WEBSITE ANALYSIS REPORT

http://bwz0ijo.pages.dev/

21 Aug 2026 · 19:44:32.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

bwz0ijo.pages.dev2 captured requests
cdn.redgarto.com6 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com16 captured requests
exemplarfederallithe.com18 captured requests
fizzyacerbitymellow.com1 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
furiousexpansion.com2 captured requests
go.realus.lt2 captured requests
kettledroopingcontinuation.com11 captured requests
mamshirt.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com5 captured requests
racingorchestra.com6 captured requests
sleepoverlimitprofound.com18 captured requests
spendsdetachment.com1 captured requests

Connections

bwz0ijo.pages.dev → cdn.redgarto.comCalls3 captured connections
bwz0ijo.pages.dev → cdn.redgarto.comLoads from3 captured connections
bwz0ijo.pages.dev → cdn.show-creative1.comCalls1 captured connections
bwz0ijo.pages.dev → cdn.storageimagedisplay.comLoads from16 captured connections
bwz0ijo.pages.dev → exemplarfederallithe.comCalls2 captured connections
bwz0ijo.pages.dev → exemplarfederallithe.comLoads from16 captured connections
bwz0ijo.pages.dev → fizzyacerbitymellow.comLoads from1 captured connections
bwz0ijo.pages.dev → flushpersist.comLoads from2 captured connections
bwz0ijo.pages.dev → fonts.googleapis.comLoads from1 captured connections
bwz0ijo.pages.dev → fonts.gstatic.comLoads from2 captured connections
bwz0ijo.pages.dev → furiousexpansion.comCalls2 captured connections
bwz0ijo.pages.dev → go.realus.ltLoads from2 captured connections
bwz0ijo.pages.dev → kettledroopingcontinuation.comCalls4 captured connections
bwz0ijo.pages.dev → kettledroopingcontinuation.comLoads from7 captured connections
bwz0ijo.pages.dev → mamshirt.comLoads from1 captured connections
bwz0ijo.pages.dev → portalfluently.comLoads from2 captured connections
bwz0ijo.pages.dev → protrafficinspector.comCalls5 captured connections
bwz0ijo.pages.dev → racingorchestra.comLoads from6 captured connections
bwz0ijo.pages.dev → sleepoverlimitprofound.comCalls2 captured connections
bwz0ijo.pages.dev → sleepoverlimitprofound.comLoads from16 captured connections
bwz0ijo.pages.dev → spendsdetachment.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:44:02.128 GET 200 document 20.7 KB 257 ms —

