WEBSITE ANALYSIS REPORT

http://www.london-now.co.uk/news/25336234.mill-hill-post-office-reopens-new-postmistress-appointed/

16 Dec 2025 · 16:42:33.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a02342.london-now.co.uk13 captured requests
ab.dns-finder.com2 captured requests
ad-delivery.net11 captured requests
ajax.googleapis.com1 captured requests
api.iconify.design7 captured requests
applets.ebxcdn.com2 captured requests
assets.adobedtm.com4 captured requests
btloader.com2 captured requests
buy.tinypass.com8 captured requests
c2.piano.io1 captured requests
cdn.tinypass.com1 captured requests
cdnjs.cloudflare.com10 captured requests
code.iconify.design1 captured requests
experience.tinypass.com1 captured requests
fonts.googleapis.com5 captured requests
fonts.gstatic.com4 captured requests
id.tinypass.com1 captured requests
livecomments.viafoura.co4 captured requests
uatu.newsquestdigital.co.uk2 captured requests
www.heraldscotland.com1 captured requests
www.london-now.co.uk38 captured requests
www.npttech.com1 captured requests
www.thenational.scot1 captured requests

Connections

a02342.london-now.co.uk → www.london-now.co.ukLoads from1 captured connections
buy.tinypass.com → cdnjs.cloudflare.comLoads from10 captured connections
buy.tinypass.com → fonts.googleapis.comLoads from5 captured connections
buy.tinypass.com → fonts.gstatic.comLoads from4 captured connections
buy.tinypass.com → www.heraldscotland.comLoads from1 captured connections
buy.tinypass.com → www.london-now.co.ukLoads from6 captured connections
buy.tinypass.com → www.thenational.scotLoads from1 captured connections
www.london-now.co.uk → a02342.london-now.co.ukCalls5 captured connections
www.london-now.co.uk → a02342.london-now.co.ukEmbeds1 captured connections
www.london-now.co.uk → a02342.london-now.co.ukLoads from2 captured connections
www.london-now.co.uk → ab.dns-finder.comCalls2 captured connections
www.london-now.co.uk → ad-delivery.netCalls11 captured connections
www.london-now.co.uk → ajax.googleapis.comLoads from1 captured connections
www.london-now.co.uk → api.iconify.designLoads from7 captured connections
www.london-now.co.uk → applets.ebxcdn.comCalls1 captured connections
www.london-now.co.uk → applets.ebxcdn.comLoads from1 captured connections
www.london-now.co.uk → assets.adobedtm.comLoads from4 captured connections
www.london-now.co.uk → btloader.comEmbeds1 captured connections
www.london-now.co.uk → btloader.comLoads from1 captured connections
www.london-now.co.uk → buy.tinypass.comCalls2 captured connections
www.london-now.co.uk → buy.tinypass.comEmbeds1 captured connections
www.london-now.co.uk → c2.piano.ioCalls1 captured connections
www.london-now.co.uk → cdn.tinypass.comLoads from1 captured connections
www.london-now.co.uk → code.iconify.designLoads from1 captured connections
www.london-now.co.uk → experience.tinypass.comLoads from1 captured connections
www.london-now.co.uk → id.tinypass.comLoads from1 captured connections
www.london-now.co.uk → livecomments.viafoura.coCalls4 captured connections
www.london-now.co.uk → uatu.newsquestdigital.co.ukLoads from2 captured connections
www.london-now.co.uk → www.npttech.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:42:09.142 GET 200 document 222.1 KB 187 ms —

