WEBSITE ANALYSIS REPORT

http://7fc9f7gtrd.pages.dev/

21 Aug 2026 · 21:18:05.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

7fc9f7gtrd.pages.dev2 captured requests
cdn.redgarto.com6 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com15 captured requests
counter.yadro.ru1 captured requests
exemplarfederallithe.com3 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
furiousexpansion.com36 captured requests
go.realus.lt2 captured requests
mamshirt.com1 captured requests
portalfluently.com1 captured requests
protrafficinspector.com4 captured requests
racingorchestra.com5 captured requests
realizationnewestfangs.com11 captured requests

Connections

7fc9f7gtrd.pages.dev → cdn.redgarto.comCalls3 captured connections
7fc9f7gtrd.pages.dev → cdn.redgarto.comLoads from3 captured connections
7fc9f7gtrd.pages.dev → cdn.show-creative1.comCalls1 captured connections
7fc9f7gtrd.pages.dev → cdn.storageimagedisplay.comLoads from15 captured connections
7fc9f7gtrd.pages.dev → counter.yadro.ruLoads from1 captured connections
7fc9f7gtrd.pages.dev → exemplarfederallithe.comCalls2 captured connections
7fc9f7gtrd.pages.dev → exemplarfederallithe.comLoads from1 captured connections
7fc9f7gtrd.pages.dev → flushpersist.comLoads from1 captured connections
7fc9f7gtrd.pages.dev → fonts.googleapis.comLoads from1 captured connections
7fc9f7gtrd.pages.dev → fonts.gstatic.comLoads from2 captured connections
7fc9f7gtrd.pages.dev → furiousexpansion.comCalls4 captured connections
7fc9f7gtrd.pages.dev → furiousexpansion.comLoads from32 captured connections
7fc9f7gtrd.pages.dev → go.realus.ltLoads from2 captured connections
7fc9f7gtrd.pages.dev → mamshirt.comLoads from1 captured connections
7fc9f7gtrd.pages.dev → portalfluently.comLoads from1 captured connections
7fc9f7gtrd.pages.dev → protrafficinspector.comCalls4 captured connections
7fc9f7gtrd.pages.dev → racingorchestra.comLoads from5 captured connections
7fc9f7gtrd.pages.dev → realizationnewestfangs.comCalls4 captured connections
7fc9f7gtrd.pages.dev → realizationnewestfangs.comLoads from7 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:17:27.034 GET 200 document 8.0 KB 224 ms —

21:17:27.600 GET 200 script 32.3 KB 365 ms 1 alerts

21:17:27.602 GET 200 script 32.2 KB 138 ms 1 alerts

21:17:27.604 GET 200 script 32.2 KB 110 ms 1 alerts

21:17:27.608 GET 200 script 32.2 KB 117 ms 1 alerts

21:17:27.610 GET 200 script 94.8 KB 126 ms 1 alerts

21:17:27.611 GET No response script 0 B 0 ms —

21:17:27.619 GET 200 img 132 B 141 ms —

21:17:27.776 GET 200 script 83.4 KB 122 ms 1 alerts

21:17:27.777 GET 200 xhr 40 B 106 ms —

21:17:27.779 GET 200 script 4.2 KB 60 ms —

21:17:27.782 GET No response script 0 B 0 ms —

21:17:27.834 GET 200 xhr 40 B 49 ms —

21:17:27.836 GET 200 xhr 14.0 KB 387 ms 1 alerts

21:17:27.839 GET 200 xhr 40 B 44 ms —

21:17:27.840 GET 200 xhr 14.1 KB 797 ms 1 alerts

21:17:27.853 GET 200 xhr 40 B 29 ms —

21:17:27.855 GET 200 xhr 0 B 390 ms 1 alerts

21:17:27.866 GET 200 xhr 14.0 KB 391 ms 1 alerts

21:17:27.867 GET 200 xhr 14.0 KB 395 ms 1 alerts

21:17:27.869 GET 200 xhr 0 B 382 ms 1 alerts

21:17:27.995 GET 200 img 0 B 377 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://exemplarfederallithe.com/pixel/nvwbm?key=dcc70babb195d7f16e186a05029ee138

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://7fc9f7gtrd.pages.dev/

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 15:40:42.472 UTC
Times seen: 19285211

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: exemplarfederallithe.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 1B:08:1B:4F:EB:F9:7D:FF:1D:EC:97:7C:78:18:D6:B7:08:11:68:5E
Valid from: Thu, 25 Jun 2026 21:17:28 GMT
Valid until: Wed, 23 Sep 2026 21:17:27 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /pixel/nvwbm?key=dcc70babb195d7f16e186a05029ee138 HTTP/1.1
Host: exemplarfederallithe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://7fc9f7gtrd.pages.dev/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Fri, 21 Aug 2026 21:17:28 GMT
Content-Length: 0
Connection: keep-alive
Accept-Ch: X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Device-Stock-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Operamini-Phone-Ua
Host: exemplarfederallithe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values
Access-Control-Expose-Headers: Content-Length,Content-Range

21:17:28.342 GET 200 xhr 5.1 KB 591 ms 1 alerts

21:17:28.384 GET 200 img 79.0 KB 211 ms —

21:17:28.386 GET 200 img 16.6 KB 330 ms —

21:17:28.387 GET 200 img 119.5 KB 328 ms —

21:17:28.388 GET 200 img 86.2 KB 315 ms —

21:17:28.394 GET 200 img 0 B 0 ms 1 alerts

21:17:28.395 GET 200 img 0 B 0 ms 1 alerts

21:17:28.397 GET 200 img 0 B 0 ms 1 alerts

21:17:28.398 GET 200 img 0 B 0 ms 1 alerts

21:17:28.399 GET 200 img 0 B 0 ms 1 alerts

21:17:28.401 GET 200 img 0 B 0 ms 1 alerts

21:17:28.402 GET 200 img 0 B 0 ms 1 alerts

21:17:28.404 GET 200 img 0 B 0 ms 1 alerts

21:17:28.411 GET 200 img 28.3 KB 191 ms —

21:17:28.413 GET 200 img 126.6 KB 197 ms —

21:17:28.415 GET 200 img 34.5 KB 170 ms —

21:17:28.417 GET 200 img 19.9 KB 181 ms —

21:17:28.418 GET 200 img 0 B 0 ms 1 alerts

21:17:28.419 GET 200 img 0 B 0 ms 1 alerts

21:17:28.420 GET 200 img 0 B 0 ms 1 alerts

21:17:28.422 GET 200 img 0 B 0 ms 1 alerts

21:17:28.423 GET 200 img 0 B 0 ms 1 alerts

21:17:28.424 GET 200 img 0 B 0 ms 1 alerts

21:17:28.425 GET 200 img 0 B 0 ms 1 alerts

21:17:28.426 GET 200 img 0 B 0 ms 1 alerts

21:17:28.428 GET 200 img 54.1 KB 163 ms —

21:17:28.431 GET 200 img 17.4 KB 180 ms —

21:17:28.432 GET 200 img 16.6 KB 155 ms —

http://7fc9f7gtrd.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://7fc9f7gtrd.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://7fc9f7gtrd.pages.dev/

Domain graph

Network requests