WEBSITE ANALYSIS REPORT

http://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

18 Oct 2026 · 17:26:16.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

abscloud.org2 captured requests
araplhn.org1 captured requests
bauval.org20 captured requests
cdn.holdbitter.com13 captured requests
cdn.jsdelivr.net1 captured requests
cdn.show-creative1.com1 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com1 captured requests
flushpersist.com3 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com3 captured requests
pl28758395.profitablecpmratenetwork.com1 captured requests
pl28767403.profitablecpmratenetwork.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com1 captured requests
static.nresystems.com2 captured requests
www.google.no1 captured requests
www.googletagmanager.com1 captured requests
www.highperformanceformat.com1 captured requests
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org33 captured requests
zoologyfibre.com11 captured requests

Connections

www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → abscloud.orgCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → abscloud.orgLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → araplhn.orgCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → bauval.orgCalls7 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → bauval.orgLoads from13 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.holdbitter.comCalls6 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.holdbitter.comLoads from7 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.jsdelivr.netLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.show-creative1.comCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.show-sb.comCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.storageimagedisplay.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → flushpersist.comLoads from3 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → fonts.googleapis.comLoads from2 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → fonts.gstatic.comLoads from3 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → pl28758395.profitablecpmratenetwork.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → pl28767403.profitablecpmratenetwork.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → portalfluently.comLoads from2 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → protrafficinspector.comCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → static.nresystems.comLoads from2 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → www.google.noLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → www.googletagmanager.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → www.highperformanceformat.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → zoologyfibre.comCalls7 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → zoologyfibre.comLoads from4 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:25:27.117 GET 200 document 12.7 KB 623 ms 2 alerts

