WEBSITE ANALYSIS REPORT

http://bombanana.wiki/guides/bombana/

20 Jul 2026 · 21:31:04.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:30:35.579 GET 200 document 62.1 KB 131 ms —

21:30:35.943 GET 200 font 33.5 KB 58 ms —

21:30:35.945 GET 200 stylesheet 37.6 KB 65 ms —

21:30:35.946 GET 200 stylesheet 30.7 KB 9 ms —

21:30:35.948 GET 200 stylesheet 17.6 KB 9 ms —

21:30:35.949 GET 200 script 4.0 KB 9 ms —

21:30:35.950 GET 200 script 185.3 KB 15 ms —

21:30:35.952 GET 200 script 123.6 KB 13 ms —

21:30:35.957 GET 200 script 71.9 KB 108 ms —

21:30:35.959 GET 200 script 27.3 KB 75 ms —

21:30:35.961 GET 200 script 2.7 KB 10 ms —

21:30:35.963 GET 200 script 1.9 KB 104 ms —

21:30:35.965 GET 200 script 359 B 81 ms —

21:30:35.991 GET 200 img 2.7 KB 10 ms —

21:30:36.128 GET 200 font 33.5 KB 11 ms —

21:30:36.129 GET 200 font 33.5 KB 10 ms —

21:30:36.183 GET 200 img 288.5 KB 77 ms —

21:30:36.184 GET 200 img 891 B 76 ms —

21:30:36.478 GET 200 script 477.1 KB 152 ms —

21:30:36.479 GET 200 fetch 21.1 KB 49 ms —

21:30:36.480 GET 200 fetch 20.7 KB 65 ms —

21:30:36.481 GET 200 fetch 24.7 KB 68 ms —

21:30:36.482 GET 200 fetch 25.3 KB 68 ms —

21:30:36.484 GET 200 fetch 10.9 KB 67 ms —

21:30:36.491 GET 200 lazy-img 24.0 KB 85 ms —

21:30:36.498 GET 200 script 47.3 KB 631 ms 1 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://pl29841683.effectivecpmnetwork.com/7647c3e545d050924dd6f88defd20d5c/invoke.js?_=1784583036241

IP / ASN

172.240.108.68

AS7979 · SERVERS-COM

Requested by: https://bombanana.wiki/guides/bombana/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (48459), with no line terminators
MIME type: application/javascript
First seen (UTC): 20 Jul 2026 · 21:31:09.830 UTC
Last seen (UTC): 20 Jul 2026 · 21:31:09.830 UTC
Times seen: 1

Size: 47.3 KB (48461 bytes)
MD5: db4391cbdbfccc174aeec355abe05a6f
SHA1: a4745d8b92d409a6086a6d69699843d1e549aa50
SHA256: ee6860cf6c4334464fce4c6de68ae267879bfcbd8eb4b3b24008c1f0b971dc6d

Certificate information

Issuer: Let's Encrypt · YR2
Subject: effectivecpmnetwork.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 0C:E4:9E:97:82:CC:3E:2D:41:19:24:86:F0:A7:44:A5:A8:46:DD:89
Valid from: Mon, 13 Jul 2026 22:12:12 GMT
Valid until: Sun, 11 Oct 2026 22:12:11 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /7647c3e545d050924dd6f88defd20d5c/invoke.js?_=1784583036241 HTTP/1.1
Host: pl29841683.effectivecpmnetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bombanana.wiki/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Mon, 20 Jul 2026 21:30:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 4
Host: pl29841683.effectivecpmnetwork.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 472b11fd34f6ec4bae6a7ebc9d205f62
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

21:30:36.500 GET 200 script 50.3 KB 472 ms 4 alerts

21:30:36.507 GET 200 fetch 30.7 KB 9 ms —

21:30:36.509 GET 200 fetch 17.6 KB 7 ms —

21:30:36.985 GET 200 script 5.0 KB 378 ms 1 alerts

21:30:36.994 GET 200 xhr 40 B 128 ms —

21:30:36.996 GET 200 script 30.7 KB 376 ms 1 alerts

21:30:37.139 GET 307 xhr 0 B 378 ms 1 alerts

21:30:37.146 GET 200 script 5.0 KB 376 ms —

21:30:37.148 GET 200 xhr 14.5 KB 479 ms —

21:30:37.149 GET 200 script 30.7 KB 466 ms —

21:30:37.403 GET 200 xhr 14.6 KB 409 ms —

21:30:37.406 GET 200 xhr 0 B 450 ms —

21:30:37.523 GET 200 xhr 4.0 KB 135 ms 1 alerts

21:30:37.576 GET 200 xhr 15.4 KB 195 ms —

21:30:37.636 GET 200 img 0 B 0 ms —

21:30:37.637 GET 200 img 0 B 0 ms —

21:30:37.639 GET 200 img 0 B 0 ms —

21:30:37.640 GET 200 img 0 B 0 ms —

21:30:37.646 GET 200 img 55.0 KB 350 ms —

21:30:37.647 GET 200 img 125.5 KB 250 ms —

21:30:37.648 GET 200 img 55.9 KB 342 ms —

21:30:37.649 GET 200 img 105.0 KB 350 ms —

21:30:37.688 GET 200 img 61.9 KB 205 ms —

21:30:37.690 GET 200 img 0 B 0 ms 1 alerts

http://bombanana.wiki/guides/bombana/

Domain graph

Hostnames

Connections