WEBSITE ANALYSIS REPORT

http://raidersofsophie.org/resources/pestkop-lorenz-amplifier/

12 Jul 2026 · 20:31:38.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.redgarto.com6 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com5 captured requests
flushpersist.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
furiousexpansion.com6 captured requests
kettledroopingcontinuation.com9 captured requests
pl30271364.effectivecpmnetwork.com1 captured requests
pl30271365.effectivecpmnetwork.com1 captured requests
portalfluently.com1 captured requests
protrafficinspector.com3 captured requests
raidersofsophie.org3 captured requests
realizationnewestfangs.com4 captured requests
www.highperformanceformat.com1 captured requests

Connections

raidersofsophie.org → cdn.redgarto.comCalls3 captured connections
raidersofsophie.org → cdn.redgarto.comLoads from3 captured connections
raidersofsophie.org → cdn.show-creative1.comCalls1 captured connections
raidersofsophie.org → cdn.storageimagedisplay.comLoads from5 captured connections
raidersofsophie.org → flushpersist.comLoads from1 captured connections
raidersofsophie.org → fonts.googleapis.comLoads from1 captured connections
raidersofsophie.org → fonts.gstatic.comLoads from2 captured connections
raidersofsophie.org → furiousexpansion.comCalls1 captured connections
raidersofsophie.org → furiousexpansion.comLoads from5 captured connections
raidersofsophie.org → kettledroopingcontinuation.comCalls2 captured connections
raidersofsophie.org → kettledroopingcontinuation.comLoads from7 captured connections
raidersofsophie.org → pl30271364.effectivecpmnetwork.comLoads from1 captured connections
raidersofsophie.org → pl30271365.effectivecpmnetwork.comLoads from1 captured connections
raidersofsophie.org → portalfluently.comLoads from1 captured connections
raidersofsophie.org → protrafficinspector.comCalls3 captured connections
raidersofsophie.org → realizationnewestfangs.comCalls2 captured connections
raidersofsophie.org → realizationnewestfangs.comLoads from2 captured connections
raidersofsophie.org → www.highperformanceformat.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:31:00.722 GET 200 document 15.0 KB 335 ms —

