WEBSITE ANALYSIS REPORT

http://rtyum.com/

26 May 2026 · 03:06:38.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

03:06:12.786 GET 200 document 49.1 KB 1852 ms —

03:06:14.189 GET 200 stylesheet 162.3 KB 799 ms —

03:06:14.191 GET 200 stylesheet 76.9 KB 1585 ms —

03:06:14.193 GET 200 stylesheet 18.7 KB 1850 ms —

03:06:14.194 GET 200 stylesheet 1.1 KB 1849 ms —

03:06:14.196 GET 200 stylesheet 1.4 KB 1849 ms —

03:06:14.197 GET 200 script 93.5 KB 2375 ms —

03:06:14.198 GET 200 script 33.8 KB 3480 ms —

03:06:14.199 GET 200 img 8.6 KB 4010 ms —

03:06:14.201 GET 200 img 7.1 KB 4010 ms —

03:06:14.202 GET 200 img 10.2 KB 4008 ms —

03:06:14.205 GET 200 img 8.6 KB 4008 ms —

03:06:14.206 GET 200 img 6.8 KB 4007 ms —

03:06:14.207 GET 200 img 7.8 KB 4007 ms —

03:06:14.208 GET 200 img 7.3 KB 4006 ms —

03:06:14.209 GET 200 img 7.3 KB 4005 ms —

03:06:14.210 GET 200 img 7.6 KB 4004 ms —

03:06:14.211 GET 200 img 8.4 KB 4003 ms —

03:06:14.212 GET 200 img 6.8 KB 4003 ms —

03:06:14.213 GET 200 img 10.2 KB 4002 ms —

03:06:14.215 GET 200 img 8.4 KB 4001 ms —

03:06:14.216 GET 200 img 8.6 KB 4001 ms —

03:06:14.217 GET 200 img 39.6 KB 4000 ms —

03:06:14.218 GET 200 img 31.5 KB 3999 ms —

03:06:14.219 GET 200 img 45.7 KB 3999 ms —

03:06:14.220 GET 200 img 5.0 KB 3998 ms —

03:06:14.222 GET 200 img 3.7 KB 3998 ms —

03:06:14.224 GET 200 img 4.5 KB 3997 ms —

03:06:14.225 GET 200 script 92.6 KB 3997 ms —

03:06:14.230 GET 200 script 16.3 KB 3996 ms —

03:06:14.231 GET 200 script 129.9 KB 3995 ms —

03:06:14.233 GET 200 script 286 B 6733 ms —

03:06:14.234 GET 200 script 58.0 KB 3993 ms —

03:06:14.235 GET 200 script 26.1 KB 3992 ms —

03:06:14.236 GET 200 script 6.6 KB 3991 ms —

03:06:14.237 GET 200 script 25.3 KB 3990 ms —

03:06:14.239 GET 200 script 56.3 KB 3990 ms —

03:06:17.699 GET 200 img 29.0 KB 4280 ms —

03:06:17.709 GET 200 img 17.6 KB 4272 ms —

03:06:20.938 GET 200 xhr 28.6 KB 3124 ms —

03:06:20.945 GET 200 xhr 315 B 3119 ms —

03:06:20.950 GET 200 script 436.7 KB 964 ms —

03:06:21.996 GET 200 xhr 1.4 KB 3379 ms 1 alerts

03:06:23.929 GET 200 xhr 1.9 KB 371 ms 1 alerts

03:06:23.938 GET 200 xhr 178 B 377 ms 1 alerts

03:06:23.942 GET 200 xhr 792 B 392 ms 1 alerts

03:06:23.948 GET 200 xhr 792 B 402 ms 1 alerts

03:06:23.956 GET 200 xhr 750 B 369 ms 1 alerts

Transaction #44

Request / response

URL

GET HTTPS

https://api.api168168.com/pks/getLotteryPksInfo.do?issue=&lotCode=10037

IP / ASN

35.241.91.37

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by: https://rtyum.com/

Resource information

File type: JSON text data
MIME type: text/html; charset=UTF-8
First seen (UTC): 26 May 2026 · 03:06:45.723 UTC
Last seen (UTC): 26 May 2026 · 03:06:45.723 UTC
Times seen: 1

Size: 750 B (750 bytes)
MD5: dff84ea150c6ec42dae5116dc0ce4269
SHA1: e068a6d6837c15f7e22cfd48560c9abb3830aeaf
SHA256: 6903a4b801a860a284905c8a82f9e154b3fe0d6fbdc235e79fe6fbe983f1e9fb

Certificate information

Issuer: Let's Encrypt · R12
Subject: api.api168168.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SHA1 fingerprint: EC:56:57:5A:4B:81:E8:7D:D4:C1:2E:52:F0:6C:D3:92:45:E6:D5:B1
Valid from: Tue, 24 Mar 2026 21:44:34 GMT
Valid until: Mon, 22 Jun 2026 21:44:33 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /pks/getLotteryPksInfo.do?issue=&lotCode=10037 HTTP/1.1
Host: api.api168168.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://rtyum.com
DNT: 1
Connection: keep-alive
Referer: https://rtyum.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Tue, 26 May 2026 03:06:24 GMT
content-type: text/html;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: https://rtyum.com
vary: Origin
access-control-expose-headers: Set-Cookie
content-disposition: inline;filename=f.txt
content-encoding: gzip
strict-transport-security: max-age=31536000; includeSubDomains; preload
X-Firefox-Spdy: h2

03:06:23.971 GET 200 xhr 749 B 379 ms 1 alerts

03:06:23.982 GET 200 xhr 755 B 390 ms 1 alerts

http://rtyum.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #44

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://rtyum.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #44

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://rtyum.com/

Domain graph

Network requests