WEBSITE ANALYSIS REPORT

http://goodstream.cc/download/B1rd1grR42qxN9J

05 Sep 2026 · 03:51:33.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

03:51:03.391 GET 200 document 5.5 KB 220 ms —

03:51:04.003 GET 200 stylesheet 157.6 KB 24 ms —

03:51:04.007 GET 200 stylesheet 58.0 KB 34 ms —

03:51:04.008 GET 200 stylesheet 7.4 KB 87 ms —

03:51:04.010 GET 200 script 87.4 KB 88 ms —

03:51:04.012 GET 200 script 82.4 KB 18 ms —

03:51:04.013 GET 200 script 81.2 KB 42 ms —

03:51:04.015 GET 200 script 5 B 269 ms —

03:51:04.017 GET 200 script 45.0 KB 711 ms 1 alerts

03:51:04.019 GET 200 script 14.1 KB 128 ms —

03:51:04.178 GET 200 script 87.4 KB 23 ms —

03:51:04.219 GET 200 script 82.4 KB 9 ms —

03:51:04.245 GET 200 script 81.2 KB 11 ms —

03:51:04.288 GET 302 script 0 B 22 ms —

03:51:04.314 GET 200 script 20.4 KB 13 ms —

03:51:04.394 POST 200 xhr 0 B 46 ms —

03:51:04.401 GET 404 img 14 B 91 ms —

03:51:04.742 GET 200 xhr 40 B 145 ms —

03:51:04.746 GET 200 xhr 14.1 KB 585 ms 1 alerts

03:51:05.356 GET 200 img 26.1 KB 135 ms —

03:51:05.358 GET 200 img 146.2 KB 393 ms —

03:51:05.360 GET 200 img 34.4 KB 363 ms —

03:51:05.361 GET 200 img 29.4 KB 348 ms —

03:51:05.372 GET 200 img 0 B 0 ms 1 alerts

03:51:05.374 GET 200 img 0 B 0 ms 1 alerts

03:51:05.377 GET 200 img 0 B 0 ms 1 alerts

Transaction #09

Request / response

URL

GET HTTPS

https://exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSPYwbRRgdOxYUKZBQlAqhLQCBxDmz9q5_ki7ip7ncERIUJKr5vcx5vbPZmbV9ri4EUaJDogBRsPd8lxMFEVS0yEeHhHTbucg1VNAiIUpkx-IQI833fTNv9M178-bTw-KcNFGwxXu37NQkCbsWN2nw-j2TSjt2wdbdIKRNeiO4Z9JOdCOYLEM-uh62oyZ9I3hXiYG91qIhpSENg3dMrrSdXFuhMNmTsB83O1EzDHvNMG5hkv9_xxU1OFaDHJ2TF2Fk9cJv-iMYMUc6_P4t5QbeZm--PSwS5m2OkTz5IB2kdpxieFHqvAadnqxPw7qKkC_rsOnJWgXs6GipAtxUpH71KXh6sqYKPjp-xpYnUCm4vIzxaA6VzGHYHMI-gpFnBBASW9tIh4-3bD5me89QtkQr0vjrT5hxRRpPryAdPrmZmElwxyaFNzZ1mOgSZjKH2ZkjK07hp3WY8SmE_xhG_kpo_WWkw-NbrMgZjCxX8o2eg7kaiuU0NRS6jiKrYygXAev3NO93ItZXuqslDbuCxe12vxvFLd0RMQrxEEYeQOT7yPJ9DMwBnKzB-YrUbu9jJMtjmbiWKx_LxBU8XOfWOrfLmfU7h-zY-h2VErD8ALksj0z2wD2C8JdmU-3kzC4D476cMS7LmZGeIH-weIWGjHY0pxtatqONbkT5Buc03OiJjuxxrXqtdnSknS_Kw2xte-2r3y9joBaBlEwr3ulrTnXElOrQdjeMaYcyTgXtd-BMCePqq8eZmopsfpMiM2f3--DsFC45hTCvghUh2LgEu19imn6XDdie87liw6YQkLZE5hvwezUoTw6Tc3Jl9v7dmz-tzFQ_3oYSv5D1gMhLZHmJXfMzwU7y8IftzJuhmbKlu3c88-o5MHO2_TeEqcjV5z9bfbPrL30Ike3DZf92miUuq8jmroazBDy7hMQQJOriKsZLuP-s-UV96D7BTt4ATxoznuSNI57kyRcVeQ22Ipu9P1a8193NIqAyUqHos7irVRzHPI5aQmtOuy3dbrd6fXhX7X79-bf_DAAvxtHdAAQAAA==