17:25:28.194 GET 200 script 77.6 KB 271 ms 2 alerts

17:25:28.197 GET 200 script 53.6 KB 610 ms 2 alerts

17:25:28.198 GET 200 script 75.0 KB 535 ms 2 alerts

17:25:28.200 GET 200 script 595.7 KB 151 ms —

17:25:28.202 GET 200 fetch 524.4 KB 382 ms 2 alerts

17:25:28.204 GET 200 script 759 B 195 ms 2 alerts

17:25:28.205 GET 200 script 2.01 MB 102 ms 2 alerts

17:25:28.207 GET 200 stylesheet 230.4 KB 98 ms 2 alerts

17:25:28.208 GET 200 stylesheet 787 B 191 ms 2 alerts

17:25:28.210 GET 200 script 2.4 KB 330 ms 2 alerts

17:25:28.212 GET 200 script 176.1 KB 373 ms 2 alerts

17:25:28.213 GET 200 script 8.5 KB 279 ms 2 alerts

17:25:28.214 GET 200 script 213.4 KB 50 ms —

17:25:28.216 GET 200 script 2.4 KB 369 ms 2 alerts

17:25:28.217 GET 200 script 4.7 KB 368 ms 2 alerts

17:25:28.218 GET 200 script 5.2 KB 366 ms 2 alerts

17:25:28.220 GET 200 script 2.8 KB 365 ms 2 alerts

17:25:28.221 GET 200 script 15.6 KB 364 ms 2 alerts

17:25:28.222 GET 200 script 6.0 KB 363 ms 2 alerts

17:25:28.224 GET 200 script 30.7 KB 362 ms 2 alerts

17:25:28.225 GET 200 script 3.9 KB 361 ms 2 alerts

17:25:28.226 GET 200 script 243 B 358 ms 2 alerts

17:25:28.227 GET 200 script 2.1 KB 358 ms 2 alerts

17:25:28.228 GET 200 script 1.4 KB 357 ms 2 alerts

17:25:28.229 GET 200 script 1.9 KB 357 ms 2 alerts

17:25:28.230 GET 200 script 37.3 KB 355 ms 2 alerts

17:25:28.235 GET 200 img 86.8 KB 351 ms 2 alerts

17:25:28.505 GET 200 script 37.1 KB 114 ms 1 alerts

17:25:28.507 GET 200 xhr 40 B 146 ms —

17:25:28.822 GET 307 xhr 0 B 112 ms 2 alerts

17:25:28.826 GET 200 script 90.8 KB 3281 ms —

17:25:28.827 GET 200 script 87.4 KB 100 ms —

17:25:28.830 GET 200 script 37.1 KB 24 ms 1 alerts

17:25:28.854 GET 200 fetch 1.6 KB 96 ms 2 alerts

17:25:28.856 GET 200 fetch 376 B 93 ms 2 alerts

17:25:28.873 GET 200 font 309.0 KB 104 ms 2 alerts

17:25:28.974 GET 200 xhr 4.0 KB 73 ms 2 alerts

17:25:28.990 GET 200 script 39.2 KB 46 ms —

17:25:28.994 GET 200 img 0 B 0 ms —

17:25:29.037 GET 200 img 42 B 87 ms —

17:25:29.071 GET 200 xhr 0 B 77 ms —

17:25:29.091 GET 200 lazy-img 9.7 KB 96 ms 2 alerts

17:25:29.092 GET 200 lazy-img 2.8 KB 96 ms 2 alerts

17:25:29.095 GET 200 lazy-img 2.0 KB 100 ms 2 alerts

17:25:29.096 GET 200 lazy-img 25.0 KB 104 ms 2 alerts

17:25:29.097 GET 200 lazy-img 9.8 KB 103 ms 2 alerts

17:25:29.116 GET 200 img 23.0 KB 126 ms —

17:25:29.118 GET 200 img 0 B 0 ms 2 alerts

Transaction #95

Request / response

URL

GET HTTPS

https://zoologyfibre.com/impr.gif?sid=H4sIAAAAAAAC_1ySv28cxRvGZy_RV_qKAsmygmjQFhQgceeZ3Z3b3aRBET-qOIg4SkE1v9ZMvLe72dm9u1zlEERtOsr1c3ZcIEVQQIngTAUSkk-icBE3_AlIlAjZOWGLKd73nXlezbzP6PPFfntGBmjF6Ud3ypnNc7HBB9R_64EtdDlx_uaWz-iA3vIf2GIY3fKn56Ee32RhNKBv-x8atVNuBJRRyijzP7C1ycrpxoUKWz1nKR8MowFjyYDxANP6vyeu9eCEBz0-I2uwevnqH9knsGqBYvTNe8btNGX1zvujNhdNWWOsj-4XO0U5KTC6LLPaQ1YcrbpRuiUhX_VQFkcrFyjHB-cuIO2S9G68gCyOVqNCjg9fTitzmAJSv4LJeAGTH8OKBVT5FFafEEBpbN5FMXq2WdYT8filKs7VJbn-15-wkyW5_mIdxej57dxO_Xtl3ja2LBymWQc7XcBuL1C1x2hmPdjJMVTzGaz-jdDeGyhGh3dEWwtYffomZYJxSlWfpjLrx0zFfTHUYZ9rk4VKCU61vPgjmy0gXA-t89BaD23moa08jPSpL9Ikk-kwEqnJ4kxTFivBwzCNIx5kQ8XRqieweg-q3kVV72LHfnnC1-C0B9cQjHV3qHMXuO6Zzl0r2SoHqxx287LZ3heHZbNtCgJR76HW3YGtHrmnUM21-Sxzel6eByGbbi6k7uZWNwT1o6seJZP9ODJxP4256cuEcs5implQH2Suaa-2Cs37sYpYP42SqG-oFIHkUTIM-X614sf7Ll_Hjjn1h0Ops0DJINapZjyTLDQmTtMkiXicRBzOdrCuB-E8zOyS3P9hhsouyUb6N6Q4hsuPoew1iPY1iMk8DhKIT5FSzIqvXVs40zQDq1roskPVXEfz2INpyH5-RtbnH2_d_vECjez7LRj1K1ktqLpDVXd4aH8m2M6ffHu3auzIzsQ5K_ca0Zj_QdgT8wuUXZIb75ILaG_-lEJVu3DVvzfNc1ctSbb2OlxJICuC3BLk5vIpITu4K3t5We-7z7Fde5C5N5d5TQ5kXud7cPbUT4KAUsWCVKc8SsMkMzxicWw4C4eGhhyNWz783fv_PwMAganf2ToEAAA=

IP / ASN

23.111.84.4

AS7979 · SERVERS-COM

Requested by: https://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 21 Oct 2026 · 20:07:47.862 UTC
Times seen: 19265131

