WEBSITE ANALYSIS REPORT

http://mwillow-earn.appwrite.network

12 Aug 2026 · 05:40:57.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.redgarto.com6 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com9 captured requests
consumeririssalary.com9 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com4 captured requests
kettledroopingcontinuation.com4 captured requests
mwillow-earn.appwrite.network4 captured requests
portalfluently.com2 captured requests
protrafficinspector.com2 captured requests
spendsdetachment.com3 captured requests
windingfold.com7 captured requests
workdeadlinededicate.com12 captured requests
zoologyfibre.com6 captured requests

Connections

mwillow-earn.appwrite.network → cdn.redgarto.comCalls3 captured connections
mwillow-earn.appwrite.network → cdn.redgarto.comLoads from3 captured connections
mwillow-earn.appwrite.network → cdn.show-sb.comCalls1 captured connections
mwillow-earn.appwrite.network → cdn.storageimagedisplay.comLoads from9 captured connections
mwillow-earn.appwrite.network → consumeririssalary.comCalls1 captured connections
mwillow-earn.appwrite.network → consumeririssalary.comLoads from8 captured connections
mwillow-earn.appwrite.network → flushpersist.comLoads from2 captured connections
mwillow-earn.appwrite.network → fonts.googleapis.comLoads from1 captured connections
mwillow-earn.appwrite.network → fonts.gstatic.comLoads from4 captured connections
mwillow-earn.appwrite.network → kettledroopingcontinuation.comCalls2 captured connections
mwillow-earn.appwrite.network → kettledroopingcontinuation.comLoads from2 captured connections
mwillow-earn.appwrite.network → portalfluently.comLoads from2 captured connections
mwillow-earn.appwrite.network → protrafficinspector.comCalls2 captured connections
mwillow-earn.appwrite.network → spendsdetachment.comCalls2 captured connections
mwillow-earn.appwrite.network → spendsdetachment.comLoads from1 captured connections
mwillow-earn.appwrite.network → windingfold.comLoads from7 captured connections
mwillow-earn.appwrite.network → workdeadlinededicate.comCalls5 captured connections
mwillow-earn.appwrite.network → workdeadlinededicate.comLoads from7 captured connections
mwillow-earn.appwrite.network → zoologyfibre.comCalls4 captured connections
mwillow-earn.appwrite.network → zoologyfibre.comLoads from2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

05:40:27.460 GET 200 document 1.2 KB 462 ms —

05:40:28.335 GET 200 script 192.0 KB 294 ms —

05:40:28.338 GET 200 stylesheet 2.5 KB 239 ms —

05:40:28.647 GET 200 script 94.8 KB 614 ms 1 alerts

05:40:28.649 GET 200 script 66.1 KB 649 ms 1 alerts

05:40:29.292 GET 200 script 83.4 KB 154 ms 1 alerts

05:40:29.296 GET 200 xhr 40 B 131 ms —

05:40:29.333 GET 200 script 83.4 KB 121 ms 1 alerts

05:40:29.336 GET 200 xhr 40 B 93 ms —

05:40:29.339 GET 200 img 0 B 399 ms 3 alerts

05:40:29.383 GET 200 script 32.2 KB 99 ms 1 alerts

05:40:29.389 GET 200 script 34.6 KB 108 ms 1 alerts

Transaction #14

Request / response

URL

GET HTTPS

https://windingfold.com/565d6531d69dc8df74e1e337f55adb6d/invoke.js

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://mwillow-earn.appwrite.network/

Resource information

File type: JavaScript source, ASCII text, with very long lines (35417), with no line terminators
MIME type: application/javascript
First seen (UTC): 12 Aug 2026 · 04:33:47.497 UTC
Last seen (UTC): 12 Aug 2026 · 05:51:48.864 UTC
Times seen: 8

Size: 34.6 KB (35417 bytes)
MD5: fc9ef245fca7d8f84cc17fd52534c00c
SHA1: 8591dd3a4eb972a9e5c50edd2bd199334f379d78
SHA256: 87ef7c45725da6523b43a3d920bd0cc7748a001d228c54a5f8e0305a75f3926b

