WEBSITE ANALYSIS REPORT

http://btdb.ultraproxy.info/

04 Mar 2026 · 21:00:25.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

btdb.ultraproxy.info10 captured requests
cdn.jsdelivr.net1 captured requests
cdn.show-creative1.com3 captured requests
cdnjs.cloudflare.com2 captured requests
creative-sb1.com18 captured requests
exposuretigerphilip.com6 captured requests
flushpersist.com3 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com5 captured requests
formden.com1 captured requests
heartilyscales.com10 captured requests
kettledroopingcontinuation.com2 captured requests
matomo.hellohi.me1 captured requests
maxcdn.bootstrapcdn.com1 captured requests
msdoj.com2 captured requests
origunix.com1 captured requests
preferencenail.com4 captured requests
protrafficinspector.com4 captured requests
sourshaped.com12 captured requests
use.fontawesome.com3 captured requests
vmuid.com2 captured requests
weirdopt.com1 captured requests

Connections

btdb.ultraproxy.info → cdn.jsdelivr.netLoads from1 captured connections
btdb.ultraproxy.info → cdn.show-creative1.comCalls3 captured connections
btdb.ultraproxy.info → cdnjs.cloudflare.comLoads from2 captured connections
btdb.ultraproxy.info → creative-sb1.comCalls9 captured connections
btdb.ultraproxy.info → creative-sb1.comLoads from9 captured connections
btdb.ultraproxy.info → exposuretigerphilip.comCalls1 captured connections
btdb.ultraproxy.info → exposuretigerphilip.comLoads from5 captured connections
btdb.ultraproxy.info → flushpersist.comLoads from3 captured connections
btdb.ultraproxy.info → fonts.googleapis.comLoads from2 captured connections
btdb.ultraproxy.info → fonts.gstatic.comLoads from5 captured connections
btdb.ultraproxy.info → formden.comLoads from1 captured connections
btdb.ultraproxy.info → heartilyscales.comCalls2 captured connections
btdb.ultraproxy.info → heartilyscales.comLoads from8 captured connections
btdb.ultraproxy.info → kettledroopingcontinuation.comLoads from2 captured connections
btdb.ultraproxy.info → matomo.hellohi.meLoads from1 captured connections
btdb.ultraproxy.info → maxcdn.bootstrapcdn.comLoads from1 captured connections
btdb.ultraproxy.info → msdoj.comCalls1 captured connections
btdb.ultraproxy.info → msdoj.comLoads from1 captured connections
btdb.ultraproxy.info → origunix.comLoads from1 captured connections
btdb.ultraproxy.info → preferencenail.comLoads from4 captured connections
btdb.ultraproxy.info → protrafficinspector.comCalls4 captured connections
btdb.ultraproxy.info → sourshaped.comLoads from12 captured connections
btdb.ultraproxy.info → use.fontawesome.comLoads from3 captured connections
btdb.ultraproxy.info → vmuid.comCalls1 captured connections
btdb.ultraproxy.info → vmuid.comLoads from1 captured connections
btdb.ultraproxy.info → weirdopt.comLoads from1 captured connections
origunix.com → msdoj.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:00:02.096 GET 200 document 16.6 KB 298 ms 1 alerts