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://goodstream.cc/download/B1rd1grR42qxN9J

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 13:07:51.045 UTC
Times seen: 19283510

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: exemplarfederallithe.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: AF:AE:57:B9:3C:1C:B9:66:C5:AF:F5:46:20:EB:D7:6B:69:D1:62:E9
Valid from: Mon, 24 Aug 2026 21:46:16 GMT
Valid until: Sun, 22 Nov 2026 21:46:15 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1xSPYwbRRgdOxYUKZBQlAqhLQCBxDmz9q5_ki7ip7ncERIUJKr5vcx5vbPZmbV9ri4EUaJDogBRsPd8lxMFEVS0yEeHhHTbucg1VNAiIUpkx-IQI833fTNv9M178-bTw-KcNFGwxXu37NQkCbsWN2nw-j2TSjt2wdbdIKRNeiO4Z9JOdCOYLEM-uh62oyZ9I3hXiYG91qIhpSENg3dMrrSdXFuhMNmTsB83O1EzDHvNMG5hkv9_xxU1OFaDHJ2TF2Fk9cJv-iMYMUc6_P4t5QbeZm--PSwS5m2OkTz5IB2kdpxieFHqvAadnqxPw7qKkC_rsOnJWgXs6GipAtxUpH71KXh6sqYKPjp-xpYnUCm4vIzxaA6VzGHYHMI-gpFnBBASW9tIh4-3bD5me89QtkQr0vjrT5hxRRpPryAdPrmZmElwxyaFNzZ1mOgSZjKH2ZkjK07hp3WY8SmE_xhG_kpo_WWkw-NbrMgZjCxX8o2eg7kaiuU0NRS6jiKrYygXAev3NO93ItZXuqslDbuCxe12vxvFLd0RMQrxEEYeQOT7yPJ9DMwBnKzB-YrUbu9jJMtjmbiWKx_LxBU8XOfWOrfLmfU7h-zY-h2VErD8ALksj0z2wD2C8JdmU-3kzC4D476cMS7LmZGeIH-weIWGjHY0pxtatqONbkT5Buc03OiJjuxxrXqtdnSknS_Kw2xte-2r3y9joBaBlEwr3ulrTnXElOrQdjeMaYcyTgXtd-BMCePqq8eZmopsfpMiM2f3--DsFC45hTCvghUh2LgEu19imn6XDdie87liw6YQkLZE5hvwezUoTw6Tc3Jl9v7dmz-tzFQ_3oYSv5D1gMhLZHmJXfMzwU7y8IftzJuhmbKlu3c88-o5MHO2_TeEqcjV5z9bfbPrL30Ike3DZf92miUuq8jmroazBDy7hMQQJOriKsZLuP-s-UV96D7BTt4ATxoznuSNI57kyRcVeQ22Ipu9P1a8193NIqAyUqHos7irVRzHPI5aQmtOuy3dbrd6fXhX7X79-bf_DAAvxtHdAAQAAA== HTTP/1.1
Host: exemplarfederallithe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://goodstream.cc/
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl26863883=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sat, 05 Sep 2026 03:51:05 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
x-envoy-upstream-service-time: 1
Host: exemplarfederallithe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bc1f4a69005190515d52a10d3d63280e
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

03:51:05.379 GET 200 img 0 B 0 ms 1 alerts

03:51:05.382 GET 200 img 0 B 0 ms 1 alerts

03:51:05.384 GET 200 img 0 B 0 ms 1 alerts

03:51:05.385 GET 200 img 0 B 0 ms 1 alerts

03:51:05.387 GET 200 img 0 B 0 ms 1 alerts

03:51:05.743 POST 200 fetch 0 B 402 ms 1 alerts

http://goodstream.cc/download/B1rd1grR42qxN9J

Domain graph

Hostnames

Connections