WEBSITE ANALYSIS REPORT

http://netmirror.free.nf

11 Oct 2026 · 17:46:48.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

aarems.org10 captured requests
bancadeltempoidea.org10 captured requests
cdn.show-sb.com2 captured requests
cdn.storageimagedisplay.com5 captured requests
cdnjs.cloudflare.com3 captured requests
fonts.googleapis.com2 captured requests
kettledroopingcontinuation.com15 captured requests
mamshirt.com17 captured requests
netmirror.free.nf3 captured requests
netmirror.fun15 captured requests
pl27829874.profitablecpmratenetwork.com1 captured requests
pl28376549.profitablecpmratenetwork.com1 captured requests
pl28841200.profitablecpmratenetwork.com1 captured requests
pl29283363.profitablecpmratenetwork.com1 captured requests
pl29285395.effectivecpmnetwork.com1 captured requests
pl29688538.effectivecpmnetwork.com1 captured requests
pl30574130.effectivecpmnetwork.com1 captured requests
pl30586612.effectivecpmnetwork.com1 captured requests
pl30587291.effectivecpmnetwork.com1 captured requests
portalfluently.com3 captured requests
protrafficinspector.com3 captured requests
realizationnewestfangs.com5 captured requests
spendsdetachment.com3 captured requests
workdeadlinededicate.com12 captured requests
www.highperformanceformat.com17 captured requests
zoologyfibre.com13 captured requests

Connections

netmirror.free.nf → netmirror.funRedirects to2 captured connections
netmirror.fun → aarems.orgLoads from10 captured connections
netmirror.fun → bancadeltempoidea.orgLoads from10 captured connections
netmirror.fun → cdn.show-sb.comCalls2 captured connections
netmirror.fun → cdn.storageimagedisplay.comLoads from5 captured connections
netmirror.fun → cdnjs.cloudflare.comLoads from3 captured connections
netmirror.fun → fonts.googleapis.comLoads from2 captured connections
netmirror.fun → kettledroopingcontinuation.comCalls11 captured connections
netmirror.fun → kettledroopingcontinuation.comLoads from4 captured connections
netmirror.fun → mamshirt.comLoads from17 captured connections
netmirror.fun → pl27829874.profitablecpmratenetwork.comLoads from1 captured connections
netmirror.fun → pl28376549.profitablecpmratenetwork.comLoads from1 captured connections
netmirror.fun → pl28841200.profitablecpmratenetwork.comLoads from1 captured connections
netmirror.fun → pl29283363.profitablecpmratenetwork.comLoads from1 captured connections
netmirror.fun → pl29285395.effectivecpmnetwork.comLoads from1 captured connections
netmirror.fun → pl29688538.effectivecpmnetwork.comLoads from1 captured connections
netmirror.fun → pl30574130.effectivecpmnetwork.comLoads from1 captured connections
netmirror.fun → pl30586612.effectivecpmnetwork.comLoads from1 captured connections
netmirror.fun → pl30587291.effectivecpmnetwork.comLoads from1 captured connections
netmirror.fun → portalfluently.comLoads from3 captured connections
netmirror.fun → protrafficinspector.comCalls3 captured connections
netmirror.fun → realizationnewestfangs.comCalls4 captured connections
netmirror.fun → realizationnewestfangs.comLoads from1 captured connections
netmirror.fun → spendsdetachment.comCalls2 captured connections
netmirror.fun → spendsdetachment.comLoads from1 captured connections
netmirror.fun → workdeadlinededicate.comCalls9 captured connections
netmirror.fun → workdeadlinededicate.comLoads from3 captured connections
netmirror.fun → www.highperformanceformat.comLoads from17 captured connections
netmirror.fun → zoologyfibre.comCalls9 captured connections
netmirror.fun → zoologyfibre.comLoads from4 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:45:02.705 GET 200 document 844 B 274 ms —

