200 script 819 B 48 ms 1 alerts

04:51:28.232 GET 200 script 49.4 KB 880 ms 2 alerts

04:51:28.328 GET 200 img 535.1 KB 264 ms 1 alerts

04:51:28.891 GET 200 script 5.0 KB 658 ms 1 alerts

04:51:28.907 GET 200 xhr 40 B 242 ms —

04:51:29.071 GET 307 xhr 4.2 KB 658 ms 1 alerts

Transaction #09

Request / response

URL

GET HTTPS

https://realizationnewestfangs.com/watch.641491438298.js?key=21b0e994d14a596d05cc4cc50311bbc7&kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D&refer=https%3A%2F%2Fpsfh.link%2F&tz=0&dev=e&res=14.3095&rb=&uuid=33d3d54f-0472-41b5-a93b-889be734cece%3A3%3A1

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://psfh.link/

Resource information

File type: Not recorded
MIME type: text/html
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 17:44:12.546 UTC
Times seen: 19286813

Size: 4.2 KB (4330 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: realizationnewestfangs.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96
Valid from: Thu, 26 Feb 2026 23:39:43 GMT
Valid until: Wed, 27 May 2026 23:39:42 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.641491438298.js?key=21b0e994d14a596d05cc4cc50311bbc7&kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D&refer=https%3A%2F%2Fpsfh.link%2F&tz=0&dev=e&res=14.3095&rb=&uuid=33d3d54f-0472-41b5-a93b-889be734cece%3A3%3A1 HTTP/1.1
Host: realizationnewestfangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://psfh.link
DNT: 1
Connection: keep-alive
Referer: https://psfh.link/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Tue, 07 Apr 2026 04:51:29 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://psfh.link
access-control-allow-credentials: true
location: https://realizationnewestfangs.com/watch.641491438298.js?key=21b0e994d14a596d05cc4cc50311bbc7&kw=%5B%22pasteflash%22%2C%22%E2%80%94%22%2C%22simple%22%2C%22secure%22%2C%22monetized%22%2C%22paste%22%5D&refer=https%3A%2F%2Fpsfh.link%2F&tz=0&dev=e&res=14.3095&rb=&uuid=33d3d54f-0472-41b5-a93b-889be734cece%3A3%3A1&shu=cc88a0297b5e2459f089a9a96eaf5110d986efa71ece3553e8acb418ca372061b0b05cb9d7ff91bcdda7cdae2794f577c22563bd34f96f7bc865f197572f11e76db9f9f1c6936496e2b55c695a97a579aee4eaa7b2e940eba69b6c&pst=1775537549&rmtc=t&st1=0e776475ec6458b19842c093f3b60c27&ps1=1775537489
set-cookie: uid_id2=33d3d54f-0472-41b5-a93b-889be734cece:3:1; expires=Tue, 14 Apr 2026 04:51:29 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.5LArfrsrA9iDNX7CvkYrQavEvjhLS6U7kUeL4z6TEOg; expires=Tue, 07 Apr 2026 04:52:29 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 1
Host: realizationnewestfangs.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8a91ddabeeca68b5ccb34035a39a1de1
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

04:51:29.498 GET 200 xhr 4.2 KB 123 ms 1 alerts

04:51:29.660 GET 200 img 52.2 KB 174 ms —

04:51:29.663 GET 200 img 0 B 95 ms 1 alerts

http://psfh.link

Domain graph

Hostnames

Connections