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR1
Subject: zoologyfibre.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: D9:C4:6B:72:BF:AD:1D:89:A0:42:3A:8F:4C:FB:16:ED:76:B5:49:4E
Valid from: Wed, 26 Aug 2026 05:55:20 GMT
Valid until: Tue, 24 Nov 2026 05:55:19 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.30.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /impr.gif?sid=H4sIAAAAAAAC_1ySv28cxRvGZy_RV_qKAsmygmjQFhQgceeZ3Z3b3aRBET-qOIg4SkE1v9ZMvLe72dm9u1zlEERtOsr1c3ZcIEVQQIngTAUSkk-icBE3_AlIlAjZOWGLKd73nXlezbzP6PPFfntGBmjF6Ud3ypnNc7HBB9R_64EtdDlx_uaWz-iA3vIf2GIY3fKn56Ee32RhNKBv-x8atVNuBJRRyijzP7C1ycrpxoUKWz1nKR8MowFjyYDxANP6vyeu9eCEBz0-I2uwevnqH9knsGqBYvTNe8btNGX1zvujNhdNWWOsj-4XO0U5KTC6LLPaQ1YcrbpRuiUhX_VQFkcrFyjHB-cuIO2S9G68gCyOVqNCjg9fTitzmAJSv4LJeAGTH8OKBVT5FFafEEBpbN5FMXq2WdYT8filKs7VJbn-15-wkyW5_mIdxej57dxO_Xtl3ja2LBymWQc7XcBuL1C1x2hmPdjJMVTzGaz-jdDeGyhGh3dEWwtYffomZYJxSlWfpjLrx0zFfTHUYZ9rk4VKCU61vPgjmy0gXA-t89BaD23moa08jPSpL9Ikk-kwEqnJ4kxTFivBwzCNIx5kQ8XRqieweg-q3kVV72LHfnnC1-C0B9cQjHV3qHMXuO6Zzl0r2SoHqxx287LZ3heHZbNtCgJR76HW3YGtHrmnUM21-Sxzel6eByGbbi6k7uZWNwT1o6seJZP9ODJxP4256cuEcs5implQH2Suaa-2Cs37sYpYP42SqG-oFIHkUTIM-X614sf7Ll_Hjjn1h0Ops0DJINapZjyTLDQmTtMkiXicRBzOdrCuB-E8zOyS3P9hhsouyUb6N6Q4hsuPoew1iPY1iMk8DhKIT5FSzIqvXVs40zQDq1roskPVXEfz2INpyH5-RtbnH2_d_vECjez7LRj1K1ktqLpDVXd4aH8m2M6ffHu3auzIzsQ5K_ca0Zj_QdgT8wuUXZIb75ILaG_-lEJVu3DVvzfNc1ctSbb2OlxJICuC3BLk5vIpITu4K3t5We-7z7Fde5C5N5d5TQ5kXud7cPbUT4KAUsWCVKc8SsMkMzxicWw4C4eGhhyNWz783fv_PwMAganf2ToEAAA= HTTP/1.1
Host: zoologyfibre.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=01a1500c-09bf-71c7-a6d3-5def3cca50db:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyODY2NjkwMCwiayI6IjY2YmRmMmNiMjdkOWQxNWZiMTNlZTc5OTg4NDU3ODQ1Iiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1NjE5MzIyLCJwaWQiOjMwOTUwMzgsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoidGtoeHFieXQiLCJjcGtzIjp7IjI4IjoiZDMzN2ZjNjQ1M2IyZjhiZmZkMWU0ZmFiYTQzMmRjZDgiLCIyOSI6ImU4YWMxM2FmYzA2MThjOGEzZjk0YmI0ZDUwNGQxZmRkIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0NjI3MCwibiI6Ik1hdXJhIn0sInJnIjp7ImlkIjozMjcxLCJuIjoiVmlrZW4ifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly93d3cud3d3Lmp3Z3h1ZW5kLmV1LndobS55bm4uZWR1Y2F0aW9ucy5teXR1bm5lbC5vcmcvIiwidHoiOjIsImlkdWMiOjAsImFyIjpudWxsfX0.bR3WbJ5kuWBdxWc7j6VXxYeG58l8EnDQUc0Qy6RO5Ik; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl28666900=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Sun, 18 Oct 2026 17:25:29 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin
x-envoy-upstream-service-time: 6
Host: zoologyfibre.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 02de87320c3af0917ccd67174e12728a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

17:25:29.310 GET 200 img 86.8 KB 98 ms 2 alerts

http://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

Domain graph

Hostnames

Connections

Network requests

Transaction #95

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #95

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

Domain graph

Network requests