WEBSITE ANALYSIS REPORT

http://c48416bwsq.pages.dev/

21 Aug 2026 · 21:21:24.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

c48416bwsq.pages.dev2 captured requests
cdn.redgarto.com6 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com16 captured requests
counter.yadro.ru1 captured requests
exemplarfederallithe.com1 captured requests
fizzyacerbitymellow.com16 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
furiousexpansion.com20 captured requests
go.realus.lt2 captured requests
mamshirt.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com2 captured requests
racingorchestra.com5 captured requests
static.nresystems.com1 captured requests
wingsmob.com3 captured requests
workdeadlinededicate.com11 captured requests

Connections

c48416bwsq.pages.dev → cdn.redgarto.comCalls3 captured connections
c48416bwsq.pages.dev → cdn.redgarto.comLoads from3 captured connections
c48416bwsq.pages.dev → cdn.show-creative1.comCalls1 captured connections
c48416bwsq.pages.dev → cdn.storageimagedisplay.comLoads from16 captured connections
c48416bwsq.pages.dev → counter.yadro.ruLoads from1 captured connections
c48416bwsq.pages.dev → exemplarfederallithe.comLoads from1 captured connections
c48416bwsq.pages.dev → fizzyacerbitymellow.comLoads from16 captured connections
c48416bwsq.pages.dev → flushpersist.comLoads from2 captured connections
c48416bwsq.pages.dev → fonts.googleapis.comLoads from1 captured connections
c48416bwsq.pages.dev → fonts.gstatic.comLoads from2 captured connections
c48416bwsq.pages.dev → furiousexpansion.comCalls4 captured connections
c48416bwsq.pages.dev → furiousexpansion.comLoads from16 captured connections
c48416bwsq.pages.dev → go.realus.ltLoads from2 captured connections
c48416bwsq.pages.dev → mamshirt.comLoads from1 captured connections
c48416bwsq.pages.dev → portalfluently.comLoads from2 captured connections
c48416bwsq.pages.dev → protrafficinspector.comCalls2 captured connections
c48416bwsq.pages.dev → racingorchestra.comLoads from5 captured connections
c48416bwsq.pages.dev → static.nresystems.comLoads from1 captured connections
c48416bwsq.pages.dev → wingsmob.comCalls2 captured connections
c48416bwsq.pages.dev → wingsmob.comLoads from1 captured connections
c48416bwsq.pages.dev → workdeadlinededicate.comCalls4 captured connections
c48416bwsq.pages.dev → workdeadlinededicate.comLoads from7 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:20:46.084 GET 200 document 28.3 KB 194 ms —

