WEBSITE ANALYSIS REPORT

http://mwillow-earn.appwrite.network

12 Aug 2026 · 05:40:57.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.redgarto.com6 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com9 captured requests
consumeririssalary.com9 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com4 captured requests
kettledroopingcontinuation.com4 captured requests
mwillow-earn.appwrite.network4 captured requests
portalfluently.com2 captured requests
protrafficinspector.com2 captured requests
spendsdetachment.com3 captured requests
windingfold.com7 captured requests
workdeadlinededicate.com12 captured requests
zoologyfibre.com6 captured requests

Connections

mwillow-earn.appwrite.network → cdn.redgarto.comCalls3 captured connections
mwillow-earn.appwrite.network → cdn.redgarto.comLoads from3 captured connections
mwillow-earn.appwrite.network → cdn.show-sb.comCalls1 captured connections
mwillow-earn.appwrite.network → cdn.storageimagedisplay.comLoads from9 captured connections
mwillow-earn.appwrite.network → consumeririssalary.comCalls1 captured connections
mwillow-earn.appwrite.network → consumeririssalary.comLoads from8 captured connections
mwillow-earn.appwrite.network → flushpersist.comLoads from2 captured connections
mwillow-earn.appwrite.network → fonts.googleapis.comLoads from1 captured connections
mwillow-earn.appwrite.network → fonts.gstatic.comLoads from4 captured connections
mwillow-earn.appwrite.network → kettledroopingcontinuation.comCalls2 captured connections
mwillow-earn.appwrite.network → kettledroopingcontinuation.comLoads from2 captured connections
mwillow-earn.appwrite.network → portalfluently.comLoads from2 captured connections
mwillow-earn.appwrite.network → protrafficinspector.comCalls2 captured connections
mwillow-earn.appwrite.network → spendsdetachment.comCalls2 captured connections
mwillow-earn.appwrite.network → spendsdetachment.comLoads from1 captured connections
mwillow-earn.appwrite.network → windingfold.comLoads from7 captured connections
mwillow-earn.appwrite.network → workdeadlinededicate.comCalls5 captured connections
mwillow-earn.appwrite.network → workdeadlinededicate.comLoads from7 captured connections
mwillow-earn.appwrite.network → zoologyfibre.comCalls4 captured connections
mwillow-earn.appwrite.network → zoologyfibre.comLoads from2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