21:00:02.554 GET 404 script 151 B 15 ms 1 alerts

21:00:02.556 GET 200 stylesheet 14.2 KB 164 ms 1 alerts

21:00:02.558 GET 200 stylesheet 30.8 KB 180 ms 1 alerts

21:00:02.559 GET 200 stylesheet 53.8 KB 277 ms —

21:00:02.562 GET 200 stylesheet 25.4 KB 166 ms —

21:00:02.563 GET 200 script 84.9 KB 120 ms —

21:00:02.565 GET 200 script 33.8 KB 190 ms —

21:00:02.566 GET 200 stylesheet 198.1 KB 480 ms —

21:00:02.574 GET 200 img 1.9 KB 145 ms 1 alerts

21:00:02.578 GET 200 script 9.0 KB 133 ms 1 alerts

21:00:02.579 GET 200 script 90.1 KB 552 ms 2 alerts

21:00:02.583 GET 200 script 90.1 KB 562 ms 2 alerts

21:00:02.584 GET 200 script 105.1 KB 542 ms —

21:00:02.585 GET 200 script 90.0 KB 556 ms —

21:00:02.587 GET 200 script 9.9 KB 168 ms —

21:00:02.588 GET 302 script 63.1 KB 181 ms —

21:00:02.796 GET 200 script 63.1 KB 295 ms —

21:00:03.157 GET 200 font 72.5 KB 251 ms —

21:00:03.159 GET 200 font 13.2 KB 206 ms —

21:00:03.161 GET 200 script 84.9 KB 32 ms —

21:00:03.280 GET 404 script 0 B 160 ms —

21:00:03.283 GET 200 script 83.4 KB 182 ms 3 alerts

21:00:03.287 GET 200 xhr 40 B 709 ms 1 alerts

21:00:03.290 GET 200 script 83.4 KB 169 ms 3 alerts

21:00:03.292 GET 200 xhr 40 B 462 ms 1 alerts

21:00:03.355 GET 200 img 0 B 827 ms 4 alerts

21:00:03.356 GET 200 script 5.0 KB 825 ms 4 alerts

21:00:03.358 GET 200 script 83.4 KB 183 ms 3 alerts

21:00:03.359 GET 200 xhr 40 B 786 ms 1 alerts

21:00:03.360 GET 200 script 83.4 KB 201 ms 3 alerts

21:00:03.361 GET 200 xhr 40 B 873 ms 1 alerts

21:00:03.463 POST 200 fetch 65 B 32 ms —

21:00:03.494 POST 200 beacon 2 B 36 ms —

21:00:03.509 GET 200 script 0 B 136 ms 3 alerts

21:00:03.511 GET 302 script 30.4 KB 15 ms 1 alerts

21:00:03.559 GET 200 script 30.4 KB 21 ms 1 alerts

21:00:03.706 POST 200 xhr 0 B 18 ms 1 alerts

21:00:03.813 GET 200 xhr 4.8 KB 124 ms 2 alerts

21:00:03.814 GET 200 xhr 4.9 KB 119 ms 2 alerts

21:00:03.990 GET 200 xhr 4.7 KB 106 ms —

21:00:03.992 GET 200 img 0 B 104 ms 2 alerts

Transaction #66

Request / response

URL

GET HTTPS

https://heartilyscales.com/ren.gif?sid=H4sIAAAAAAAC_1RSS4sjVRi9lW7cuBBHcScU6ELBJPVKdcreDT422i32yDC4kPuoynymUresW5Wks-pxxK0zOxGEykn3tItB9B9I2o0oQtfKLKYX-hOEWYqkO9B6F9_jnsvlfOd8X86rC9ZGxVcfvK9nlKa82-s49mu3KVN6Yuy9W7brdJxd-zZlYbBrT9ehGL_p-kHHed1-N5ZD3fUc13Fcx7XfoSJO9LR7iYLyx5HbiZxO4HXcXoBp8f_eVBYMt6DGF-wGSDXP_ZV8DJJLZKMf3orNsNT5G2-PqpSXusBYnX6UDTM9yTC6LpPCQpKdbl5Dm4axr1vQ2elmAujx8XoCCGpY66UnENnphibE-OSKqUgRZxDqWUzGS8TpEsSXkPo-SJ0zQCrs7SMbPdrTxYQfXqF8jTZs--nfoEnDtp-8iGz0_c2UpvaBTquSdGYwTWrQdAkaLJFXZyhnFmhyBll-DlK_s-7T95CNjvdNqkFq9araSTy_H3ltTyayHcjIbUdhotpJGDtKOkr2HfdSIkqW4GYLlbFQkYUqsVDlFkZqZQdOP5Au98MkUnLHCXgQqFg4Ud9zHB7JHVTyHkg9gCyOkBdHGNLD8-4nMHdrGGXBlAxjVZ-o1HimfqRSUwl3k71N9uuFLgdzfqLLQZwx8OIBClUfU_6ZuQ9Zbi1miVELvQ5clPWCC1UvSJWteX7Bnl9LZ935x2AYr2zu-J4IlO_LPo952OdBEol-4Pm90A1EksBQDTItcGNhRg3baX5BTg1jX_0Bwc9g0jNI2gKvXgaf1OB3a8yyx4qKvNDTw47UIyhdIy-3UR5a8_SCvbD48NbNny4dvPNnC7H8lW0OZFEjL2p8Sj8zDNJ7P-7nJY1oxteWHpS8jJ8Bp_NXPEhq2I1v4svd8n7bhcyPYPLrn4xmELmFlBjS-PqeixrmP724rufmCwwKCyK1FiItrGORFunDK5KGVnbPE37Y74dxEqrEV77nq6jnxFHAozCIgh5K09B33x78GwAA___1l2Dl2QMAAA==