21:20:46.559 GET 200 script 32.3 KB 884 ms 1 alerts

21:20:46.561 GET 200 script 32.2 KB 885 ms 1 alerts

21:20:46.562 GET 200 script 32.2 KB 472 ms 1 alerts

21:20:46.564 GET 200 script 32.2 KB 886 ms 1 alerts

21:20:46.565 GET 200 script 94.8 KB 480 ms 1 alerts

21:20:46.568 GET No response script 0 B 0 ms —

21:20:46.581 GET 200 img 132 B 141 ms —

21:20:47.068 GET 200 script 83.4 KB 118 ms 1 alerts

21:20:47.073 GET 200 xhr 40 B 92 ms —

21:20:47.076 GET 200 script 4.2 KB 67 ms —

21:20:47.078 GET No response script 0 B 0 ms —

21:20:47.108 GET 200 xhr 40 B 89 ms —

21:20:47.110 GET 200 xhr 14.2 KB 128 ms 1 alerts

21:20:47.234 GET 200 xhr 14.0 KB 39 ms 1 alerts

21:20:47.254 GET 200 img 20.6 KB 93 ms —

21:20:47.256 GET 200 img 142.7 KB 319 ms —

21:20:47.259 GET 200 img 81.2 KB 150 ms —

21:20:47.260 GET 200 img 105.8 KB 151 ms —

21:20:47.265 GET 200 img 0 B 0 ms 1 alerts

21:20:47.267 GET 200 img 0 B 0 ms 1 alerts

Transaction #80

Request / response

URL

GET HTTPS

https://furiousexpansion.com/ren.gif?sid=H4sIAAAAAAAC_1xSvY8bxRse-2f9Cigi0JESLRIFSJxvP7xeb0IVQahyB-RQCqqZnRkz5_XOZmfW9rnhkiBEeQUF5frxfYgmgv-A-OiQkLKdixxFWipAiBLZsTjESvu878wzeud53ne-nJWXpI2SLj-8o6cqTelO2Hadt-6pjOuxcXb3Hc9tuzedeyrrdm46kxUUoxte0Gm7bzsfiGSgd3zXc13P9ZzbqhBST3bWLFT-2IvDdrfT9rxe2wt9TIr_7piyAUMb4KNL8ioUr689l59CJQtkw-_eE2Zgdf7O-8MypVYXGPHzT7JBpscZhlepLBqQ2fnmNLSpCfmmCZ2db1xAj05WLsBUTZrXn4Fl5xupYKPTF2pZCpGB8ZcxHi0g0gUUXSDRj6D4UwIkHLt7yIZnu7oY08MXLF2xNWn9-TvUuCatZ1vIho9vpWri3NVpaZXODCaygposoPoL5OUF7LQJNb5AYh9C8Z-J23wd2fD0Di0LCsWrtX0lF6CmgXL1qwZK2USZNzHkS4fGPcnibofGQkaSu16U0DAI4qgT-rKbhCiTB1D8GElxhLw4wkAdw_AGjK1J46MjjHh1ylPjm-qMp6Zk3ib6mxhUc237M3qqbV9kBLQ4RsGrE5XfN4-Q2P_Np9LwuV4BZbaaU8arueKWoLi_fNP1qOt3A3-bumFnO4p70TYNYrYthOBUhr7LaO9EGltWs_ySvLJu4a_X_sBALJ2YMU9EfsAlYzHrsMiXkei6kZBuID3Xg1EVlGmumzNVNdlqHSBfzfU3DUYvYNILJOo10NIDHVegn1WYZt_STB22jbICXFfIbQv2sDFLL8nW_OP9Wz-sNYgnn0MkP5HNh6SokBcVDtSPBP30wfd7uVVDNaWrud611Ir_g6qne38hUTW5_hJZP7AbbzxEkh_B5P9Umqcmr8m7v5zBaAKWN5EqglRcXUVZBfOvNbvKZ-YL9IsWWNqas7RonbC0SL9el1tLrol4fnsF-zBq6bi8I7wkpmEkRRiGLOz4iZTMjXwZBH4vhjX1wVdPdv4OAAD__6qK4E_6AwAA

IP / ASN

172.255.141.4

AS7979 · SERVERS-COM

Requested by: https://c48416bwsq.pages.dev/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 11:07:47.832 UTC
Times seen: 19281390

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR2
Subject: furiousexpansion.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 81:6B:A0:BD:75:1F:EB:D5:DD:2D:06:86:4C:AC:44:33:8B:11:5A:CF
Valid from: Thu, 25 Jun 2026 21:40:07 GMT
Valid until: Wed, 23 Sep 2026 21:40:06 GMT

