WEBSITE ANALYSIS REPORT

http://wvt24.top/buba-girl-viral-toto-video-collection

22 Feb 2026 · 15:55:05.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

abysscdn.com8 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com8 captured requests
creative-sb1.com14 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com5 captured requests
i.ytimg.com1 captured requests
iamcdn.net2 captured requests
jnn-pa.googleapis.com2 captured requests
kettledroopingcontinuation.com17 captured requests
pawsconservation.com14 captured requests
pixel.morphify.net2 captured requests
preferencenail.com2 captured requests
protrafficinspector.com12 captured requests
realizationnewestfangs.com9 captured requests
s.w.org2 captured requests
short.icu2 captured requests
sourshaped.com14 captured requests
statics.sssrr.org6 captured requests
unpkg.com1 captured requests
vjs.zencdn.net2 captured requests
wayfarerorthodox.com4 captured requests
weirdopt.com1 captured requests
wss.morphify.net2 captured requests
wvt24.top1 captured requests
wvt99.top33 captured requests
www.google.com1 captured requests
www.googletagmanager.com3 captured requests
www.youtube.com8 captured requests
yt3.ggpht.com1 captured requests

Connections

abysscdn.com → iamcdn.netLoads from2 captured connections
abysscdn.com → pixel.morphify.netLoads from2 captured connections
abysscdn.com → statics.sssrr.orgLoads from6 captured connections
abysscdn.com → wss.morphify.netCalls2 captured connections
abysscdn.com → wvt99.topLoads from1 captured connections
abysscdn.com → www.googletagmanager.comLoads from2 captured connections
short.icu → abysscdn.comRedirects to2 captured connections
wvt24.top → wvt99.topRedirects to1 captured connections
wvt99.top → abysscdn.comEmbeds2 captured connections
wvt99.top → cdn.show-sb.comCalls1 captured connections
wvt99.top → cdn.storageimagedisplay.comLoads from8 captured connections
wvt99.top → creative-sb1.comCalls2 captured connections
wvt99.top → creative-sb1.comLoads from12 captured connections
wvt99.top → flushpersist.comLoads from2 captured connections
wvt99.top → fonts.googleapis.comLoads from2 captured connections
wvt99.top → fonts.gstatic.comLoads from3 captured connections
wvt99.top → kettledroopingcontinuation.comCalls8 captured connections
wvt99.top → kettledroopingcontinuation.comLoads from9 captured connections
wvt99.top → pawsconservation.comCalls1 captured connections
wvt99.top → pawsconservation.comLoads from13 captured connections
wvt99.top → preferencenail.comLoads from2 captured connections
wvt99.top → protrafficinspector.comCalls12 captured connections
wvt99.top → realizationnewestfangs.comCalls4 captured connections
wvt99.top → realizationnewestfangs.comLoads from5 captured connections
wvt99.top → s.w.orgLoads from2 captured connections
wvt99.top → short.icuEmbeds2 captured connections
wvt99.top → sourshaped.comCalls8 captured connections
wvt99.top → sourshaped.comLoads from6 captured connections
wvt99.top → unpkg.comLoads from1 captured connections
wvt99.top → vjs.zencdn.netLoads from2 captured connections
wvt99.top → wayfarerorthodox.comLoads from4 captured connections
wvt99.top → weirdopt.comLoads from1 captured connections
wvt99.top → www.googletagmanager.comLoads from1 captured connections
wvt99.top → www.youtube.comEmbeds1 captured connections
www.youtube.com → fonts.gstatic.comLoads from2 captured connections
www.youtube.com → i.ytimg.comLoads from1 captured connections
www.youtube.com → jnn-pa.googleapis.comCalls2 captured connections
www.youtube.com → www.google.comLoads from1 captured connections
www.youtube.com → yt3.ggpht.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