IP / ASN

172.240.127.242

AS7979 · SERVERS-COM

Requested by: https://btdb.ultraproxy.info/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 22:29:55.418 UTC
Times seen: 19317673

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: heartilyscales.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: D7:D7:C3:2B:ED:15:06:17:54:C9:BC:9A:74:64:C6:8C:FD:9A:F8:99
Valid from: Sat, 31 Jan 2026 21:54:33 GMT
Valid until: Fri, 01 May 2026 21:54:32 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1RSS4sjVRi9lW7cuBBHcScU6ELBJPVKdcreDT422i32yDC4kPuoynymUresW5Wks-pxxK0zOxGEykn3tItB9B9I2o0oQtfKLKYX-hOEWYqkO9B6F9_jnsvlfOd8X86rC9ZGxVcfvK9nlKa82-s49mu3KVN6Yuy9W7brdJxd-zZlYbBrT9ehGL_p-kHHed1-N5ZD3fUc13Fcx7XfoSJO9LR7iYLyx5HbiZxO4HXcXoBp8f_eVBYMt6DGF-wGSDXP_ZV8DJJLZKMf3orNsNT5G2-PqpSXusBYnX6UDTM9yTC6LpPCQpKdbl5Dm4axr1vQ2elmAujx8XoCCGpY66UnENnphibE-OSKqUgRZxDqWUzGS8TpEsSXkPo-SJ0zQCrs7SMbPdrTxYQfXqF8jTZs--nfoEnDtp-8iGz0_c2UpvaBTquSdGYwTWrQdAkaLJFXZyhnFmhyBll-DlK_s-7T95CNjvdNqkFq9araSTy_H3ltTyayHcjIbUdhotpJGDtKOkr2HfdSIkqW4GYLlbFQkYUqsVDlFkZqZQdOP5Au98MkUnLHCXgQqFg4Ud9zHB7JHVTyHkg9gCyOkBdHGNLD8-4nMHdrGGXBlAxjVZ-o1HimfqRSUwl3k71N9uuFLgdzfqLLQZwx8OIBClUfU_6ZuQ9Zbi1miVELvQ5clPWCC1UvSJWteX7Bnl9LZ935x2AYr2zu-J4IlO_LPo952OdBEol-4Pm90A1EksBQDTItcGNhRg3baX5BTg1jX_0Bwc9g0jNI2gKvXgaf1OB3a8yyx4qKvNDTw47UIyhdIy-3UR5a8_SCvbD48NbNny4dvPNnC7H8lW0OZFEjL2p8Sj8zDNJ7P-7nJY1oxteWHpS8jJ8Bp_NXPEhq2I1v4svd8n7bhcyPYPLrn4xmELmFlBjS-PqeixrmP724rufmCwwKCyK1FiItrGORFunDK5KGVnbPE37Y74dxEqrEV77nq6jnxFHAozCIgh5K09B33x78GwAA___1l2Dl2QMAAA== HTTP/1.1
Host: heartilyscales.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://btdb.ultraproxy.info/
Cookie: uid_id2=d7f23892-2cfc-4c91-96fd-f6e0dc0dc801:3:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; u_pl22675059=1; u_pl15816950=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 04 Mar 2026 21:00:04 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
access-control-allow-origin: *
vary: Origin
access-control-allow-credentials: true
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 2
Host: heartilyscales.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d3c8e27ef03a4a49ef2b10867d4199c4
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

21:00:03.995 GET 200 xhr 1.7 KB 225 ms 1 alerts

21:00:03.996 GET 200 img 0 B 109 ms 2 alerts

21:00:03.999 GET 200 xhr 1.5 KB 513 ms 1 alerts

21:00:04.211 GET 200 img 0 B 101 ms —

21:00:04.217 GET 200 xhr 1.9 KB 119 ms 1 alerts

21:00:04.221 GET 200 img 0 B 787 ms 3 alerts

21:00:04.225 GET 200 xhr 9.8 KB 2066 ms 3 alerts

21:00:04.227 GET 200 xhr 77.4 KB 575 ms 3 alerts

http://btdb.ultraproxy.info/

Domain graph

Hostnames

Connections

Network requests

Transaction #66

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://btdb.ultraproxy.info/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #66

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://btdb.ultraproxy.info/

Domain graph

Network requests