WEBSITE ANALYSIS REPORT

http://kontrol7.prynxo.com/

30 May 2026 · 19:50:59.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a.adspector.io1 captured requests
a64842e9de.198b531aae.com1 captured requests
ad.twinrdengine.com2 captured requests
cdn.60ah.com2 captured requests
creative.rmhfrtnd.com2 captured requests
flepquix.com1 captured requests
fonts.googleapis.com2 captured requests
fp.metricswpsh.com2 captured requests
go.cambaddies.com2 captured requests
go.mavrtracktor.com1 captured requests
go.rmhfrtnd.com2 captured requests
js.cabnnr.com2 captured requests
js.wpadmngr.com1 captured requests
kontrol7.prynxo.com1 captured requests
lacenocturne.com1 captured requests
n2j9y0x0.bxcdn.net1 captured requests
na.nawpush.com1 captured requests
ntvpforever.com2 captured requests
plushcinema.com3 captured requests
preroll.hostave3.net1 captured requests
rtbbtr.com3 captured requests
s.magsrv.com2 captured requests
senzoriq.com4 captured requests
silkallurex.com1 captured requests
trendbuzz.to1 captured requests
video.rmhfrtnd.com1 captured requests
video.sacdnssedge.com3 captured requests

Connections

creative.rmhfrtnd.com → fonts.googleapis.comLoads from2 captured connections
creative.rmhfrtnd.com → go.rmhfrtnd.comCalls1 captured connections
creative.rmhfrtnd.com → go.rmhfrtnd.comLoads from1 captured connections
creative.rmhfrtnd.com → video.rmhfrtnd.comLoads from1 captured connections
go.mavrtracktor.com → go.cambaddies.comRedirects to1 captured connections
kontrol7.prynxo.com → senzoriq.comRedirects to1 captured connections
lacenocturne.com → a.adspector.ioEmbeds1 captured connections
lacenocturne.com → a64842e9de.198b531aae.comCalls1 captured connections
lacenocturne.com → flepquix.comCalls1 captured connections
lacenocturne.com → fp.metricswpsh.comCalls2 captured connections
lacenocturne.com → js.cabnnr.comLoads from1 captured connections
lacenocturne.com → js.wpadmngr.comLoads from1 captured connections
lacenocturne.com → na.nawpush.comCalls1 captured connections
lacenocturne.com → ntvpforever.comCalls2 captured connections
lacenocturne.com → rtbbtr.comCalls1 captured connections
lacenocturne.com → rtbbtr.comEmbeds1 captured connections
plushcinema.com → ad.twinrdengine.comCalls1 captured connections
plushcinema.com → ad.twinrdengine.comEmbeds1 captured connections
plushcinema.com → go.cambaddies.comCalls1 captured connections
plushcinema.com → go.cambaddies.comEmbeds1 captured connections
plushcinema.com → go.mavrtracktor.comCalls1 captured connections
plushcinema.com → trendbuzz.toEmbeds1 captured connections
plushcinema.com → video.sacdnssedge.comLoads from3 captured connections
rtbbtr.com → cdn.60ah.comEmbeds1 captured connections
rtbbtr.com → cdn.60ah.comLoads from1 captured connections
rtbbtr.com → creative.rmhfrtnd.comEmbeds1 captured connections
rtbbtr.com → js.cabnnr.comLoads from1 captured connections
rtbbtr.com → preroll.hostave3.netLoads from1 captured connections
rtbbtr.com → preroll.hostave3.netRedirects to1 captured connections
senzoriq.com → silkallurex.comEmbeds1 captured connections
silkallurex.com → plushcinema.comEmbeds1 captured connections
trendbuzz.to → lacenocturne.comEmbeds1 captured connections
trendbuzz.to → n2j9y0x0.bxcdn.netLoads from1 captured connections
trendbuzz.to → s.magsrv.comCalls1 captured connections
trendbuzz.to → s.magsrv.comEmbeds1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:50:36.446 GET 302 document 14.9 KB 207 ms —