19:44:02.736 GET 200 script 77.5 KB 123 ms 1 alerts

19:44:02.739 GET 200 script 32.3 KB 360 ms 1 alerts

19:44:02.740 GET 200 script 32.2 KB 147 ms 1 alerts

19:44:02.742 GET 200 script 32.3 KB 127 ms 1 alerts

19:44:02.743 GET 200 script 32.2 KB 111 ms 1 alerts

19:44:02.745 GET 200 script 94.8 KB 133 ms 1 alerts

19:44:02.746 GET No response script 0 B 0 ms —

19:44:02.908 GET 200 script 83.4 KB 145 ms 1 alerts

19:44:02.909 GET 200 xhr 40 B 93 ms —

19:44:02.912 GET 200 img 0 B 94 ms 2 alerts

19:44:02.918 GET 200 script 83.4 KB 135 ms 1 alerts

19:44:02.920 GET 200 xhr 40 B 100 ms —

19:44:02.922 GET 200 script 4.2 KB 76 ms —

19:44:02.926 GET No response script 0 B 0 ms —

19:44:02.977 GET 200 xhr 40 B 26 ms —

19:44:02.979 GET 200 xhr 14.1 KB 411 ms 1 alerts

19:44:02.981 GET 200 xhr 40 B 22 ms —

19:44:02.982 GET 200 xhr 0 B 388 ms 1 alerts

19:44:02.984 GET 200 xhr 40 B 22 ms —

19:44:02.986 GET 200 xhr 14.1 KB 146 ms 1 alerts

19:44:03.090 GET 200 xhr 14.2 KB 534 ms 1 alerts

19:44:03.091 GET 200 xhr 0 B 388 ms 1 alerts

19:44:03.093 GET 200 xhr 14.1 KB 131 ms 1 alerts

19:44:03.109 GET 200 img 0 B 466 ms —

19:44:03.146 GET 200 img 17.9 KB 312 ms —

19:44:03.148 GET 200 img 121.9 KB 126 ms —

19:44:03.149 GET 200 img 102.4 KB 313 ms —

19:44:03.152 GET 200 img 128.0 KB 144 ms —

19:44:03.157 GET 200 img 0 B 0 ms 1 alerts

19:44:03.158 GET 200 img 0 B 0 ms 1 alerts

19:44:03.159 GET 200 img 0 B 0 ms 1 alerts

19:44:03.160 GET 200 img 0 B 0 ms 1 alerts

Transaction #96

Request / response

URL

GET HTTPS

https://exemplarfederallithe.com/ren.gif?sid=H4sIAAAAAAAC_1xSPYwbRRQeG4uGAhEdKdEWCIHE-XbXu7Y3kSgifqrchSQoBaKYn51j4vHOZmfWdlxdOIQor6Cg3Pt8l0MgIpDoQT46JKRs5yJuKOlAQpTIPotDrLTfezPf6M33vTefHZdL0kZJF7dumqnSmu7Ebd97_Z7KhBlbb_euF_ht_7p3T2Xd6Lo3WUExuhZ0orb_hvdeygdmJ_QD3w_8wHtXFak0k501C5U_CZK43Y3aQdBvB3GISfH_HVs2YGkDYrQkV6BE_eJv8kMoPkc2_O7t1A6cyd98Z1hq6kyBkTj7IBtkZpxheJnKogGZnW1Ow9iakC-bMNnZxgXM6GTlAkzVpHn1GVh2tpEKNjq9UMs00gxMvIDxaI5Uz6HoHNwcQomnBOACu3vIho93TTGmDy9YumJr0vrrT6hxTVrPtpANn9zQauLdMbp0ymQWE1lBTeZQ-3Pk5TnctAk1Pgd3n0CJX4nffAXZ8PQmLQsKJaq1fSXnoLaBcvWrBkrZRJk3MRQLjyZ9yZJuRJNU9qTwgx6ncaeT9KI4lF0eo-SPoMQReHGAvDjAQB3Bigasq0nj_QOMRHUqtA1t9VhoW7JgE8NN7FQz4_aP6alx-2lGQIsjFKI6UfkDewjunptNpRUzswLKXDWjTFQzJRxB8WDxqh9QP4wF3Q58n273aBJtJzLobMe9Pu0m3bDbTaITaV1ZHedL8tK6hb_3P8IgXXgpjyRPeCB91hch64Wyx2nid4I0pVGUJLCqgrLNdXOmqiZbLYZ8Ndc_DBg9h9Xn4Opl0DIAHVegH1eYZt9qYwapM3nbKpdCmAq5a8E9bBzrJdma3b5746e1DnnlNlL-C9l84EWFvKhwX_1MsK8ffb-XOzVUU7qa7R1HXfo8qHq69ze4qslV75v1I7t26y3w_AA2_7fSTNu8JunyK1hDwPIWtCLQ6eVVlFWw_1mzy_zYfor9ogWmWzOmi9YJ04X-oiav_XCwrrmCHy_EW7XwfBGlAU9o3JNpHMcsjkIuJfN7oex0wn4CZ-v7n399-E8AAAD__-S1DM_-AwAA

IP / ASN

23.111.84.116

AS7979 · SERVERS-COM

Requested by: https://bwz0ijo.pages.dev/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 13:07:51.045 UTC
Times seen: 19283510

