WEBSITE ANALYSIS REPORT

http://cdtdentalcodes.com/

05 Mar 2026 · 02:50:05.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:49:42.883 GET 200 document 7.1 KB 264 ms —

02:49:43.309 GET 200 stylesheet 2.7 KB 28 ms —

02:49:43.312 GET 200 img 19.3 KB 171 ms —

02:49:43.314 GET 200 img 44.4 KB 202 ms —

02:49:43.316 GET 200 img 36.7 KB 68 ms —

02:49:43.322 GET 200 script 90.1 KB 853 ms 4 alerts

02:49:43.869 GET 200 script 83.4 KB 161 ms 3 alerts

02:49:43.879 GET 200 xhr 40 B 168 ms 1 alerts

02:49:43.882 GET 200 script 105.1 KB 827 ms 3 alerts

02:49:44.095 GET 200 img 595 B 28 ms —

02:49:44.371 GET 200 xhr 4.7 KB 120 ms 4 alerts

02:49:44.441 GET 200 img 0 B 682 ms 4 alerts

02:49:44.448 GET 200 script 0 B 142 ms 3 alerts

02:49:44.450 GET 200 script 83.4 KB 21 ms 3 alerts

02:49:44.525 GET 200 img 0 B 102 ms 4 alerts

02:49:44.527 GET 200 xhr 2.6 KB 177 ms 1 alerts

02:49:44.756 GET 200 img 0 B 99 ms 3 alerts

02:49:44.763 GET 200 xhr 10.0 KB 530 ms 3 alerts

02:49:44.764 GET 200 xhr 76.9 KB 499 ms 3 alerts

02:49:44.875 GET 200 stylesheet 16.4 KB 435 ms —

02:49:44.889 GET 200 img 97.9 KB 11 ms 3 alerts

02:49:44.891 GET 200 img 6.0 KB 8 ms 3 alerts

02:49:44.965 GET 200 script 82.4 KB 22 ms 3 alerts

02:49:44.967 GET 206 media 948.3 KB 96 ms 3 alerts

02:49:44.969 GET 206 media 942.3 KB 115 ms 3 alerts

02:49:44.970 GET 206 media 452.2 KB 53 ms 3 alerts

02:49:45.190 GET 200 xhr 10.1 KB 442 ms 3 alerts

02:49:45.282 GET 200 img 0 B 681 ms 3 alerts

Transaction #28

Request / response

URL

GET HTTPS

https://flushpersist.com/pxf.gif?uuid=b75e2705-70b0-49e2-9da2-15d149c12a97&eb=bff3d6bf6d16c0bb5e58232c1a99ef63&te=fe015aeda515c30449c87b1701cc307f&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=8573cbc42b4ebbe6571f18a8a4e8581a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://cdtdentalcodes.com/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 22:29:55.418 UTC
Times seen: 19317673

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R13
Subject: flushpersist.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: F8:CE:1C:DD:8F:86:0E:25:10:C6:86:56:A7:A3:47:DA:38:11:C7:3A
Valid from: Thu, 26 Feb 2026 22:12:10 GMT
Valid until: Wed, 27 May 2026 22:12:09 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /pxf.gif?uuid=b75e2705-70b0-49e2-9da2-15d149c12a97&eb=bff3d6bf6d16c0bb5e58232c1a99ef63&te=fe015aeda515c30449c87b1701cc307f&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0&dev=e&res=14.3095&b_frame=0&pk=8573cbc42b4ebbe6571f18a8a4e8581a&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=2 HTTP/1.1
Host: flushpersist.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cdtdentalcodes.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 05 Mar 2026 02:49:45 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
x-envoy-upstream-service-time: 1
Host: flushpersist.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 8ca0f1bed18233c1701bf28f6dc87128
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

02:49:45.284 GET 200 img 0 B 684 ms 3 alerts

02:49:45.287 GET 200 img 0 B 107 ms 3 alerts

02:49:45.291 GET 200 img 0 B 681 ms 3 alerts

02:49:45.640 GET 200 img 0 B 108 ms 3 alerts

02:49:45.651 GET 206 media 948.3 KB 81 ms 3 alerts

02:49:45.653 GET 206 media 942.3 KB 97 ms 3 alerts

02:49:45.655 GET 206 media 452.2 KB 44 ms 3 alerts

02:49:45.779 GET 200 img 0 B 100 ms 4 alerts

02:49:45.782 GET 200 img 0 B 193 ms 4 alerts

02:49:45.788 GET 200 font 42.1 KB 237 ms —

http://cdtdentalcodes.com/

Domain graph

Hostnames

Connections