15:54:33.309 GET 301 document 71.0 KB 174 ms 1 alerts

15:54:33.416 GET 301 document 71.0 KB 1401 ms —

15:54:34.214 GET 200 document 71.0 KB 369 ms —

15:54:34.665 GET 200 stylesheet 116.6 KB 194 ms —

15:54:34.675 GET 200 stylesheet 30.3 KB 198 ms —

15:54:34.677 GET 200 stylesheet 44.3 KB 120 ms —

15:54:34.679 GET 200 stylesheet 10.5 KB 508 ms —

15:54:34.680 GET 200 stylesheet 81.2 KB 226 ms —

15:54:34.681 GET 200 stylesheet 9.1 KB 376 ms —

15:54:34.682 GET 200 script 85.5 KB 423 ms —

15:54:34.683 GET 200 script 13.3 KB 442 ms —

15:54:34.686 GET 200 script 10.3 KB 441 ms —

15:54:34.689 GET 200 script 390.0 KB 697 ms —

15:54:34.691 GET 200 script 105.1 KB 840 ms 2 alerts

15:54:34.693 GET 200 script 90.0 KB 851 ms 2 alerts

15:54:34.694 GET 200 img 11.9 KB 452 ms —

15:54:34.695 GET 200 script 49.8 KB 845 ms 2 alerts

15:54:34.697 GET 200 script 49.8 KB 876 ms 2 alerts

15:54:34.698 GET 200 script 49.8 KB 550 ms 2 alerts

Transaction #172

Request / response

URL

GET HTTPS

https://pawsconservation.com/a1dacc070bedbf2997ef8c0e23d79f2d/invoke.js

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://wvt99.top/buba-girl-viral-toto-video-collection/

Resource information

File type: JavaScript source, ASCII text, with very long lines (50978), with no line terminators
MIME type: application/javascript
First seen (UTC): 20 Feb 2026 · 13:19:05.882 UTC
Last seen (UTC): 22 Feb 2026 · 15:55:18.986 UTC
Times seen: 2

Size: 49.8 KB (50978 bytes)
MD5: 46d2b57b53834e61ea6bb09d51b1835d
SHA1: f594b25692707401a9bd386518cd15d3d3a4677d
SHA256: 2c4c4efd98a7fc663cb71d10b67e970d884d2b180800b98f1ac9383f040a12c8

Certificate information

Issuer: Let's Encrypt · R12
Subject: pawsconservation.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 11:21:91:05:B0:A8:79:05:19:58:95:C1:AD:C5:F6:D2:BF:F2:99:E8
Valid from: Fri, 06 Feb 2026 22:18:05 GMT
Valid until: Thu, 07 May 2026 22:18:04 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /a1dacc070bedbf2997ef8c0e23d79f2d/invoke.js HTTP/1.1
Host: pawsconservation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://wvt99.top/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 22 Feb 2026 15:54:35 GMT
Content-Type: application/javascript
Content-Length: 20231
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 5
Host: pawsconservation.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 1c4042fec6ca0dcee14cd60486c482ed
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

15:54:34.699 GET 200 script 49.7 KB 547 ms 2 alerts

15:54:34.722 GET 200 script 49.8 KB 576 ms 2 alerts

15:54:34.723 GET 200 script 49.7 KB 577 ms 2 alerts

15:54:34.725 GET 200 img 1.1 KB 445 ms —

15:54:34.726 GET 200 script 49.7 KB 586 ms 2 alerts

15:54:34.728 GET 200 script 49.8 KB 593 ms 2 alerts

15:54:34.729 GET 200 script 486.3 KB 97 ms —

15:54:34.729 GET 200 script 22.7 KB 75 ms —

15:54:34.730 GET 200 script 41.2 KB 456 ms —

15:54:34.732 GET 200 script 683 B 455 ms —

15:54:34.733 GET 200 script 3.3 KB 365 ms —

15:54:34.734 GET 200 script 551 B 450 ms —

15:54:35.408 GET 200 img 0 B 716 ms 3 alerts

15:54:35.410 GET 200 script 5.0 KB 720 ms 3 alerts

15:54:35.412 GET 200 script 83.4 KB 235 ms 3 alerts

15:54:35.415 GET 200 xhr 40 B 575 ms 1 alerts

15:54:35.426 GET 200 script 83.4 KB 250 ms 3 alerts

15:54:35.428 GET 200 xhr 40 B 499 ms 1 alerts

15:54:35.430 GET 200 script 5.0 KB 396 ms 3 alerts

15:54:35.444 GET 200 script 5.0 KB 801 ms 4 alerts

15:54:35.448 GET 200 font 42.1 KB 495 ms —

15:54:35.450 GET 200 font 75.4 KB 421 ms —

15:54:35.567 GET 302 subdocument 7.3 KB 149 ms —

15:54:35.613 GET 200 xhr 40 B 605 ms 1 alerts

15:54:35.622 GET 200 script 5.0 KB 764 ms 4 alerts

15:54:35.625 GET 200 xhr 40 B 537 ms 1 alerts

15:54:35.630 GET 200 script 5.0 KB 381 ms 4 alerts

15:54:35.665 GET 200 xhr 40 B 30 ms 1 alerts

15:54:35.666 GET 200 script 110.6 KB 591 ms 4 alerts

15:54:35.692 GET 200 script 5.0 KB 662 ms 2 alerts

15:54:35.696 GET 200 xhr 40 B 22 ms 1 alerts

http://wvt24.top/buba-girl-viral-toto-video-collection

Domain graph

Hostnames

Connections

Network requests

Transaction #172

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://wvt24.top/buba-girl-viral-toto-video-collection

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #172

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://wvt24.top/buba-girl-viral-toto-video-collection

Domain graph

Network requests