Technology fingerprints

Nginx:1.30.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1xSvY8bxRse-2f9Cigi0JESLRIFSJxvP7xeb0IVQahyB-RQCqqZnRkz5_XOZmfW9rnhkiBEeQUF5frxfYgmgv-A-OiQkLKdixxFWipAiBLZsTjESvu878wzeud53ne-nJWXpI2SLj-8o6cqTelO2Hadt-6pjOuxcXb3Hc9tuzedeyrrdm46kxUUoxte0Gm7bzsfiGSgd3zXc13P9ZzbqhBST3bWLFT-2IvDdrfT9rxe2wt9TIr_7piyAUMb4KNL8ioUr689l59CJQtkw-_eE2Zgdf7O-8MypVYXGPHzT7JBpscZhlepLBqQ2fnmNLSpCfmmCZ2db1xAj05WLsBUTZrXn4Fl5xupYKPTF2pZCpGB8ZcxHi0g0gUUXSDRj6D4UwIkHLt7yIZnu7oY08MXLF2xNWn9-TvUuCatZ1vIho9vpWri3NVpaZXODCaygposoPoL5OUF7LQJNb5AYh9C8Z-J23wd2fD0Di0LCsWrtX0lF6CmgXL1qwZK2USZNzHkS4fGPcnibofGQkaSu16U0DAI4qgT-rKbhCiTB1D8GElxhLw4wkAdw_AGjK1J46MjjHh1ylPjm-qMp6Zk3ib6mxhUc237M3qqbV9kBLQ4RsGrE5XfN4-Q2P_Np9LwuV4BZbaaU8arueKWoLi_fNP1qOt3A3-bumFnO4p70TYNYrYthOBUhr7LaO9EGltWs_ySvLJu4a_X_sBALJ2YMU9EfsAlYzHrsMiXkei6kZBuID3Xg1EVlGmumzNVNdlqHSBfzfU3DUYvYNILJOo10NIDHVegn1WYZt_STB22jbICXFfIbQv2sDFLL8nW_OP9Wz-sNYgnn0MkP5HNh6SokBcVDtSPBP30wfd7uVVDNaWrud611Ir_g6qne38hUTW5_hJZP7AbbzxEkh_B5P9Umqcmr8m7v5zBaAKWN5EqglRcXUVZBfOvNbvKZ-YL9IsWWNqas7RonbC0SL9el1tLrol4fnsF-zBq6bi8I7wkpmEkRRiGLOz4iZTMjXwZBH4vhjX1wVdPdv4OAAD__6qK4E_6AwAA HTTP/1.1
Host: furiousexpansion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://c48416bwsq.pages.dev/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15470580=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Fri, 21 Aug 2026 21:20:47 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
x-envoy-upstream-service-time: 1
Host: furiousexpansion.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c9064153e9ef9748013e0d0c7ffc1b0a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

21:20:47.269 GET 200 img 0 B 0 ms 1 alerts

21:20:47.273 GET 200 img 0 B 0 ms 1 alerts

21:20:47.275 GET 200 img 0 B 0 ms 1 alerts

21:20:47.277 GET 200 img 0 B 0 ms 1 alerts

21:20:47.278 GET 200 img 0 B 0 ms 1 alerts

21:20:47.280 GET 200 img 0 B 0 ms 1 alerts

21:20:47.290 GET 200 img 21.8 KB 64 ms —

21:20:47.291 GET 200 img 62.5 KB 81 ms —

21:20:47.301 GET 200 img 25.4 KB 81 ms —

21:20:47.303 GET 200 img 24.6 KB 82 ms —

21:20:47.313 GET 200 img 0 B 0 ms 1 alerts

21:20:47.314 GET 200 img 0 B 0 ms 1 alerts

21:20:47.315 GET 200 img 0 B 0 ms 1 alerts

21:20:47.316 GET 200 img 0 B 0 ms 1 alerts

21:20:47.317 GET 200 img 0 B 0 ms 1 alerts

21:20:47.318 GET 200 img 0 B 0 ms 1 alerts

21:20:47.320 GET 200 img 0 B 0 ms 1 alerts

21:20:47.321 GET 200 img 0 B 0 ms 1 alerts

21:20:47.462 GET 200 xhr 15.2 KB 42 ms 1 alerts

21:20:47.464 GET 200 script 90.2 KB 90 ms —

21:20:47.466 GET 200 xhr 15.2 KB 35 ms 1 alerts

21:20:47.468 GET 200 img 0 B 379 ms 1 alerts

21:20:47.510 GET 200 img 130.8 KB 24 ms —

21:20:47.512 GET 200 img 54.6 KB 25 ms —

21:20:47.513 GET 200 img 154.0 KB 32 ms —

21:20:47.514 GET 200 img 43.6 KB 37 ms —

21:20:47.519 GET 200 img 0 B 0 ms —

21:20:47.520 GET 200 img 0 B 0 ms —

21:20:47.521 GET 200 img 0 B 0 ms —

http://c48416bwsq.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #80

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://c48416bwsq.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #80

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://c48416bwsq.pages.dev/

Domain graph

Network requests