WEBSITE ANALYSIS REPORT

http://cxfbl.pages.dev/?id=HUB

19 Jul 2026 · 19:32:54.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:32:17.226 GET 200 document 8.5 KB 55 ms —

19:32:17.515 GET 200 script 95.6 KB 609 ms 3 alerts

Transaction #08

Request / response

URL

GET HTTPS

https://pl28896336.effectivegatecpm.com/80/63/70/806370c59dd3a4602e7f623904976ac0.js

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://cxfbl.pages.dev/?id=HUB

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: application/javascript
First seen (UTC): 19 Jul 2026 · 19:33:00.341 UTC
Last seen (UTC): 19 Jul 2026 · 19:33:00.341 UTC
Times seen: 1

Size: 95.6 KB (97877 bytes)
MD5: 7a871d0031f109d018074b49d612a8fe
SHA1: 6884369b07dfc88d2a7320cd368958953e4611b4
SHA256: 5898de5796d1bd1954d56e60c9feb3a9733b40636a1a8af88b74787f62979fc2

Certificate information

Issuer: Let's Encrypt · YR1
Subject: effectivegatecpm.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: FE:FC:7D:E1:72:3C:77:92:F1:66:DF:EA:97:77:4A:E3:92:9A:27:54
Valid from: Thu, 04 Jun 2026 21:44:59 GMT
Valid until: Wed, 02 Sep 2026 21:44:58 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /80/63/70/806370c59dd3a4602e7f623904976ac0.js HTTP/1.1
Host: pl28896336.effectivegatecpm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://cxfbl.pages.dev/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Priority: u=2
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 19 Jul 2026 19:32:17 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version
access-control-allow-origin: *
content-encoding: zstd
vary: Accept-Encoding
x-envoy-upstream-service-time: 2
Host: pl28896336.effectivegatecpm.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d5e4df41498e3c3385823e6707d06df5
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:32:17.518 GET 200 script 628.6 KB 45 ms —

19:32:17.524 GET 200 stylesheet 17.5 KB 23 ms —

19:32:17.526 GET 200 stylesheet 876 B 34 ms —

19:32:17.529 GET 200 script 34.7 KB 35 ms —

19:32:17.531 GET 200 script 256 B 44 ms —

19:32:17.540 GET 200 img 8.5 KB 23 ms —

19:32:18.171 GET 200 script 83.4 KB 146 ms 1 alerts

19:32:18.172 GET 200 script 91.3 KB 565 ms 1 alerts

19:32:18.176 GET 200 xhr 40 B 92 ms —

19:32:18.179 GET 200 img 0 B 462 ms 1 alerts

19:32:18.235 GET 200 font 35.4 KB 63 ms —

19:32:19.173 OPTIONS 204 xhr 0 B 388 ms 1 alerts

19:32:20.415 GET 200 img 8.5 KB 31 ms —

http://cxfbl.pages.dev/?id=HUB

Domain graph

Hostnames

Connections