17:45:03.225 GET 200 script 0 B 0 ms —

17:45:03.291 GET 301 document 0 B 32 ms —

17:45:03.327 GET 200 document 81.9 KB 711 ms 1 alerts

17:45:04.485 GET 200 script 77.0 KB 615 ms —

17:45:04.492 GET 200 script 70.7 KB 233 ms 1 alerts

17:45:04.498 GET 200 script 70.7 KB 630 ms 1 alerts

17:45:04.510 GET 200 stylesheet 44.7 KB 572 ms 1 alerts

17:45:04.517 GET 200 stylesheet 99.6 KB 67 ms —

17:45:04.530 GET 403 stylesheet 0 B 0 ms —

17:45:04.533 GET 200 script 6.3 KB 291 ms 1 alerts

17:45:04.552 GET 200 script 85.5 KB 773 ms 1 alerts

17:45:04.554 GET 200 script 13.3 KB 526 ms 1 alerts

17:45:04.571 GET 200 script 53.1 KB 907 ms 2 alerts

17:45:04.575 GET 200 script 53.0 KB 567 ms 2 alerts

17:45:04.581 GET 200 script 50.4 KB 199 ms 2 alerts

17:45:04.589 GET 301 script 0 B 366 ms 1 alerts

17:45:04.592 GET 200 script 50.4 KB 602 ms 2 alerts

17:45:04.595 GET 200 script 52.9 KB 565 ms 2 alerts

17:45:04.597 GET 200 script 50.5 KB 610 ms 2 alerts

17:45:04.600 GET 200 script 50.4 KB 604 ms —

17:45:04.602 GET 200 script 53.0 KB 558 ms 2 alerts

17:45:04.604 GET 200 script 50.4 KB 591 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://pl29283363.profitablecpmratenetwork.com/efb3141c5de1f58ab6efc32025c0e959/invoke.js

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://netmirror.fun/?i=1

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (51585), with no line terminators
MIME type: application/javascript
First seen (UTC): 11 Oct 2026 · 17:47:30.989 UTC
Last seen (UTC): 11 Oct 2026 · 17:47:30.989 UTC
Times seen: 1

Size: 50.4 KB (51587 bytes)
MD5: 0f9a0c7d11fcf8568d7c792ac2e2356e
SHA1: a53c748d87e3d5d179f4e4160ff50a04fc2de7e3
SHA256: 4baf8c682fb9369c7bfcb7f5e5daa7bc385dc9828bf366a294a9fb86285a44f9

Certificate information

Issuer: Let's Encrypt · YR1
Subject: profitablecpmratenetwork.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 4C:37:E4:46:26:7B:4F:F4:55:7A:D7:13:0E:51:76:FC:C0:87:52:10
Valid from: Mon, 14 Sep 2026 01:02:35 GMT
Valid until: Sun, 13 Dec 2026 01:02:34 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /efb3141c5de1f58ab6efc32025c0e959/invoke.js HTTP/1.1
Host: pl29283363.profitablecpmratenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://netmirror.fun/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 11 Oct 2026 17:45:05 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List
access-control-allow-origin: *
content-encoding: zstd
set-cookie: pip_7f849c500357a3327c21b8e9e77edfdd=1; Path=/; Expires=Mon, 12 Oct 2026 17:45:05 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 6
Host: pl29283363.profitablecpmratenetwork.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 83105cf939f9d7b95d8f19d91d8c66ba
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

17:45:04.606 GET 200 script 50.4 KB 597 ms 1 alerts

17:45:04.608 GET 200 script 10.0 KB 816 ms 1 alerts

17:45:04.609 GET 200 script 71.5 KB 1331 ms 1 alerts

17:45:04.611 GET 200 script 2.7 KB 1085 ms 1 alerts

17:45:04.613 GET 200 script 7.7 KB 490 ms 1 alerts

17:45:04.619 GET 200 img 556.7 KB 1657 ms 1 alerts

17:45:04.622 GET 200 img 13.0 KB 669 ms 1 alerts

17:45:04.962 GET 200 script 81.9 KB 407 ms 1 alerts

17:45:05.147 GET 200 script 37.1 KB 230 ms 1 alerts

17:45:05.150 GET 200 xhr 40 B 175 ms —

17:45:05.152 GET 200 script 4.3 KB 121 ms —

17:45:05.158 GET 200 script 37.1 KB 186 ms 1 alerts

17:45:05.160 GET 200 xhr 40 B 161 ms —

17:45:05.163 GET No response script 0 B 0 ms —

17:45:05.167 POST 200 fetch 0 B 153 ms 2 alerts

17:45:05.176 GET 200 script 37.1 KB 174 ms 1 alerts

17:45:05.178 GET 200 xhr 40 B 163 ms —

17:45:05.180 GET 200 script 4.3 KB 75 ms —

17:45:05.183 GET 403 stylesheet 0 B 0 ms —

17:45:05.185 POST 200 fetch 0 B 518 ms 2 alerts

17:45:05.478 GET 200 font 146.6 KB 35 ms —

17:45:05.480 GET 200 font 105.5 KB 33 ms —

17:45:05.483 GET 200 img 831.4 KB 880 ms 1 alerts

17:45:05.513 GET 200 script 4.3 KB 62 ms —

17:45:05.516 GET 200 script 90.0 KB 118 ms —

17:45:05.519 GET No response script 0 B 0 ms —

17:45:05.521 GET 200 script 53.0 KB 143 ms 2 alerts

http://netmirror.free.nf

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://netmirror.free.nf

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://netmirror.free.nf

Domain graph

Network requests