19:50:36.579 GET 200 document 14.9 KB 186 ms —

19:50:37.074 GET No response img 0 B 0 ms —

19:50:37.274 GET 200 document 469 B 59 ms —

19:50:37.382 GET 200 subdocument 220 B 193 ms —

19:50:37.405 GET 404 img 0 B 9 ms —

19:50:37.613 GET 200 subdocument 107 B 195 ms —

19:50:37.848 GET 200 subdocument 10.1 KB 63 ms —

19:50:37.937 GET 200 fetch 3.9 KB 267 ms —

19:50:38.118 GET 302 fetch 2.3 KB 272 ms —

19:50:38.276 GET 200 fetch 2.3 KB 232 ms —

19:50:38.532 GET 206 media 1.50 MB 356 ms —

19:50:38.543 GET 200 subdocument 2 B 141 ms —

19:50:38.546 GET 200 subdocument 103 B 62 ms —

19:50:38.825 GET 206 media 35.7 KB 2 ms —

19:50:38.904 GET 200 subdocument 304 B 62 ms —

19:50:38.911 GET 206 media 439.9 KB 24 ms —

19:50:39.021 GET 200 subdocument 10.9 KB 234 ms —

19:50:39.298 GET 200 fetch 15.4 KB 197 ms 1 alerts

19:50:39.523 GET 206 media 3.51 MB 447 ms —

19:50:39.530 GET 200 subdocument 0 B 307 ms 1 alerts

19:50:39.723 GET 200 subdocument 281 B 353 ms —

19:50:40.145 GET 200 script 132.8 KB 699 ms 1 alerts

19:50:40.747 GET 200 xhr 1.4 KB 263 ms 1 alerts

19:50:40.989 OPTIONS 204 xhr 0 B 510 ms —

19:50:40.996 GET 200 xhr 0 B 511 ms —

19:50:40.999 GET 200 script 83.2 KB 428 ms —

19:50:41.001 OPTIONS 204 xhr 0 B 520 ms 1 alerts

19:50:41.314 POST 200 xhr 15 B 32 ms —

19:50:41.429 POST 200 xhr 60 B 381 ms 1 alerts

19:50:41.471 GET 204 subdocument 0 B 343 ms —

19:50:41.473 GET 200 subdocument 15.1 KB 519 ms —

19:50:41.478 GET 200 xhr 0 B 336 ms —

19:50:41.903 GET 200 stylesheet 1.9 KB 181 ms —

19:50:41.905 GET 302 img 42 B 39 ms —

19:50:41.908 GET 200 script 376 B 21 ms —

19:50:41.914 GET 200 subdocument 2.0 KB 180 ms —

19:50:41.947 GET 200 img 42 B 126 ms —

19:50:42.304 GET 200 xhr 0 B 83 ms —

19:50:42.567 GET 200 subdocument 1.3 KB 167 ms 1 alerts

19:50:42.751 GET 200 stylesheet 5.3 KB 276 ms —

19:50:42.752 GET 200 stylesheet 4.8 KB 374 ms —

19:50:42.754 GET 200 script 161.0 KB 39 ms 1 alerts

19:50:43.055 GET 200 fetch 7.1 KB 221 ms 1 alerts

19:50:43.222 GET 200 img 691.1 KB 264 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://video.rmhfrtnd.com/b/bc2a1369.gif

IP / ASN

104.18.40.50

AS13335 · CLOUDFLARENET

Requested by: https://creative.rmhfrtnd.com/widgets/wrapper?userId=21bef55dbc8f276fe29aaae6f9e950e3b6129b2c6480c95e51858c64ffbb33e4&bb=bc2a1369.gif

Resource information

File type: GIF image data, version 89a, 300 x 250
MIME type: image/gif
First seen (UTC): 11 May 2023 · 16:50:46.000 UTC
Last seen (UTC): 22 Jul 2026 · 17:25:21.288 UTC
Times seen: 720

Size: 691.1 KB (707646 bytes)
MD5: c586b03518c44b58140e1d2db70a4534
SHA1: 0f5c7348871affec5c72818aaa93c8db0f90aeee
SHA256: 392c11b4b6c38ac6c020153a04f8f44b3e037b069e035a0ca9386ac6a98f7610

Certificate information

Issuer: Google Trust Services · WE1
Subject: video.rmhfrtnd.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 10:04:52:40:41:6F:8B:E1:F6:B8:75:83:C0:B9:11:A1:64:61:43:B8
Valid from: Thu, 07 May 2026 22:17:20 GMT
Valid until: Wed, 05 Aug 2026 23:17:08 GMT

Technology fingerprints

Cloudflare (CDN)
Amazon Web Services (PaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /b/bc2a1369.gif HTTP/1.1
Host: video.rmhfrtnd.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://creative.rmhfrtnd.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Sat, 30 May 2026 19:50:43 GMT
content-type: image/gif
content-length: 707646
server: cloudflare
accept-ranges: bytes
access-control-expose-headers: Content-Disposition
content-disposition: inline; filename="bc2a1369.gif"
etag: "c586b03518c44b58140e1d2db70a4534"
last-modified: Tue, 28 Apr 2026 12:21:57 GMT
x-amz-request-id: c6735c35-4ea7-458e-abbe-34154457418c
cache-control: public, max-age=14400
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, x-requested-with
age: 2747
expires: Sat, 30 May 2026 23:50:43 GMT
cf-cache-status: HIT
cf-ray: a04044f8cc827127-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

19:50:43.437 GET 200 img 0 B 45 ms 1 alerts

http://kontrol7.prynxo.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://kontrol7.prynxo.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://kontrol7.prynxo.com/

Domain graph

Network requests