WEBSITE ANALYSIS REPORT

http://napp.free-thesis.com/campaigns/yw935mk9wt1e1/track-url/hx451xkdgyc87/8fdc19d8a54c08a0cbe0273c2d5ad7079e227c87

22 Nov 2025 · 20:53:06.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:52:43.413 GET 301 document 7.1 KB 404 ms —

20:52:43.777 GET 302 document 7.1 KB 486 ms —

20:52:44.044 GET 302 document 7.1 KB 738 ms 1 alerts

Transaction #08

Request / response

URL

GET HTTPS

https://dfgtrk7.com/YxOQLM?affid=1337&firstName=[FNAME]&lastName=[LNAME]&email=[EMAIL]&s1=30&s2=102e21bbb029553ea49e7607ec5f0a&s3=535

IP / ASN

34.102.181.184

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html; charset=UTF-8
First seen (UTC): Not recorded
Last seen (UTC): 18 Oct 2026 · 21:37:13.472 UTC
Times seen: 19194253

Size: 7.1 KB (7251 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WR3
Subject: dfgtrk7.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 3E:B6:65:38:B1:AA:A7:31:04:17:0A:C9:39:89:3F:CD:3B:45:D1:57
Valid from: Sat, 08 Nov 2025 12:56:13 GMT
Valid until: Fri, 06 Feb 2026 13:49:27 GMT

Technology fingerprints

Google Cloud (IaaS)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /YxOQLM?affid=1337&firstName=[FNAME]&lastName=[LNAME]&email=[EMAIL]&s1=30&s2=102e21bbb029553ea49e7607ec5f0a&s3=535 HTTP/1.1
Host: dfgtrk7.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 302 Found
location: https://oakwood-financial.com/?affid=1337&cid=1205&email=%5BEMAIL%5D&firstName=%5BFNAME%5D&lastName=%5BLNAME%5D&s1=30&s2=102e21bbb029553ea49e7607ec5f0a&s3=535
content-length: 0
date: Sat, 22 Nov 2025 20:52:44 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

20:52:44.486 GET 200 document 7.1 KB 719 ms —

20:52:45.150 GET 200 stylesheet 154.9 KB 217 ms —

20:52:45.151 GET 200 stylesheet 174.6 KB 223 ms —

20:52:45.154 GET 200 script 53.2 KB 203 ms —

20:52:45.155 GET 200 script 864.7 KB 286 ms —

20:52:45.156 GET 200 script 3.1 KB 288 ms —

20:52:45.287 GET 200 stylesheet 24.4 KB 200 ms —

20:52:45.453 GET 301 script 19.4 KB 688 ms —

20:52:45.579 GET 200 xhr 1.0 KB 14 ms —

20:52:45.583 GET 200 xhr 1.0 KB 14 ms —

20:52:45.585 GET 200 font 30.3 KB 215 ms —

20:52:45.633 GET 200 script 311.3 KB 246 ms —

20:52:45.822 GET 200 img 206.0 KB 168 ms —

20:52:45.824 GET 200 img 1.3 KB 217 ms —

20:52:45.825 GET 200 img 1.5 KB 203 ms —

20:52:45.826 GET 200 img 1.5 KB 202 ms —

20:52:45.827 GET 200 img 5.4 KB 161 ms —

20:52:45.829 GET 200 img 6.1 KB 167 ms —

20:52:45.870 GET 200 img 10.4 KB 55 ms —

20:52:45.913 GET 200 font 30.3 KB 31 ms —

20:52:46.157 GET 200 script 19.4 KB 239 ms —

20:52:46.165 GET 404 script 0 B 27 ms —

20:52:46.167 GET 200 script 404.5 KB 54 ms —

20:52:46.335 GET 404 img 121 B 124 ms —

20:52:46.438 POST 201 xhr 497 B 488 ms —

20:52:46.737 GET 200 script 108.3 KB 25 ms —

20:52:46.927 POST 204 xhr 0 B 191 ms —

20:52:46.948 POST 204 xhr 0 B 169 ms —

20:52:47.037 POST 204 beacon 0 B 94 ms —

20:52:47.041 POST 204 beacon 0 B 95 ms —

20:52:47.043 POST 204 beacon 0 B 94 ms —

20:52:47.693 POST 204 xhr 0 B 95 ms —

20:52:52.035 POST 204 beacon 0 B 95 ms —

http://napp.free-thesis.com/campaigns/yw935mk9wt1e1/track-url/hx451xkdgyc87/8fdc19d8a54c08a0cbe0273c2d5ad7079e227c87

Domain graph

Hostnames

Connections