WEBSITE ANALYSIS REPORT

http://www.sportbuzz.online/

05 May 2026 · 19:33:31.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:32:57.854 GET 200 document 82.4 KB 1274 ms —

19:32:58.901 GET 200 stylesheet 35.6 KB 392 ms —

19:32:58.906 GET 200 img 162 B 224 ms —

19:32:58.910 GET 200 script 6.4 KB 35 ms —

19:32:59.337 GET 200 document 4.5 KB 800 ms 2 alerts

19:32:59.906 GET No response xhr 0 B 32 ms —

19:32:59.938 GET No response img 0 B 0 ms 2 alerts

19:32:59.984 GET 302 document 750 B 891 ms 2 alerts

Transaction #13

Request / response

URL

GET HTTPS

https://lampshadescreen.com/api/users?token=L3lyYnBreXdlcj9mc3R1PTAxOWRmOWExLTIwZDMtNzJiOC1hMTRlLThhYjVmOThjODliYiZrZXk9NjdkYmFjOTgxZTZjOWQwNWFlY2VjNGI1YmVhNzU4ODMmcHMxPTRlZjY3MTUxMTM4Yjg3MzFkZDNlNjJmYjhkODM2YjY2JnJlZmVyPWh0dHBzJTNBJTJGJTJGd3d3LnNwb3J0YnV6ei5vbmxpbmUlMkYmcm10Yz10JnNodD1OSnpDX1NjUFlmZlc3eDZBRFJzR2pPTmFCSjVkbHV6THJkRFRTVC1xaVo4JnNodj0yJnN0MT0xNzc4MDA5NTc5NzI4ODMwNTc3JnBpaT0maW49JnV1aWQ9

IP / ASN

172.240.127.242

AS7979 · SERVERS-COM

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: text/html; charset=ISO-8859-1
First seen (UTC): Not recorded
Last seen (UTC): 24 Oct 2026 · 12:29:56.753 UTC
Times seen: 19331780

Size: 750 B (750 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: lampshadescreen.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 99:56:07:2B:99:ED:47:49:06:60:E3:0A:84:B7:28:68:13:AD:89:6A
Valid from: Wed, 15 Apr 2026 22:21:23 GMT
Valid until: Tue, 14 Jul 2026 22:21:22 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /api/users?token=L3lyYnBreXdlcj9mc3R1PTAxOWRmOWExLTIwZDMtNzJiOC1hMTRlLThhYjVmOThjODliYiZrZXk9NjdkYmFjOTgxZTZjOWQwNWFlY2VjNGI1YmVhNzU4ODMmcHMxPTRlZjY3MTUxMTM4Yjg3MzFkZDNlNjJmYjhkODM2YjY2JnJlZmVyPWh0dHBzJTNBJTJGJTJGd3d3LnNwb3J0YnV6ei5vbmxpbmUlMkYmcm10Yz10JnNodD1OSnpDX1NjUFlmZlc3eDZBRFJzR2pPTmFCSjVkbHV6THJkRFRTVC1xaVo4JnNodj0yJnN0MT0xNzc4MDA5NTc5NzI4ODMwNTc3JnBpaT0maW49JnV1aWQ9 HTTP/1.1
Host: lampshadescreen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lampshadescreen.com/api/users?token=L3lyYnBreXdlcj9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTI2MDI1Mjk2
Cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rdsj1t-594JeQd2sFY6syzXRNEw7asmoK2c3LHFTCdo; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 302 Found
Server: nginx/1.28.2
Date: Tue, 05 May 2026 19:33:00 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Sec-CH-UA-Platform,Device-Stock-UA,X-Device-User-Agent,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Mobile,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA,Sec-CH-UA-PlatformUser-Agent
location: https://track.mddsp.info/b570df3d-22d5-4958-b71a-e23c87b9ca05?zoneid=4765915&browser=Firefox&bannerid=3742080&os=Windows&country=Norway&region=Oslo&isp=Blix%20Solutions&useragent=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&language=11&placement=26025296&subid=6747a80105134d0ae73ca955d0b5f484
set-cookie: pdhtkv=true; expires=Wed, 06 May 2026 19:33:00 GMT; path=/; secure; SameSite=None
uncs=1; expires=Wed, 06 May 2026 19:33:00 GMT; path=/; secure; SameSite=None
pdhtkv28=true; expires=Wed, 06 May 2026 19:33:00 GMT; path=/; secure; SameSite=None
uncs28=1; expires=Wed, 06 May 2026 19:33:00 GMT; path=/; secure; SameSite=None
u_pl26025296=1; expires=Wed, 06 May 2026 19:33:00 GMT; path=/; secure; SameSite=None
iprc_c+8b1b3c7626b437e2be5b6ad9bfd69601=1411800; expires=Wed, 06 May 2026 03:33:00 GMT; path=/; secure; SameSite=None
iprc_c:1411800=1; expires=Wed, 06 May 2026 03:33:00 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 196
Host: lampshadescreen.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 62ff4fedff629244e73593828f3348a8
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:33:00.580 GET 200 document 750 B 795 ms —

19:33:01.123 GET 200 document 462 B 572 ms —

19:33:01.534 GET 403 document 5.6 KB 51 ms —

19:33:01.669 GET 200 script 180.0 KB 12 ms —

19:33:01.692 GET 200 img 14.7 KB 62 ms —

19:33:01.741 GET 200 img 14.7 KB 59 ms —

19:33:01.784 GET 200 script 60.1 KB 65 ms —

19:33:01.996 POST 200 xhr 20.5 KB 32 ms —

19:33:02.124 GET 200 subdocument 212.5 KB 28 ms —

19:33:02.246 GET 200 img 86 B 9 ms —

19:33:02.595 POST 200 xhr 471.0 KB 277 ms —

19:33:04.507 GET 401 fetch 1 B 7 ms —

19:33:04.552 GET 200 img 1.4 KB 7 ms —

19:33:06.988 POST 200 xhr 32.8 KB 51 ms —

http://www.sportbuzz.online/

Domain graph

Hostnames

Connections