WEBSITE ANALYSIS REPORT

http://plugintorrent.com

19 Nov 2025 · 21:44:59.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com2 captured requests
adexchangeclear.com1 captured requests
adsco.re1 captured requests
c.adsco.re1 captured requests
cdn.storageimagedisplay.com2 captured requests
displayvertising.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
i0.wp.com7 captured requests
instantdeceived.com2 captured requests
kettledroopingcontinuation.com4 captured requests
o8eqw5dqxfv2.l4.adsco.re1 captured requests
o8eqw5dqxfv2.n4.adsco.re1 captured requests
o8eqw5dqxfv2.s4.adsco.re1 captured requests
pixel.wp.com1 captured requests
plugintorrent.com15 captured requests
preferencenail.com1 captured requests
protrafficinspector.com2 captured requests
skinnycrawlinglax.com1 captured requests
sourshaped.com5 captured requests
static.cloudflareinsights.com1 captured requests
stats.wp.com1 captured requests
usrpubtrk.com1 captured requests
weirdopt.com1 captured requests
www.displayvertising.com1 captured requests

Connections

plugintorrent.com → 4.adsco.reCalls2 captured connections
plugintorrent.com → 6.adsco.reCalls2 captured connections
plugintorrent.com → acscdn.comLoads from2 captured connections
plugintorrent.com → adexchangeclear.comCalls1 captured connections
plugintorrent.com → adsco.reCalls1 captured connections
plugintorrent.com → c.adsco.reEmbeds1 captured connections
plugintorrent.com → cdn.storageimagedisplay.comLoads from2 captured connections
plugintorrent.com → displayvertising.comLoads from1 captured connections
plugintorrent.com → fonts.googleapis.comLoads from1 captured connections
plugintorrent.com → fonts.gstatic.comLoads from2 captured connections
plugintorrent.com → i0.wp.comLoads from2 captured connections
plugintorrent.com → instantdeceived.comLoads from2 captured connections
plugintorrent.com → kettledroopingcontinuation.comCalls2 captured connections
plugintorrent.com → kettledroopingcontinuation.comLoads from2 captured connections
plugintorrent.com → o8eqw5dqxfv2.l4.adsco.reCalls1 captured connections
plugintorrent.com → o8eqw5dqxfv2.n4.adsco.reCalls1 captured connections
plugintorrent.com → o8eqw5dqxfv2.s4.adsco.reCalls1 captured connections
plugintorrent.com → pixel.wp.comLoads from1 captured connections
plugintorrent.com → preferencenail.comLoads from1 captured connections
plugintorrent.com → protrafficinspector.comCalls2 captured connections
plugintorrent.com → skinnycrawlinglax.comLoads from1 captured connections
plugintorrent.com → sourshaped.comCalls2 captured connections
plugintorrent.com → sourshaped.comLoads from3 captured connections
plugintorrent.com → static.cloudflareinsights.comLoads from1 captured connections
plugintorrent.com → stats.wp.comLoads from1 captured connections
plugintorrent.com → usrpubtrk.comCalls1 captured connections
plugintorrent.com → weirdopt.comLoads from1 captured connections
plugintorrent.com → www.displayvertising.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:44:36.092 GET 200 document 230.6 KB 185 ms 1 alerts

21:44:36.431 GET 200 script 12.0 KB 4 ms 1 alerts

21:44:36.435 GET 200 imageset 27.1 KB 104 ms —

21:44:36.439 GET 200 imageset 12.6 KB 101 ms —

21:44:36.446 GET 200 imageset 4.4 KB 94 ms —

21:44:36.447 GET 200 imageset 4.0 KB 91 ms —

21:44:36.448 GET 200 script 19.5 KB 76 ms —

21:44:36.460 GET 200 script 3.7 KB 10 ms 1 alerts

21:44:36.481 GET 200 stylesheet 196.8 KB 10 ms 1 alerts

21:44:36.483 GET 200 script 12.0 KB 4 ms 1 alerts

21:44:36.614 GET 200 script 41.0 KB 113 ms 1 alerts

21:44:36.616 GET 200 img 6.9 KB 6 ms 1 alerts

21:44:36.617 GET 200 script 12.0 KB 3 ms 1 alerts

21:44:36.651 GET 200 stylesheet 2.2 KB 5 ms 1 alerts

21:44:36.680 GET 200 lazy-imageset 40.4 KB 32 ms —

21:44:36.714 GET 200 script 3.7 KB 62 ms —

21:44:36.715 GET 200 script 4.1 KB 5 ms 1 alerts

21:44:36.718 GET 200 script 45.3 KB 866 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://instantdeceived.com/7eee760e1be902d2708f680e479ce4d3/invoke.js

