WEBSITE ANALYSIS REPORT

https://spreadly.app/

17 Feb 2026 · 09:15:28.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:15:05.301 GET 200 document 144.3 KB 380 ms 1 alerts

09:15:05.866 GET 200 stylesheet 84.0 KB 27 ms 1 alerts

09:15:05.868 GET 200 stylesheet 28.7 KB 117 ms —

09:15:05.870 GET 200 stylesheet 1.4 KB 26 ms 1 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://spreadly.app/build/assets/tippy-BHH8rdGj.css

IP / ASN

167.235.216.195

AS24940 · Hetzner Online GmbH

Requested by: https://spreadly.app/

Resource information

File type: ASCII text, with very long lines (1409)
MIME type: text/css
First seen (UTC): 23 Dec 2023 · 18:39:40.000 UTC
Last seen (UTC): 21 Oct 2026 · 22:43:21.322 UTC
Times seen: 2333

Size: 1.4 KB (1410 bytes)
MD5: 44a53b841248ae85ad2ffb537b9c882f
SHA1: c493e0026cd8d5da33caf70fcc6ba96e7da53056
SHA256: a1ae07b34b7c57774fd2f92a88a9b47dfe77d89262b7db5176b7932d8e29c467

Certificate information

Issuer: Let's Encrypt · R13
Subject: spreadly.app
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: C7:6C:B5:04:05:DD:FA:AD:27:E0:C5:E7:CB:E3:19:5C:B0:AB:6E:88
Valid from: Sun, 21 Dec 2025 00:54:11 GMT
Valid until: Sat, 21 Mar 2026 00:54:10 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /build/assets/tippy-BHH8rdGj.css HTTP/1.1
Host: spreadly.app
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://spreadly.app/
Cookie: XSRF-TOKEN=eyJpdiI6IktlQUpTRXZQS2ZGc3RGYjNYZm5JUXc9PSIsInZhbHVlIjoiM1pxdjhFeVNRa1IwTzZ0M1ZPc3o1ejBndmlKdGt3TTB4dnJOVENyQVBNdzhiTlIwMHIvRXdmdENUTEhmYm5tVFQydDFEQjY1RkU4Nitka09BL3pVbWdHU21hYTcveFI1N3ZMVmt5RVFheENjZnA0OVdWTFBjRnMrSlIzMytqS1MiLCJtYWMiOiJlMTQ3NWY0MzZjYTY0ODE0ZDU5MGIwZThiNzFjM2YyMDcyMmIyM2Q2NDY4ZWFiOTU5OTZhMTI2OWRlYjkwZTBkIiwidGFnIjoiIn0%3D; spreadly_session=eyJpdiI6IlpRUUx6WTBOZXV4c01LUFIybFZjeXc9PSIsInZhbHVlIjoieElmYUViRmFWZks2T3VBSTJVNnJ2ZDhuNzN3WVpNSWU1U3p5Vnh6d3IrRHd2NHg3MG8yWEYyY1MyS29GaERibDEzc1FwekFzUWp2cjVYWEhhdzFJbXRONFNuYnNZVm5ENmMxbW5MMFRNTGhPZ2QzOVZVVnpCbWIwczdPODYwVXAiLCJtYWMiOiJjYTk3NGY4NDhlNTZmZDEzMzM0MThkNWI1ZmM5Y2MzODBlY2E2MGRlNTFlMzhjNGE3Mjc5OTJlMzgxZTg5NDU0IiwidGFnIjoiIn0%3D; sticky-session=2f2f4011b0f4836eab727594b146122f|aZQxn|aZQxn
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Tue, 17 Feb 2026 09:15:05 GMT
content-type: text/css
last-modified: Fri, 01 Aug 2025 10:57:48 GMT
vary: Accept-Encoding
expires: Wed, 17 Feb 2027 09:15:05 GMT
cache-control: max-age=31536000, public, no-transform
content-encoding: gzip
X-Firefox-Spdy: h2

09:15:05.872 GET 200 stylesheet 220.7 KB 52 ms 1 alerts

09:15:05.874 GET 200 script 15.8 KB 72 ms 1 alerts

09:15:05.876 GET 200 img 819.0 KB 206 ms 1 alerts

09:15:05.878 GET 200 img 554.7 KB 182 ms 1 alerts

09:15:05.879 GET 200 script 3.2 KB 170 ms —

09:15:05.880 GET 200 script 3.1 KB 135 ms —

09:15:05.882 GET 200 script 115.2 KB 858 ms —

09:15:05.885 GET 200 script 392.4 KB 447 ms —

09:15:06.041 GET 200 script 39.1 KB 30 ms 1 alerts

09:15:06.043 GET 200 script 236 B 49 ms 1 alerts

09:15:06.056 GET 200 font 23.8 KB 49 ms —

09:15:06.058 GET 200 font 23.1 KB 69 ms —

09:15:06.060 GET 200 font 454.4 KB 46 ms 1 alerts

09:15:06.063 GET 200 font 23.9 KB 46 ms —

09:15:06.187 GET 200 script 7.6 KB 273 ms —

09:15:06.189 GET 200 font 23.3 KB 4 ms —

09:15:06.201 POST 202 fetch 2 B 67 ms —

09:15:06.230 GET 200 lazy-img 12.4 KB 26 ms 1 alerts

09:15:06.240 GET 200 lazy-img 4.2 KB 497 ms —

09:15:06.241 GET 200 lazy-img 11.7 KB 26 ms 1 alerts

09:15:06.243 GET 200 lazy-img 15.5 KB 26 ms 1 alerts

09:15:06.244 GET 200 lazy-img 7.3 KB 26 ms 1 alerts

09:15:06.245 GET 200 lazy-img 10.0 KB 26 ms 1 alerts

09:15:06.246 GET 200 lazy-img 5.2 KB 25 ms 1 alerts

09:15:06.247 GET 200 lazy-img 7.0 KB 25 ms 1 alerts

09:15:06.251 GET 200 lazy-img 3.6 KB 25 ms 1 alerts

09:15:06.253 GET 200 lazy-img 1.8 KB 25 ms 1 alerts

09:15:06.254 GET 200 lazy-img 1.81 MB 123 ms 1 alerts

09:15:06.256 GET 200 lazy-img 479.5 KB 72 ms 1 alerts

09:15:06.257 GET 200 lazy-img 1.94 MB 174 ms 1 alerts

09:15:06.601 GET 200 script 321.6 KB 126 ms —

09:15:06.603 GET 200 stylesheet 163.0 KB 21 ms —

09:15:06.739 GET 200 script 53.6 KB 144 ms —

09:15:06.742 POST 200 fetch 0 B 585 ms —

09:15:06.748 GET 200 img 819.0 KB 56 ms 1 alerts

09:15:06.797 GET 200 subdocument 627 B 87 ms —

09:15:06.801 GET 200 xhr 606 B 90 ms —

09:15:06.803 GET 200 script 370.7 KB 167 ms —

09:15:07.254 GET 200 fetch 299 B 123 ms —

09:15:07.356 GET 200 script 399 B 29 ms —

09:15:07.357 GET 200 img 0 B 44 ms —

09:15:07.509 POST 204 beacon 0 B 144 ms —

09:15:07.510 GET 204 img 0 B 92 ms —

09:15:07.542 GET 101 websocket 0 B 491 ms —

09:15:07.622 GET 200 img 35 B 17 ms —

09:15:08.078 GET 200 fetch 2.9 KB 56 ms —

https://spreadly.app/

Domain graph

Hostnames

Connections

Network requests

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://spreadly.app/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #07

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://spreadly.app/

Domain graph

Network requests