05:40:27.460 GET 200 document 1.2 KB 462 ms —

05:40:28.335 GET 200 script 192.0 KB 294 ms —

05:40:28.338 GET 200 stylesheet 2.5 KB 239 ms —

05:40:28.647 GET 200 script 94.8 KB 614 ms 1 alerts

05:40:28.649 GET 200 script 66.1 KB 649 ms 1 alerts

05:40:29.292 GET 200 script 83.4 KB 154 ms 1 alerts

05:40:29.296 GET 200 xhr 40 B 131 ms —

05:40:29.333 GET 200 script 83.4 KB 121 ms 1 alerts

05:40:29.336 GET 200 xhr 40 B 93 ms —

05:40:29.339 GET 200 img 0 B 399 ms 3 alerts

05:40:29.383 GET 200 script 32.2 KB 99 ms 1 alerts

05:40:29.389 GET 200 script 34.6 KB 108 ms 1 alerts

05:40:29.391 GET 200 script 34.6 KB 471 ms 1 alerts

05:40:29.400 GET 200 script 34.6 KB 182 ms 1 alerts

05:40:29.403 GET 200 script 34.6 KB 469 ms 1 alerts

05:40:29.500 GET 200 xhr 15.0 KB 706 ms 1 alerts

05:40:29.520 GET 307 xhr 0 B 509 ms 2 alerts

05:40:29.603 GET 307 xhr 0 B 383 ms 1 alerts

05:40:29.700 GET 200 img 1.2 KB 1147 ms —

05:40:29.811 GET 200 xhr 5.6 KB 546 ms 2 alerts

05:40:29.882 GET 307 xhr 0 B 96 ms 3 alerts

05:40:29.900 GET 307 xhr 0 B 181 ms 1 alerts

05:40:30.089 GET 200 xhr 4.0 KB 118 ms 3 alerts

05:40:30.092 GET 200 xhr 4.0 KB 110 ms 1 alerts

05:40:30.136 GET 200 xhr 4.0 KB 113 ms 2 alerts

05:40:30.139 GET 200 xhr 4.0 KB 167 ms 1 alerts

05:40:30.142 GET 200 img 0 B 0 ms 2 alerts

05:40:30.143 GET 200 img 0 B 0 ms 2 alerts

05:40:30.280 GET 200 img 43.6 KB 153 ms —

05:40:30.302 GET 200 img 135.5 KB 338 ms —

05:40:30.304 GET 200 img 19.0 KB 322 ms —

05:40:30.306 GET 200 img 121.8 KB 349 ms —

05:40:30.325 GET 200 img 0 B 0 ms 1 alerts

05:40:30.327 GET 200 img 0 B 0 ms 1 alerts

05:40:30.330 GET 200 img 0 B 0 ms 1 alerts

05:40:30.332 GET 200 img 0 B 0 ms 1 alerts

05:40:30.333 GET 200 img 0 B 0 ms 1 alerts

05:40:30.335 GET 200 img 0 B 0 ms 1 alerts

05:40:30.336 GET 200 img 0 B 0 ms 1 alerts

05:40:30.339 GET 200 img 0 B 0 ms 1 alerts

05:40:30.342 GET 200 img 28.4 KB 119 ms —

05:40:30.344 GET 200 img 0 B 0 ms 1 alerts

05:40:30.347 GET 200 img 23.1 KB 110 ms —

05:40:30.348 GET 200 img 0 B 0 ms 3 alerts

05:40:30.361 GET 200 img 32.4 KB 81 ms —

05:40:30.362 GET 200 img 0 B 0 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://spendsdetachment.com/impr.gif?sid=H4sIAAAAAAAC_1xSO48cRRetnrW-LyBAIEOChDtwABI92--HnVk8Iq8RNnLgqKqraihPT3e7q3t6PCJYs8jxWg4g7D2z680s-AFIaJYMCcktkgm8CSIiIAAREKFZj1iLCu69Veeq6py65-FBc0qGaOjq4-vFXGUZ3Q6GtvnObZXzotXmzi3TsYf2VfO2ykP_qjlbh2p6xfH8of2u-ZFIx8W2azu27diO-aGqhCxm22coVPnUSYJh6A8dJx46gYtZ9d8T3RjQ1ACfnpLXoXj_6i_yDlS6RD755n2hx3VRvvfBpMloXVSY8uNP83FetDkm56WsDMj8eNONQveEfD1AkR9vVKCYHq5VgKmeDN58DpYfb6iCTY9esGUZRA7GX0E7XUJkJ1B0ibTYg-LPCJBy7NxAPnmyU1Qtvf8CpWu0Jxf--gOq7cmF5xeRT55ey9TMvFlkTa2KXGMmO6jZEmq0RNmcoJ4PoNoTpPUXUPwnYg_eRj45uk6bikLx1eVISBm5IbcST8SW7wTUYk7MLS5pZDNfeJHNz_5IySWo3kKjDTTKQCMHaMoBJnxl0iSWLAl9mggZSW47UUoDz0siP3BlmAZo0gdQfB9ptYuy2sVYPXpm_AbNDeiaYMq7I55pV3dPeKYb5myyu8letyjq0QE9KuqRyAlotY-Kd4eqvKf3kNZbi7nUfFGsA2V1t6CMdwvFa4Lq3uqy7SRS-lFqxUkYW5GksZWEPLKSgFI3lFL40j-Uum5ebo0T14ooiy3Go9AKQieRNrNZ4rsH5Sl5bT0L4-dLjzEWKzMIAx4GnsPDhKcxl5EvHOF5kQwCylnIoVUHpQmoNjBXPblzaYxS9cT7-1cwegKdnSBVW6DNW6Dtwg9j0M8Q2pjn301alWVFawla5UNalm2lajHMRd0W1Ri86FDWF1DfNw6yU3Jx8cmta9-fGUUOv4JIfySbhbTqUFYd7qofCEbZg29vlLWaqDldO-dmTWvxP1DVE2PrEVLVkzf-3Dsz8ZXR70jLXejy37sWmS57Ih4_hC4IWEmQKYJMnD9GWQf90p6d1wf6S4wqAywzFiyryCHLqmwfWq3M2HVtO3XchCeBn3ixFIHvRJEIHC8Utheg1v3dz_-_808AAAD__1tU7ltKBAAA

IP / ASN

172.240.127.242

AS7979 · SERVERS-COM

Requested by: https://mwillow-earn.appwrite.network/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 11:29:47.747 UTC
Times seen: 19330748