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: exemplarfederallithe.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 1B:08:1B:4F:EB:F9:7D:FF:1D:EC:97:7C:78:18:D6:B7:08:11:68:5E
Valid from: Thu, 25 Jun 2026 21:17:28 GMT
Valid until: Wed, 23 Sep 2026 21:17:27 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.30.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1xSPYwbRRQeG4uGAhEdKdEWCIHE-XbXu7Y3kSgifqrchSQoBaKYn51j4vHOZmfWdlxdOIQor6Cg3Pt8l0MgIpDoQT46JKRs5yJuKOlAQpTIPotDrLTfezPf6M33vTefHZdL0kZJF7dumqnSmu7Ebd97_Z7KhBlbb_euF_ht_7p3T2Xd6Lo3WUExuhZ0orb_hvdeygdmJ_QD3w_8wHtXFak0k501C5U_CZK43Y3aQdBvB3GISfH_HVs2YGkDYrQkV6BE_eJv8kMoPkc2_O7t1A6cyd98Z1hq6kyBkTj7IBtkZpxheJnKogGZnW1Ow9iakC-bMNnZxgXM6GTlAkzVpHn1GVh2tpEKNjq9UMs00gxMvIDxaI5Uz6HoHNwcQomnBOACu3vIho93TTGmDy9YumJr0vrrT6hxTVrPtpANn9zQauLdMbp0ymQWE1lBTeZQ-3Pk5TnctAk1Pgd3n0CJX4nffAXZ8PQmLQsKJaq1fSXnoLaBcvWrBkrZRJk3MRQLjyZ9yZJuRJNU9qTwgx6ncaeT9KI4lF0eo-SPoMQReHGAvDjAQB3Bigasq0nj_QOMRHUqtA1t9VhoW7JgE8NN7FQz4_aP6alx-2lGQIsjFKI6UfkDewjunptNpRUzswLKXDWjTFQzJRxB8WDxqh9QP4wF3Q58n273aBJtJzLobMe9Pu0m3bDbTaITaV1ZHedL8tK6hb_3P8IgXXgpjyRPeCB91hch64Wyx2nid4I0pVGUJLCqgrLNdXOmqiZbLYZ8Ndc_DBg9h9Xn4Opl0DIAHVegH1eYZt9qYwapM3nbKpdCmAq5a8E9bBzrJdma3b5746e1DnnlNlL-C9l84EWFvKhwX_1MsK8ffb-XOzVUU7qa7R1HXfo8qHq69ze4qslV75v1I7t26y3w_AA2_7fSTNu8JunyK1hDwPIWtCLQ6eVVlFWw_1mzy_zYfor9ogWmWzOmi9YJ04X-oiav_XCwrrmCHy_EW7XwfBGlAU9o3JNpHMcsjkIuJfN7oex0wn4CZ-v7n399-E8AAAD__-S1DM_-AwAA HTTP/1.1
Host: exemplarfederallithe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bwz0ijo.pages.dev/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl15415389=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Fri, 21 Aug 2026 19:44:03 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Mobile,Device-Stock-Ua
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
x-envoy-upstream-service-time: 7
Host: exemplarfederallithe.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 3106c1063db5507f43daa91d804f936a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:44:03.161 GET 200 img 0 B 0 ms 1 alerts

19:44:03.162 GET 200 img 0 B 0 ms 1 alerts

19:44:03.163 GET 200 img 0 B 0 ms 1 alerts

19:44:03.164 GET 200 img 0 B 0 ms 1 alerts

19:44:03.231 GET 200 img 32.9 KB 62 ms —

19:44:03.233 GET 200 img 97.9 KB 77 ms —

19:44:03.235 GET 200 img 16.1 KB 69 ms —

19:44:03.236 GET 200 img 151.4 KB 78 ms —

19:44:03.250 GET 200 img 0 B 0 ms 1 alerts

19:44:03.252 GET 200 img 0 B 0 ms 1 alerts

19:44:03.253 GET 200 img 0 B 0 ms 1 alerts

19:44:03.254 GET 200 img 0 B 0 ms 1 alerts

19:44:03.256 GET 200 img 0 B 0 ms 1 alerts

19:44:03.257 GET 200 img 0 B 0 ms 1 alerts

19:44:03.258 GET 200 img 0 B 0 ms 1 alerts

19:44:03.259 GET 200 img 0 B 0 ms 1 alerts

19:44:03.404 GET 200 img 142.7 KB 24 ms —

http://bwz0ijo.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #96

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://bwz0ijo.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #96

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://bwz0ijo.pages.dev/

Domain graph

Network requests