WEBSITE ANALYSIS REPORT

http://13972.xyz/

09 Aug 2026 · 13:52:45.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:52:12.297 GET 200 document 0 B 0 ms 3 alerts

13:52:14.963 GET 302 document 0 B 748 ms 1 alerts

13:52:15.716 GET 200 document 24.0 KB 3471 ms 1 alerts

13:52:19.163 GET 200 script 949 B 912 ms 1 alerts

13:52:19.164 GET 200 script 14.6 KB 1562 ms 1 alerts

13:52:19.168 GET 200 script 17.0 KB 3089 ms 1 alerts

13:52:19.170 GET 200 stylesheet 13.2 KB 1099 ms 1 alerts

Transaction #367

Request / response

URL

GET HTTPS

https://19541.xyz/css/chunk-common.1781011881923.90261a1c.css

IP / ASN

154.39.104.136

AS140224 · STARCLOUD GLOBAL PTE., LTD.

Requested by: https://19541.xyz/

Resource information

File type: ASCII text, with very long lines (13512), with no line terminators
MIME type: text/css
First seen (UTC): 12 Jun 2026 · 19:29:57.231 UTC
Last seen (UTC): 12 Oct 2026 · 09:36:23.452 UTC
Times seen: 1257

Size: 13.2 KB (13512 bytes)
MD5: 18db28ed82e6a8aa84b4ca311e8effc9
SHA1: 19d1c3f13ce483b564653631f2bd6a340017a84b
SHA256: 8d0fd3816e0960390ac6c9757e98a97c96597871468e74a8dcb81f170ad98303

Certificate information

Issuer: Let's Encrypt · YR1
Subject: 19568.xyz
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 0D:36:96:E0:CF:62:86:DF:A4:65:5D:A1:B0:BE:5F:3E:02:DE:95:EB
Valid from: Sun, 12 Jul 2026 09:59:56 GMT
Valid until: Sat, 10 Oct 2026 09:59:55 GMT

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /css/chunk-common.1781011881923.90261a1c.css HTTP/1.1
Host: 19541.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://19541.xyz/
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Date: Sun, 09 Aug 2026 13:52:19 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 09 Jun 2026 13:37:11 GMT
Vary: Accept-Encoding
ETag: W/"6a281707-34c8"
Cache-Control: public, max-age=31536000, immutable
Access-Control-Allow-Origin: *
X-Custom-Check: true
Content-Encoding: gzip
Server: Nginx
L-Safe: 1786283539=40rYYlZq+Y1EJF0zLaPWaGgVyKhLikXTiqII8/wqPsbxqE52qAJv85ahNSBBqG9uQkysbtMnrdWODu2yhgpuRQg8rYesZVFevG8wRmSnrGzX4VZ3k7zw+xg8VpHi+ppeENidSKt73BHhPUFZsdb5o5IxRo6vTcettnPMrU6j0Ae8oLQCJgs2rEir9ahkxgki
L-VIA: l1=TqoDVanjjr6wMExF
L-VERSION: 1783853907
L-Request-Id: 761519fe6cbbbf37f17
X-Cache-Status: BYPASS

13:52:19.171 GET 200 stylesheet 340.7 KB 4254 ms 1 alerts

13:52:19.173 GET 200 stylesheet 62.7 KB 3577 ms 1 alerts

13:52:19.176 GET 200 script 105.5 KB 3588 ms 1 alerts

13:52:19.177 GET 200 script 459.7 KB 3667 ms 1 alerts

13:52:19.178 GET 200 script 157.4 KB 3327 ms 1 alerts

13:52:19.179 GET 200 script 132.8 KB 4114 ms 1 alerts

13:52:19.181 GET 200 script 157.5 KB 3958 ms 1 alerts

13:52:19.182 GET 200 script 224.0 KB 4452 ms 1 alerts

13:52:19.183 GET 200 script 190.3 KB 4682 ms 1 alerts

13:52:19.184 GET 200 script 256.1 KB 4300 ms 1 alerts

13:52:19.185 GET 200 script 153.9 KB 4804 ms 1 alerts

13:52:19.187 GET 200 script 348.2 KB 5122 ms 1 alerts

13:52:19.187 GET 200 script 23.2 KB 4609 ms 1 alerts

13:52:19.193 GET 200 script 114.1 KB 4671 ms 1 alerts

13:52:24.413 GET 200 script 41.0 KB 420 ms 1 alerts

13:52:24.429 GET 200 stylesheet 88.9 KB 462 ms 1 alerts

13:52:24.431 GET 200 script 198.5 KB 571 ms 1 alerts

13:52:24.732 GET 200 img 571.9 KB 1690 ms 1 alerts

13:52:24.734 GET 200 img 571.9 KB 2055 ms 1 alerts

13:52:25.080 GET 200 script 332.2 KB 908 ms 1 alerts

13:52:25.086 GET 200 stylesheet 5.1 KB 812 ms 1 alerts

13:52:25.089 GET 200 script 4.5 KB 845 ms 1 alerts

13:52:25.224 GET 200 stylesheet 27.8 KB 393 ms 1 alerts

13:52:25.229 GET 200 script 89.6 KB 817 ms 1 alerts

13:52:25.404 GET 200 xhr 646 B 354 ms 1 alerts

13:52:25.410 GET 200 xhr 646 B 816 ms 1 alerts

13:52:25.413 GET 200 xhr 24.0 KB 925 ms 1 alerts

13:52:25.421 GET 200 script 71.7 KB 921 ms 1 alerts

13:52:25.428 GET 200 img 7.6 KB 8139 ms 1 alerts

13:52:25.430 GET 200 img 6.3 KB 8293 ms 1 alerts

13:52:25.432 GET 200 img 7.2 KB 8368 ms 1 alerts

13:52:25.434 GET 200 img 57.5 KB 1389 ms 1 alerts

13:52:25.443 GET 200 img 113.8 KB 1397 ms 1 alerts

13:52:25.445 GET 200 img 237 B 2071 ms 1 alerts

13:52:25.446 GET 200 img 352.2 KB 3460 ms 1 alerts

13:52:25.448 GET 200 img 5.7 KB 3319 ms 1 alerts

13:52:25.450 GET 200 img 429.2 KB 3863 ms 1 alerts

13:52:25.454 GET 200 img 10.1 KB 3375 ms 1 alerts

13:52:25.455 GET 200 img 10.4 KB 3398 ms 1 alerts

13:52:25.457 GET 200 img 9.9 KB 3703 ms 1 alerts

13:52:25.459 GET 200 img 1.9 KB 3425 ms 1 alerts

13:52:25.462 GET 200 img 28.3 KB 3847 ms 1 alerts

13:52:25.466 GET 200 img 5.3 KB 3731 ms 1 alerts

http://13972.xyz/

Domain graph

Hostnames

Connections

Network requests

Transaction #367

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://13972.xyz/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #367

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://13972.xyz/

Domain graph

Network requests