WEBSITE ANALYSIS REPORT

http://porno126.mom/videos/big-ass-nurse-lets-her-patient-cum-in-her-ass-when-the-doctor-leaves-yasmina-khan-xhwXuBY

06 Jun 2026 · 19:45:57.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

11d20ad213.98bf61159c.com4 captured requests
accounts.google.com3 captured requests
ads-us.kiklosh.com2 captured requests
ads.trackingtraffo.com1 captured requests
cdn.60ah.com1 captured requests
cdn.jsdelivr.net1 captured requests
cntking.buzz5 captured requests
e5ddfc38c2.7c11c184e6.com2 captured requests
flepquix.com2 captured requests
fp.metricswpsh.com4 captured requests
ic-vt-nss.xhcdn.com3 captured requests
js.cabnnr.com3 captured requests
js.capndr.com2 captured requests
js.wpadmngr.com2 captured requests
js.wpushsdk.com2 captured requests
na.nawpush.com2 captured requests
nereserv.com1 captured requests
ntvpforever.com4 captured requests
porno126.mom2 captured requests
preroll.hostave3.net4 captured requests
rtbbtr.com5 captured requests
static.bookmsg.com2 captured requests
static.cloudflareinsights.com1 captured requests
track-eu.trackingtraffo.com1 captured requests
track-us.kiklosh.com4 captured requests
video-nss.xhcdn.com7 captured requests
www.googletagmanager.com1 captured requests

Connections

porno126.mom → 11d20ad213.98bf61159c.comCalls2 captured connections
porno126.mom → 11d20ad213.98bf61159c.comLoads from2 captured connections
porno126.mom → accounts.google.comLoads from3 captured connections
porno126.mom → ads.trackingtraffo.comLoads from1 captured connections
porno126.mom → cdn.jsdelivr.netLoads from1 captured connections
porno126.mom → cntking.buzzLoads from5 captured connections
porno126.mom → e5ddfc38c2.7c11c184e6.comCalls2 captured connections
porno126.mom → flepquix.comCalls2 captured connections
porno126.mom → fp.metricswpsh.comCalls4 captured connections
porno126.mom → js.cabnnr.comLoads from1 captured connections
porno126.mom → js.capndr.comLoads from2 captured connections
porno126.mom → js.wpadmngr.comLoads from2 captured connections
porno126.mom → js.wpushsdk.comLoads from2 captured connections
porno126.mom → na.nawpush.comCalls2 captured connections
porno126.mom → nereserv.comCalls1 captured connections
porno126.mom → ntvpforever.comCalls4 captured connections
porno126.mom → rtbbtr.comCalls1 captured connections
porno126.mom → rtbbtr.comEmbeds2 captured connections
porno126.mom → static.bookmsg.comLoads from2 captured connections
porno126.mom → static.cloudflareinsights.comLoads from1 captured connections
porno126.mom → track-eu.trackingtraffo.comLoads from1 captured connections
porno126.mom → video-nss.xhcdn.comCalls7 captured connections
porno126.mom → www.googletagmanager.comLoads from1 captured connections
rtbbtr.com → ads-us.kiklosh.comLoads from2 captured connections
rtbbtr.com → cdn.60ah.comLoads from1 captured connections
rtbbtr.com → js.cabnnr.comLoads from2 captured connections
rtbbtr.com → preroll.hostave3.netLoads from4 captured connections
rtbbtr.com → preroll.hostave3.netRedirects to2 captured connections
rtbbtr.com → track-us.kiklosh.comLoads from4 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:45:34.359 GET 200 document 52.7 KB 1336 ms —