20:31:01.467 GET 200 stylesheet 36.5 KB 11 ms —

20:31:01.469 GET 200 script 91.3 KB 517 ms 1 alerts

20:31:01.471 GET 200 script 47.3 KB 511 ms 1 alerts

20:31:01.473 GET 200 script 50.3 KB 481 ms 4 alerts

20:31:02.010 GET 200 script 83.4 KB 115 ms —

20:31:02.012 GET 200 xhr 40 B 90 ms —

20:31:02.024 GET 200 xhr 40 B 89 ms —

20:31:02.026 GET 200 script 18.2 KB 380 ms 1 alerts

20:31:02.049 GET 200 xhr 40 B 100 ms —

20:31:02.051 GET 200 xhr 14.1 KB 493 ms 1 alerts

20:31:02.054 GET 200 script 18.2 KB 378 ms 1 alerts

20:31:02.185 GET 307 xhr 0 B 390 ms 1 alerts

20:31:02.424 GET 200 xhr 0 B 757 ms 3 alerts

20:31:02.555 GET 200 xhr 5.0 KB 528 ms 3 alerts

20:31:02.583 GET 200 img 16.1 KB 344 ms —

20:31:02.584 GET 200 img 55.9 KB 104 ms —

20:31:02.586 GET 200 img 124.4 KB 338 ms —

20:31:02.588 GET 200 img 22.2 KB 110 ms —

20:31:02.597 GET 200 img 0 B 0 ms 1 alerts

Transaction #41

Request / response

URL

GET HTTPS

https://furiousexpansion.com/ren.gif?sid=H4sIAAAAAAAC_1xSv48bRRSedQwNBQqg1CtEEaTYt7_tJQVSxI8G7iAXFClISPNjx5l4vbPZ2bUdVxcSRaI7CQrK9ee7HA0RiH8A-eigyXYuck3-A5BQ6JAdS4cYad57877R6PveN4_m1RnpoqKrzz7VM5WmdCfsOvblmyoTemLs3Ru263Sdq_ZNlUXBVXu6DsX4PdcPus679scJH-odz3Edx3Vc-yNVJFJPdzYoVP7EjcNuFHRdt991Qw_T4v8dU1kw1IIYn5E3oETz-nP5JRRfIhv99EFihqXOr3w4qlJa6gJjcfJFNsz0JMPovJSFBZmdbG9Dm4aQ71vQ2clWBfT4aK0CTDWkdekZWHaypQo2Pn7JlqVIMjDxGibjJZJ0CUWX4PoBlHhKAC6wu4ds9HhXFxN67yVK12hD2n__BTVpSPvZW8hGT66lamrv67Qqlc4MprKGmi6hBkvk1SnKWQtqcgpefg0lCLLRvAMl6o1sJZegxkK13spCJVuo8hZGYmXTuC9ZHAU0TmRPCsftcRr6ftwLQk9GPETF70OJQ_DiAHlxgKE6hBEWTNkQ6_MDjEV9LFLjmfqxSE3F3G32ttmvF7oczOmxLgdJRkCLQxSiPlL5XfMAvLywmEkjFnodKCvrBWWiXihREhR3V-84bizDvhN1WCD9Ti8KZIe6jtOJehEPkzB2g0gcSVNW9Tw_IxfXo7P--OpPDJOVzTzXj2Led0XiUepLt8d92XdiJw57URgnMKqGMq3NcGaqIbcuHiNXDbn8zbdg9BQmPQVXF0ArF3RSg96uMct-KagSSWG0NDq_rZKuLgYQukZetlHes-bpGXlzcf3GtV83Rl6JfkTCfyfbBV7UyIsad9RvBIP0_s97ealGakbXzu6XtExeBVVP916Aq4a88uLtzRe7dN0Dzw9g8vOXjCZguYVUEaTJeZ-yGuY_Z3Zez81DDIo2WNpesLRoH7G0SL_bkGzIrR_eb0jyvGrIJ-ohjFrZjggSl8c07MkkDEMWBh6Xkjk9T_q-149RmubO_j-P_g0AAP__0dqjKPMDAAA=

IP / ASN

172.240.108.84

AS7979 · SERVERS-COM

Requested by: https://raidersofsophie.org/resources/pestkop-lorenz-amplifier/

Resource information

File type: Not recorded
MIME type: image/gif
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 03:29:53.183 UTC
Times seen: 19322048