16:42:09.414 GET 200 stylesheet 5.8 KB 20 ms —

16:42:09.417 GET 200 stylesheet 185.0 KB 21 ms —

16:42:09.419 GET 200 stylesheet 181.4 KB 24 ms —

16:42:09.423 GET 200 script 93.5 KB 811 ms —

16:42:09.425 GET 200 script 189.2 KB 41 ms —

16:42:09.429 GET 200 script 319.3 KB 95 ms —

16:42:09.430 GET 200 script 137.6 KB 175 ms —

16:42:09.440 GET 200 script 22.4 KB 47 ms —

16:42:09.449 GET 200 img 3.4 KB 26 ms —

16:42:09.454 GET 200 img 2.9 KB 25 ms —

16:42:09.471 GET 200 imageset 95.0 KB 223 ms —

16:42:09.473 GET 200 img 2.1 KB 20 ms —

16:42:09.477 GET 200 img 2.5 KB 20 ms —

16:42:09.480 GET 200 img 14.0 KB 22 ms —

16:42:09.481 GET 200 img 43 B 22 ms —

16:42:09.486 GET 200 script 316.5 KB 28 ms —

16:42:09.487 GET 200 script 858.3 KB 48 ms —

16:42:09.488 GET 200 script 44 B 48 ms —

16:42:09.489 GET 200 script 44.1 KB 41 ms —

16:42:09.494 GET 200 script 49.4 KB 42 ms —

16:42:09.496 GET 200 script 10 B 190 ms —

16:42:09.497 GET 200 script 4.0 KB 197 ms —

16:42:09.992 GET 200 script 160.4 KB 18 ms —

16:42:09.999 GET 200 xhr 200 B 29 ms —

16:42:10.005 GET 200 script 5.8 KB 49 ms —

16:42:10.009 GET 200 script 3.7 KB 56 ms —

16:42:10.098 GET 200 img 546 B 21 ms —

16:42:10.101 GET 200 font 13.0 KB 22 ms —

16:42:10.103 GET 200 font 13.0 KB 22 ms —

16:42:10.105 GET 200 font 15.0 KB 23 ms —

16:42:10.108 GET 200 font 15.0 KB 23 ms —

16:42:10.109 GET 200 font 13.3 KB 21 ms —

16:42:10.111 GET 200 font 13.8 KB 21 ms —

16:42:10.112 GET 200 font 15.0 KB 22 ms —

16:42:10.114 GET 200 font 16.4 KB 22 ms —

16:42:10.116 GET 200 font 13.7 KB 23 ms —

16:42:10.182 GET 200 script 444.5 KB 31 ms —

16:42:10.204 GET 200 script 35.3 KB 149 ms —

16:42:10.209 GET 200 script 3.2 KB 147 ms —

16:42:10.231 GET 200 script 464 B 38 ms —

16:42:10.239 GET 200 script 129.0 KB 56 ms 1 alerts

16:42:10.403 GET 200 script 925 B 8 ms —

16:42:10.404 GET 200 xhr 27.3 KB 21 ms —

16:42:10.417 GET 200 xhr 0 B 25 ms —

16:42:10.423 OPTIONS 200 fetch 0 B 171 ms —

16:42:10.425 OPTIONS 200 fetch 0 B 172 ms —

16:42:10.506 GET 200 subdocument 6.1 KB 25 ms 1 alerts

Transaction #116

Request / response

URL

GET HTTPS

https://btloader.com/trustedIframe.html?o=5688297061875712&upapi=true

IP / ASN

104.20.20.189

AS13335 · CLOUDFLARENET

Requested by: https://www.london-now.co.uk/news/25336234.mill-hill-post-office-reopens-new-postmistress-appointed/

Resource information

File type: HTML document, ASCII text
MIME type: text/html
First seen (UTC): 16 Dec 2025 · 16:42:47.991 UTC
Last seen (UTC): 16 Dec 2025 · 16:42:47.991 UTC
Times seen: 1

Size: 6.1 KB (6226 bytes)
MD5: 9c1d4f4c97d979880084a2c4f7741a09
SHA1: 323e8072841799200f257071b11c4fbeb1d18ea6
SHA256: 3fca58cacc3ca0c74f895dbf78d72ca8d0041ed6408d5d74eb9fed10807f563e

Certificate information

Issuer: Google Trust Services · WE1
Subject: btloader.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 40:2C:9D:2F:E5:58:9C:2A:66:5D:63:80:3D:ED:AA:7A:7A:D2:2E:01
Valid from: Tue, 25 Nov 2025 22:30:52 GMT
Valid until: Mon, 23 Feb 2026 23:30:36 GMT

Technology fingerprints

Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /trustedIframe.html?o=5688297061875712&upapi=true HTTP/1.1
Host: btloader.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.london-now.co.uk/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Tue, 16 Dec 2025 16:42:10 GMT
content-type: text/html
cache-control: public, max-age=3600, stale-while-revalidate=3600
vary: accept-encoding
content-encoding: br
server: cloudflare
cf-ray: 9aefa1e7add056b1-OSL
X-Firefox-Spdy: h2

16:42:10.508 GET 200 fetch 43 B 56 ms —

16:42:10.512 GET 200 fetch 43 B 49 ms —

http://www.london-now.co.uk/news/25336234.mill-hill-post-office-reopens-new-postmistress-appointed/

Domain graph

Hostnames

Connections

Network requests

Transaction #116

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.london-now.co.uk/news/25336234.mill-hill-post-office-reopens-new-postmistress-appointed/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #116

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.london-now.co.uk/news/25336234.mill-hill-post-office-reopens-new-postmistress-appointed/

Domain graph

Network requests