19:45:35.681 GET 200 script 132.8 KB 210 ms 1 alerts

19:45:35.684 GET 200 img 99.7 KB 135 ms —

19:45:35.685 GET 200 script 530.3 KB 46 ms —

19:45:35.686 GET 200 script 1.9 KB 124 ms —

19:45:35.688 GET 200 script 11.0 KB 115 ms —

19:45:35.689 GET 200 script 32.4 KB 48 ms —

19:45:35.691 GET 200 script 132.8 KB 152 ms 1 alerts

19:45:35.946 GET 200 xhr 679 B 181 ms —

19:45:36.107 GET 200 lazy-img 17.8 KB 128 ms —

19:45:36.109 GET 200 lazy-img 22.1 KB 139 ms —

19:45:36.111 GET 200 lazy-img 22.9 KB 127 ms —

19:45:36.119 GET 200 xhr 5.3 KB 204 ms 1 alerts

19:45:36.123 GET 200 script 0 B 175 ms 1 alerts

19:45:36.131 GET 200 xhr 1.5 KB 176 ms 1 alerts

19:45:36.134 GET 200 script 0 B 81 ms 1 alerts

19:45:36.142 GET 200 xhr 26.2 KB 11 ms —

19:45:36.361 GET 200 xhr 1.1 KB 8 ms —

19:45:36.383 GET 200 img 80.4 KB 16 ms —

19:45:36.384 GET 200 img 99.7 KB 6 ms —

19:45:36.386 GET 200 xhr 47.1 KB 22 ms —

19:45:36.619 POST 204 xhr 0 B 4 ms —

19:45:36.702 GET 200 xhr 0 B 326 ms —

19:45:36.704 OPTIONS 204 xhr 0 B 330 ms —

19:45:36.706 GET 200 script 253.6 KB 299 ms 1 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://js.wpushsdk.com/npc/sdk/wpu/npush.m.js

IP / ASN

92.246.95.227

AS39572 · DataWeb Global Group B.V.

Requested by: https://porno126.mom/videos/big-ass-nurse-lets-her-patient-cum-in-her-ass-when-the-doctor-leaves-yasmina-khan-xhwXuBY

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 24 Apr 2026 · 07:31:53.328 UTC
Last seen (UTC): 24 Oct 2026 · 02:08:19.820 UTC
Times seen: 1021

Size: 253.6 KB (259653 bytes)
MD5: 146acf8688d99f791b040559bafd165f
SHA1: 1e2e3d464ae2727d86cfdfb66a5222c5eacc07aa
SHA256: 5d4168e769c22d3fc6ab5b2c9e777d2d2e99468cebe857a87ef1faf879fdb065

Certificate information

Issuer: Let's Encrypt · R12
Subject: js.wpushsdk.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: D2:7F:0F:EB:92:09:23:E8:8C:CC:CA:45:E7:E9:3A:70:8A:1A:3C:D6
Valid from: Fri, 01 May 2026 03:34:56 GMT
Valid until: Thu, 30 Jul 2026 03:34:55 GMT

Technology fingerprints

Nginx:1.18.0 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /npc/sdk/wpu/npush.m.js HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://porno126.mom/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Sat, 06 Jun 2026 19:45:36 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Fri, 24 Apr 2026 07:19:27 GMT
etag: W/"69eb197f-3f645"
content-encoding: gzip
expires: Sat, 06 Jun 2026 19:50:36 GMT
cache-control: max-age=300
x-cdn-host-id: AH1742
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2

19:45:36.707 OPTIONS 204 xhr 0 B 269 ms 1 alerts

19:45:36.718 GET 200 xhr 0 B 161 ms —

19:45:36.719 OPTIONS 204 xhr 0 B 286 ms —

19:45:36.721 GET 200 script 83.2 KB 140 ms —

19:45:36.722 OPTIONS 204 xhr 0 B 156 ms 1 alerts

19:45:36.726 GET 200 xhr 26.2 KB 9 ms —

19:45:36.749 GET 200 xhr 1.1 KB 23 ms —

19:45:36.790 GET 200 xhr 136.3 KB 32 ms —

19:45:36.910 POST 200 xhr 38 B 38 ms —

19:45:37.096 POST 200 xhr 58 B 33 ms 1 alerts

19:45:37.135 POST 200 xhr 38 B 38 ms —

19:45:37.137 POST 200 xhr 58 B 33 ms 1 alerts

19:45:37.201 GET 200 subdocument 17.1 KB 364 ms —

19:45:37.203 GET 200 subdocument 17.1 KB 375 ms —

19:45:37.206 GET 200 xhr 0 B 298 ms —

19:45:37.207 GET 200 xhr 0 B 279 ms —

19:45:37.632 GET 200 stylesheet 1.9 KB 271 ms —

19:45:37.635 GET 200 img 42 B 58 ms —

19:45:37.639 GET 200 img 2.3 KB 788 ms —

19:45:37.641 GET 200 img 70 B 558 ms —

19:45:37.643 GET 302 img 42 B 35 ms —

19:45:37.647 GET 200 script 376 B 18 ms —

19:45:37.651 GET 200 img 70 B 673 ms —

19:45:37.653 GET 302 img 42 B 42 ms —

19:45:37.655 GET 200 script 376 B 22 ms —

http://porno126.mom/videos/big-ass-nurse-lets-her-patient-cum-in-her-ass-when-the-doctor-leaves-yasmina-khan-xhwXuBY

Domain graph

Hostnames

Connections

Network requests

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://porno126.mom/videos/big-ass-nurse-lets-her-patient-cum-in-her-ass-when-the-doctor-leaves-yasmina-khan-xhwXuBY

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #03

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://porno126.mom/videos/big-ass-nurse-lets-her-patient-cum-in-her-ass-when-the-doctor-leaves-yasmina-khan-xhwXuBY

Domain graph

Network requests