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YR2
Subject: furiousexpansion.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 81:6B:A0:BD:75:1F:EB:D5:DD:2D:06:86:4C:AC:44:33:8B:11:5A:CF
Valid from: Thu, 25 Jun 2026 21:40:07 GMT
Valid until: Wed, 23 Sep 2026 21:40:06 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ren.gif?sid=H4sIAAAAAAAC_1xSv48bRRSedQwNBQqg1CtEEaTYt7_tJQVSxI8G7iAXFClISPNjx5l4vbPZ2bUdVxcSRaI7CQrK9ee7HA0RiH8A-eigyXYuck3-A5BQ6JAdS4cYad57877R6PveN4_m1RnpoqKrzz7VM5WmdCfsOvblmyoTemLs3Ru263Sdq_ZNlUXBVXu6DsX4PdcPus679scJH-odz3Edx3Vc-yNVJFJPdzYoVP7EjcNuFHRdt991Qw_T4v8dU1kw1IIYn5E3oETz-nP5JRRfIhv99EFihqXOr3w4qlJa6gJjcfJFNsz0JMPovJSFBZmdbG9Dm4aQ71vQ2clWBfT4aK0CTDWkdekZWHaypQo2Pn7JlqVIMjDxGibjJZJ0CUWX4PoBlHhKAC6wu4ds9HhXFxN67yVK12hD2n__BTVpSPvZW8hGT66lamrv67Qqlc4MprKGmi6hBkvk1SnKWQtqcgpefg0lCLLRvAMl6o1sJZegxkK13spCJVuo8hZGYmXTuC9ZHAU0TmRPCsftcRr6ftwLQk9GPETF70OJQ_DiAHlxgKE6hBEWTNkQ6_MDjEV9LFLjmfqxSE3F3G32ttmvF7oczOmxLgdJRkCLQxSiPlL5XfMAvLywmEkjFnodKCvrBWWiXihREhR3V-84bizDvhN1WCD9Ti8KZIe6jtOJehEPkzB2g0gcSVNW9Tw_IxfXo7P--OpPDJOVzTzXj2Led0XiUepLt8d92XdiJw57URgnMKqGMq3NcGaqIbcuHiNXDbn8zbdg9BQmPQVXF0ArF3RSg96uMct-KagSSWG0NDq_rZKuLgYQukZetlHes-bpGXlzcf3GtV83Rl6JfkTCfyfbBV7UyIsad9RvBIP0_s97ealGakbXzu6XtExeBVVP916Aq4a88uLtzRe7dN0Dzw9g8vOXjCZguYVUEaTJeZ-yGuY_Z3Zez81DDIo2WNpesLRoH7G0SL_bkGzIrR_eb0jyvGrIJ-ohjFrZjggSl8c07MkkDEMWBh6Xkjk9T_q-149RmubO_j-P_g0AAP__0dqjKPMDAAA= HTTP/1.1
Host: furiousexpansion.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://raidersofsophie.org/
Cookie: pdhtkv=true; uncs=1; pdhtkv49=true; uncs49=1; u_pl30170866=1; nlecb21369c81de2aa3f17c3f8090957659e=[5941311]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=5, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 12 Jul 2026 20:31:02 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
accept-ch: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform,Sec-CH-UA-Model,X-Device-User-Agent,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,Sec-CH-UA
access-control-allow-credentials: true
access-control-allow-origin: *
vary: Origin,Accept-Encoding
x-envoy-upstream-service-time: 1
Host: furiousexpansion.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 13860e0252d1253cff14890234eee2be
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

20:31:02.598 GET 200 img 0 B 0 ms 1 alerts

20:31:02.599 GET 200 img 0 B 0 ms 1 alerts

20:31:02.600 GET 200 img 0 B 0 ms 1 alerts

20:31:02.619 GET 200 xhr 3.9 KB 359 ms 1 alerts

20:31:02.621 GET 200 img 0 B 0 ms 3 alerts

20:31:03.011 GET 200 img 23.1 KB 20 ms —

20:31:03.013 GET 200 img 0 B 0 ms 1 alerts

20:31:03.101 GET 200 xhr 1.6 KB 149 ms 1 alerts

20:31:03.103 GET 200 img 0 B 0 ms 3 alerts

20:31:03.267 GET 200 img 15.0 KB 11 ms —

20:31:03.276 GET 200 xhr 76.8 KB 479 ms —

20:31:03.278 GET 200 xhr 4.4 KB 473 ms —

20:31:03.284 GET 200 img 0 B 101 ms 3 alerts

20:31:03.382 GET 200 stylesheet 16.4 KB 89 ms —

20:31:03.384 GET 200 img 12.5 KB 12 ms —

20:31:03.386 GET 200 img 5.3 KB 10 ms —

20:31:03.387 GET 200 script 82.4 KB 14 ms —

20:31:03.458 GET 200 xhr 10.0 KB 470 ms —

20:31:03.757 GET 200 img 0 B 93 ms 3 alerts

20:31:03.767 GET 200 img 0 B 94 ms 3 alerts

20:31:03.935 GET 200 img 0 B 95 ms 3 alerts

20:31:04.281 GET 200 img 0 B 0 ms 3 alerts

20:31:04.283 GET 200 img 0 B 93 ms 3 alerts

20:31:04.307 GET 200 font 42.1 KB 79 ms —

20:31:04.309 GET 200 font 42.1 KB 78 ms —

http://raidersofsophie.org/resources/pestkop-lorenz-amplifier/

Domain graph

Hostnames

Connections

Network requests

Transaction #41

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://raidersofsophie.org/resources/pestkop-lorenz-amplifier/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #41

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://raidersofsophie.org/resources/pestkop-lorenz-amplifier/

Domain graph

Network requests