IP / ASN

172.240.127.242

AS7979 · SERVERS-COM

Requested by: https://plugintorrent.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (46409), with no line terminators
MIME type: application/javascript
First seen (UTC): 19 Nov 2025 · 21:45:07.568 UTC
Last seen (UTC): 19 Nov 2025 · 21:45:07.568 UTC
Times seen: 1

Size: 45.3 KB (46409 bytes)
MD5: f74b6503df3487aa8c243ef88e01a7a3
SHA1: 0f261c92d43fc6bf01649117fbf8e707e5120b62
SHA256: 8ad1030a1cb38d1b4d4bc55e01961e259845dfe6069664dc734ec90f18262516

Certificate information

Issuer: Let's Encrypt · R12
Subject: instantdeceived.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 37:CB:17:29:BB:3C:EF:10:B6:92:44:10:3B:A5:C1:CA:D5:AD:73:17
Valid from: Sat, 18 Oct 2025 21:58:38 GMT
Valid until: Fri, 16 Jan 2026 21:58:37 GMT

Technology fingerprints

Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /7eee760e1be902d2708f680e479ce4d3/invoke.js HTTP/1.1
Host: instantdeceived.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://plugintorrent.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 19 Nov 2025 21:44:37 GMT
Content-Type: application/javascript
Content-Length: 18461
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 10
Host: instantdeceived.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: bfdd91cadd620dc024cfec2cb9787f91
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

21:44:36.719 GET 200 script 45.3 KB 852 ms 2 alerts

21:44:36.720 GET 200 script 57.5 KB 51 ms 1 alerts

21:44:36.720 GET 200 script 18.9 KB 11 ms 1 alerts

21:44:36.721 GET 200 script 85.5 KB 10 ms 1 alerts

21:44:36.737 GET 200 img 1.0 KB 5 ms 1 alerts

21:44:36.738 GET 200 font 70.2 KB 13 ms 1 alerts

21:44:36.775 GET 200 font 2.9 KB 8 ms 1 alerts

21:44:37.114 GET 200 stylesheet 3.6 KB 233 ms —

21:44:37.119 GET 200 img 9.1 KB 9 ms —

21:44:37.120 GET 200 img 1.2 KB 9 ms —

21:44:37.786 GET 200 font 34.1 KB 118 ms —

21:44:37.787 GET 200 font 29.1 KB 124 ms —

21:44:37.978 GET 200 xhr 45 B 192 ms —

21:44:37.979 GET 200 xhr 45 B 217 ms —

21:44:37.981 GET 200 xhr 45 B 36 ms —

21:44:37.982 GET 200 xhr 45 B 36 ms —

21:44:37.983 GET 200 xhr 0 B 271 ms —

21:44:37.984 GET No response xhr 0 B 780 ms —

21:44:37.985 GET No response xhr 0 B 393 ms —

21:44:38.014 GET 200 script 6.3 KB 681 ms 1 alerts

21:44:38.026 GET 200 xhr 40 B 268 ms —

21:44:38.027 GET 200 script 109.4 KB 757 ms 1 alerts

21:44:38.034 GET 200 script 6.3 KB 450 ms 5 alerts

21:44:38.050 GET 200 xhr 40 B 101 ms —

21:44:38.058 GET 200 script 9.9 KB 7 ms 1 alerts

21:44:38.066 GET 200 img 50 B 11 ms —

21:44:38.100 GET 200 subdocument 68.6 KB 24 ms —

21:44:38.117 GET 204 fetch 0 B 207 ms 1 alerts

21:44:38.200 POST 204 xhr 0 B 4 ms 1 alerts

21:44:38.202 POST 204 beacon 0 B 198 ms 5 alerts

21:44:38.206 GET 307 xhr 4.7 KB 663 ms 5 alerts

21:44:38.226 GET 307 xhr 4.7 KB 655 ms 1 alerts

http://plugintorrent.com

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://plugintorrent.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://plugintorrent.com

Domain graph

Network requests