Certificate information

Issuer: Let's Encrypt · YR2
Subject: windingfold.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 06:50:F3:5F:F9:95:18:24:6E:73:B9:84:3A:7C:A8:4F:36:34:CF:85
Valid from: Sun, 09 Aug 2026 02:31:24 GMT
Valid until: Sat, 07 Nov 2026 02:31:23 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /565d6531d69dc8df74e1e337f55adb6d/invoke.js HTTP/1.1
Host: windingfold.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://mwillow-earn.appwrite.network/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Wed, 12 Aug 2026 05:40:29 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform
access-control-allow-origin: *
content-encoding: zstd
set-cookie: pip_3a5d33348db1acbe233ded826bc6f945=1; Path=/; Expires=Thu, 13 Aug 2026 05:40:29 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 9
Host: windingfold.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 6404738374f551d7e66e5fbc6018b54b
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

05:40:29.391 GET 200 script 34.6 KB 471 ms 1 alerts

05:40:29.400 GET 200 script 34.6 KB 182 ms 1 alerts

05:40:29.403 GET 200 script 34.6 KB 469 ms 1 alerts

05:40:29.500 GET 200 xhr 15.0 KB 706 ms 1 alerts

05:40:29.520 GET 307 xhr 0 B 509 ms 2 alerts

05:40:29.603 GET 307 xhr 0 B 383 ms 1 alerts

05:40:29.700 GET 200 img 1.2 KB 1147 ms —

05:40:29.811 GET 200 xhr 5.6 KB 546 ms 2 alerts

05:40:29.882 GET 307 xhr 0 B 96 ms 3 alerts

05:40:29.900 GET 307 xhr 0 B 181 ms 1 alerts

05:40:30.089 GET 200 xhr 4.0 KB 118 ms 3 alerts

05:40:30.092 GET 200 xhr 4.0 KB 110 ms 1 alerts

05:40:30.136 GET 200 xhr 4.0 KB 113 ms 2 alerts

05:40:30.139 GET 200 xhr 4.0 KB 167 ms 1 alerts

05:40:30.142 GET 200 img 0 B 0 ms 2 alerts

05:40:30.143 GET 200 img 0 B 0 ms 2 alerts

05:40:30.280 GET 200 img 43.6 KB 153 ms —

05:40:30.302 GET 200 img 135.5 KB 338 ms —

05:40:30.304 GET 200 img 19.0 KB 322 ms —

05:40:30.306 GET 200 img 121.8 KB 349 ms —

05:40:30.325 GET 200 img 0 B 0 ms 1 alerts

05:40:30.327 GET 200 img 0 B 0 ms 1 alerts

05:40:30.330 GET 200 img 0 B 0 ms 1 alerts

05:40:30.332 GET 200 img 0 B 0 ms 1 alerts

05:40:30.333 GET 200 img 0 B 0 ms 1 alerts

05:40:30.335 GET 200 img 0 B 0 ms 1 alerts

05:40:30.336 GET 200 img 0 B 0 ms 1 alerts

05:40:30.339 GET 200 img 0 B 0 ms 1 alerts

05:40:30.342 GET 200 img 28.4 KB 119 ms —

05:40:30.344 GET 200 img 0 B 0 ms 1 alerts

05:40:30.347 GET 200 img 23.1 KB 110 ms —

05:40:30.348 GET 200 img 0 B 0 ms 3 alerts

05:40:30.361 GET 200 img 32.4 KB 81 ms —

05:40:30.362 GET 200 img 0 B 0 ms 2 alerts

05:40:30.377 GET 200 img 25.0 KB 76 ms —

05:40:30.378 GET 200 img 0 B 0 ms 1 alerts

05:40:30.383 GET 200 xhr 1.5 KB 33 ms 2 alerts

05:40:30.385 POST 200 fetch 0 B 98 ms 2 alerts

http://mwillow-earn.appwrite.network

Domain graph

Hostnames

Connections

Network requests

Transaction #14

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://mwillow-earn.appwrite.network

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #14

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://mwillow-earn.appwrite.network

Domain graph

Network requests