WEBSITE ANALYSIS REPORT

http://golden-bird.biz/

07 Nov 2025 · 06:05:21.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:04:59.180 GET 200 document 33.2 KB 171 ms —

06:04:59.504 GET 200 stylesheet 5.6 KB 84 ms —

06:04:59.506 GET 200 stylesheet 109.8 KB 148 ms —

06:04:59.507 GET 200 stylesheet 74.5 KB 123 ms —

06:04:59.508 GET 200 stylesheet 26.2 KB 341 ms —

06:04:59.510 GET 200 stylesheet 767 B 81 ms —

06:04:59.511 GET 200 script 45.3 KB 828 ms 2 alerts

06:04:59.512 GET 200 img 62.2 KB 137 ms —

06:04:59.513 GET 200 script 45.3 KB 836 ms 2 alerts

06:04:59.515 GET 200 script 45.3 KB 815 ms 2 alerts

06:04:59.516 GET 200 script 42.2 KB 823 ms 2 alerts

06:04:59.517 GET 200 script 85.5 KB 120 ms —

06:04:59.518 GET 200 script 13.3 KB 98 ms —

06:04:59.519 GET 200 script 1.1 KB 76 ms —

06:04:59.520 GET 200 script 6.8 KB 79 ms —

06:04:59.521 GET 200 script 2.5 KB 106 ms —

06:04:59.601 GET 200 stylesheet 74.5 KB 120 ms —

06:04:59.760 GET 200 font 47.2 KB 232 ms —

06:05:00.033 GET 200 script 6.3 KB 778 ms 2 alerts

06:05:00.046 GET 200 xhr 40 B 250 ms —

06:05:00.066 GET 200 font 62.2 KB 122 ms —

06:05:00.075 GET 200 font 32.1 KB 31 ms —

06:05:00.118 GET 200 script 6.3 KB 683 ms 3 alerts

06:05:00.123 GET 200 xhr 40 B 60 ms —

06:05:00.125 GET 200 script 6.3 KB 517 ms 2 alerts

06:05:00.139 GET 200 xhr 40 B 156 ms —

06:05:00.161 GET 200 xhr 40 B 23 ms —

06:05:00.163 GET 200 xhr 0 B 704 ms 2 alerts

06:05:00.260 GET 200 font 18.9 KB 11 ms —

06:05:00.261 GET 200 lazy-img 10.1 KB 34 ms —

06:05:00.263 GET 200 font 47.2 KB 18 ms —

06:05:00.320 GET 307 xhr 4.5 KB 819 ms 3 alerts

06:05:00.352 GET 307 xhr 4.4 KB 197 ms 2 alerts

06:05:00.355 GET 307 xhr 4.6 KB 758 ms 2 alerts

06:05:00.476 GET 200 xhr 0 B 223 ms 2 alerts

06:05:00.553 GET 200 xhr 0 B 531 ms 2 alerts

06:05:00.557 GET 200 xhr 0 B 672 ms 2 alerts

Transaction #35

Request / response

URL

GET HTTPS

https://sundayplough.com/ntv.json?key=17a994fc1f9b665d1bf75035efbac9d3&vstc=4&uuid=022a04c0-9491-4218-a5a8-51d48c1703a7%3A2%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D&rb=

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://golden-bird.biz/

Resource information

File type: Not recorded
MIME type: application/json
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 09:29:56.102 UTC
Times seen: 19328616

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: sundayplough.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 9D:67:B3:85:E0:58:11:69:B0:9F:68:27:CA:DB:70:8A:11:C3:09:DA
Valid from: Fri, 17 Oct 2025 10:20:18 GMT
Valid until: Thu, 15 Jan 2026 10:20:17 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
DNS0 Zero Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ntv.json?key=17a994fc1f9b665d1bf75035efbac9d3&vstc=4&uuid=022a04c0-9491-4218-a5a8-51d48c1703a7%3A2%3A1&custom=%7B%22d37e3bc4%22%3A%22a%22%7D&rb= HTTP/1.1
Host: sundayplough.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://golden-bird.biz
DNT: 1
Connection: keep-alive
Referer: https://golden-bird.biz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 07 Nov 2025 06:05:00 GMT
Content-Type: application/json
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://golden-bird.biz
access-control-allow-credentials: true
set-cookie: uid_id2=022a04c0-9491-4218-a5a8-51d48c1703a7:2:1; expires=Fri, 14 Nov 2025 06:05:00 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 18
Host: sundayplough.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 7804f9f9a1d1f3a47adabedfb8f62c46
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

06:05:00.568 GET 200 xhr 4.4 KB 125 ms 2 alerts

06:05:00.733 GET 200 img 42.6 KB 482 ms —

06:05:00.737 GET 200 img 0 B 99 ms 2 alerts

06:05:00.782 GET 200 xhr 4.5 KB 124 ms 3 alerts

06:05:00.791 GET 200 xhr 4.6 KB 129 ms 2 alerts

06:05:00.938 GET 200 img 54.9 KB 86 ms —

06:05:00.944 GET 200 img 0 B 97 ms 3 alerts

06:05:00.958 GET 200 img 9.4 KB 113 ms —

06:05:00.965 GET 200 img 64.0 KB 70 ms —

06:05:00.966 GET 200 img 0 B 118 ms 2 alerts

http://golden-bird.biz/

Domain graph

Hostnames

Connections