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR2
Subject: spendsdetachment.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: ED:7A:AE:D7:41:6B:59:34:BC:24:1A:71:55:02:F6:3E:BB:AB:82:0B
Valid from: Sat, 27 Jun 2026 02:47:50 GMT
Valid until: Fri, 25 Sep 2026 02:47:49 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1xSO48cRRetnrW-LyBAIEOChDtwABI92--HnVk8Iq8RNnLgqKqraihPT3e7q3t6PCJYs8jxWg4g7D2z680s-AFIaJYMCcktkgm8CSIiIAAREKFZj1iLCu69Veeq6py65-FBc0qGaOjq4-vFXGUZ3Q6GtvnObZXzotXmzi3TsYf2VfO2ykP_qjlbh2p6xfH8of2u-ZFIx8W2azu27diO-aGqhCxm22coVPnUSYJh6A8dJx46gYtZ9d8T3RjQ1ACfnpLXoXj_6i_yDlS6RD755n2hx3VRvvfBpMloXVSY8uNP83FetDkm56WsDMj8eNONQveEfD1AkR9vVKCYHq5VgKmeDN58DpYfb6iCTY9esGUZRA7GX0E7XUJkJ1B0ibTYg-LPCJBy7NxAPnmyU1Qtvf8CpWu0Jxf--gOq7cmF5xeRT55ey9TMvFlkTa2KXGMmO6jZEmq0RNmcoJ4PoNoTpPUXUPwnYg_eRj45uk6bikLx1eVISBm5IbcST8SW7wTUYk7MLS5pZDNfeJHNz_5IySWo3kKjDTTKQCMHaMoBJnxl0iSWLAl9mggZSW47UUoDz0siP3BlmAZo0gdQfB9ptYuy2sVYPXpm_AbNDeiaYMq7I55pV3dPeKYb5myyu8letyjq0QE9KuqRyAlotY-Kd4eqvKf3kNZbi7nUfFGsA2V1t6CMdwvFa4Lq3uqy7SRS-lFqxUkYW5GksZWEPLKSgFI3lFL40j-Uum5ebo0T14ooiy3Go9AKQieRNrNZ4rsH5Sl5bT0L4-dLjzEWKzMIAx4GnsPDhKcxl5EvHOF5kQwCylnIoVUHpQmoNjBXPblzaYxS9cT7-1cwegKdnSBVW6DNW6Dtwg9j0M8Q2pjn301alWVFawla5UNalm2lajHMRd0W1Ri86FDWF1DfNw6yU3Jx8cmta9-fGUUOv4JIfySbhbTqUFYd7qofCEbZg29vlLWaqDldO-dmTWvxP1DVE2PrEVLVkzf-3Dsz8ZXR70jLXejy37sWmS57Ih4_hC4IWEmQKYJMnD9GWQf90p6d1wf6S4wqAywzFiyryCHLqmwfWq3M2HVtO3XchCeBn3ixFIHvRJEIHC8Utheg1v3dz_-_808AAAD__1tU7ltKBAAA HTTP/1.1
Host: spendsdetachment.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=7eff726d-93e8-415a-b18d-dfa70b4e370d:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.fjJ2AL64nAhKFgpmOqHtrA1V1L2QvdSxc6bXzpxDvss; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl30678931=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Wed, 12 Aug 2026 05:40:30 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Model,X-Ucbrowser-Device-Ua
access-control-allow-credentials: true
access-control-allow-origin: *
set-cookie: iprc_c+504943b5ab9c6e9338eb01133eddf654=1438851; Path=/; Expires=Thu, 13 Aug 2026 05:40:30 GMT; Secure; SameSite=None
iprc_c-1438851=8; Path=/; Expires=Thu, 13 Aug 2026 05:40:30 GMT; Secure; SameSite=None
vary: Origin
x-envoy-upstream-service-time: 2
Host: spendsdetachment.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7002f12db832b1be3a616d0954fe1ec2
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

05:40:30.377 GET 200 img 25.0 KB 76 ms —

05:40:30.378 GET 200 img 0 B 0 ms 1 alerts

05:40:30.383 GET 200 xhr 1.5 KB 33 ms 2 alerts

05:40:30.385 POST 200 fetch 0 B 98 ms 2 alerts

http://mwillow-earn.appwrite.network

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://mwillow-earn.appwrite.network

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://mwillow-earn.appwrite.network

Domain graph

Network requests