WEBSITE ANALYSIS REPORT

http://stealanegg-tools.com/pets/dodo

25 Sep 2026 · 23:48:19.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

23:47:49.615 GET 200 document 27.2 KB 159 ms —

23:47:50.135 GET 200 script 586.8 KB 158 ms —

23:47:50.139 GET 200 stylesheet 12.3 KB 82 ms —

23:47:50.140 GET 200 script 45.1 KB 502 ms 1 alerts

Transaction #10

Request / response

URL

GET HTTPS

https://pl31253682.profitableratecpmnetwork.com/f92b7acf2cb868980325e9d3ae4d5fa9/invoke.js

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://stealanegg-tools.com/pets/dodo

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (46167), with no line terminators
MIME type: application/javascript
First seen (UTC): 25 Sep 2026 · 23:48:26.197 UTC
Last seen (UTC): 25 Sep 2026 · 23:48:26.197 UTC
Times seen: 1

Size: 45.1 KB (46169 bytes)
MD5: 5ca81f37523a68c3b13e0fcdcc15ee8e
SHA1: 3efc4e7c3a90a2d82e61c25832661a0c0c72a06e
SHA256: 77d62bcbbcb65518824e8870ab051e04858345e0c9adfdf29d52710c4673a1ed

Certificate information

Issuer: Let's Encrypt · YR2
Subject: profitableratecpmnetwork.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 68:19:32:30:D5:D3:C3:8C:FE:12:14:9E:70:54:80:0E:72:2D:0C:64
Valid from: Fri, 21 Aug 2026 15:56:06 GMT
Valid until: Thu, 19 Nov 2026 15:56:05 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /f92b7acf2cb868980325e9d3ae4d5fa9/invoke.js HTTP/1.1
Host: pl31253682.profitableratecpmnetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://stealanegg-tools.com/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Fri, 25 Sep 2026 23:47:50 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Model,Device-Stock-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 7
Host: pl31253682.profitableratecpmnetwork.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8abb550eec845cb32868af61f1922cf6
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

23:47:50.302 GET 302 script 0 B 17 ms —

23:47:50.325 GET 200 script 19.4 KB 26 ms —

23:47:50.398 GET 200 img 471 B 49 ms —

23:47:50.400 GET 200 img 471 B 47 ms —

23:47:50.412 POST 200 xhr 0 B 28 ms —

23:47:50.477 GET 200 img 42 B 83 ms —

23:47:50.655 GET 200 xhr 40 B 89 ms —

23:47:50.657 GET 200 xhr 14.2 KB 568 ms —

23:47:51.233 GET 200 img 20.5 KB 134 ms —

23:47:51.234 GET 200 img 21.0 KB 130 ms —

23:47:51.236 GET 200 img 150.8 KB 141 ms —

23:47:51.237 GET 200 img 135.4 KB 147 ms —

23:47:51.241 GET 200 img 0 B 0 ms —

23:47:51.242 GET 200 img 0 B 0 ms —

23:47:51.243 GET 200 img 0 B 0 ms —

23:47:51.244 GET 200 img 0 B 0 ms —

23:47:51.656 POST 200 fetch 0 B 373 ms —

http://stealanegg-tools.com/pets/dodo

Domain graph

Hostnames

Connections