WEBSITE ANALYSIS REPORT

https://m.thothd.com/search/pawg-candid-rave/

30 May 2026 · 04:03:50.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

04:03:27.618 GET 200 document 68.4 KB 246 ms —

04:03:28.077 GET 200 stylesheet 136.8 KB 28 ms —

04:03:28.079 GET 200 stylesheet 5.3 KB 26 ms —

04:03:28.080 GET 200 img 250 B 19 ms —

04:03:28.090 GET 200 img 182 B 18 ms —

04:03:28.092 GET 200 img 184 B 16 ms —

04:03:28.094 GET 200 img 186 B 15 ms —

04:03:28.095 GET 200 img 184 B 17 ms —

04:03:28.097 GET 200 img 224 B 15 ms —

04:03:28.098 GET 200 img 2.0 KB 31 ms —

04:03:28.100 GET 200 img 8.2 KB 31 ms —

04:03:28.102 GET 200 img 8.0 KB 31 ms —

04:03:28.103 GET 200 script 203.1 KB 44 ms —

04:03:28.107 GET 302 script 64.9 KB 92 ms —

04:03:28.109 GET 200 script 32.4 KB 349 ms —

04:03:28.238 GET 200 img 3.1 KB 10 ms —

04:03:28.242 GET 200 font 9.3 KB 15 ms —

04:03:28.349 GET 200 font 9.4 KB 17 ms —

04:03:28.351 GET 200 script 64.9 KB 17 ms —

04:03:28.514 GET 200 img 43 B 41 ms —

04:03:28.597 POST 204 xhr 0 B 5 ms —

04:03:28.600 GET 200 img 5.8 KB 14 ms —

04:03:28.601 GET 200 img 9.0 KB 13 ms —

04:03:28.603 GET 200 img 4.7 KB 12 ms —

04:03:28.604 GET 200 img 5.0 KB 13 ms —

04:03:28.604 GET 200 img 5.3 KB 20 ms —

04:03:28.605 GET 200 img 8.5 KB 15 ms —

04:03:28.608 GET 200 img 3.8 KB 16 ms —

04:03:28.610 GET 200 img 5.8 KB 16 ms —

04:03:28.611 GET 200 img 2.1 KB 16 ms —

04:03:28.613 GET 200 img 14.5 KB 24 ms —

04:03:28.617 GET 200 img 6.8 KB 19 ms —

04:03:28.619 GET 200 img 5.3 KB 19 ms —

04:03:28.620 GET 200 img 4.4 KB 18 ms —

04:03:28.623 GET 200 img 4.5 KB 17 ms —

04:03:28.625 GET 200 script 73.0 KB 116 ms —

04:03:28.633 GET 200 script 132.8 KB 170 ms 1 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://js.wpadmngr.com/static/adManager.js

IP / ASN

45.133.44.53

AS39572 · DataWeb Global Group B.V.

Requested by: https://m.thothd.com/search/pawg-candid-rave/

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 28 May 2026 · 07:30:03.501 UTC
Last seen (UTC): 06 Jun 2026 · 09:04:24.709 UTC
Times seen: 162

Size: 132.8 KB (135977 bytes)
MD5: 641e853550068a030be7a7030a7d5147
SHA1: e6796b8bd766045bef85d76c3a91f5fd57a35325
SHA256: 9bde449edac82c7f09da68f25279046e4b33a234ecf6f66fce6741f102870653

Certificate information

Issuer: Let's Encrypt · R13
Subject: js.wpadmngr.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 75:09:B5:C2:62:81:54:4A:7F:92:6C:90:50:AD:EB:99:09:FE:E9:30
Valid from: Thu, 30 Apr 2026 04:32:09 GMT
Valid until: Wed, 29 Jul 2026 04:32:08 GMT

Technology fingerprints

Nginx:1.18.0 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://m.thothd.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Sat, 30 May 2026 04:03:28 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Thu, 28 May 2026 07:24:00 GMT
etag: W/"6a17ed90-21329"
content-encoding: gzip
expires: Sat, 30 May 2026 04:08:28 GMT
cache-control: max-age=300
x-cdn-host-id: AH1742
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2

04:03:29.052 GET 200 subdocument 957 B 19 ms —

04:03:29.109 GET 200 xhr 1.6 KB 120 ms 1 alerts

04:03:29.118 GET 200 script 0 B 157 ms 1 alerts

04:03:29.359 POST 200 beacon 43 B 23 ms —

04:03:29.362 GET 200 script 4.8 KB 22 ms —

04:03:29.455 GET 200 script 26 B 22 ms —

04:03:29.485 GET 200 xhr 66 B 254 ms —

04:03:29.697 OPTIONS 204 xhr 0 B 286 ms —

04:03:29.704 GET 200 xhr 0 B 153 ms —

04:03:29.711 GET 200 script 253.6 KB 153 ms 1 alerts

04:03:29.713 OPTIONS 204 xhr 0 B 244 ms 1 alerts

04:03:29.854 POST 200 xhr 58 B 179 ms 1 alerts

04:03:29.893 POST 200 xhr 27 B 35 ms —

https://m.thothd.com/search/pawg-candid-rave/

Domain graph

Hostnames

Connections

Network requests

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://m.thothd.com/search/pawg-candid-rave/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://m.thothd.com/search/pawg-candid-rave/

Domain graph

Network requests