WEBSITE ANALYSIS REPORT

https://ouo.io/fJrxQE

23 Aug 2026 · 13:14:35.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
adsco.re3 captured requests
brunhild.challenges.cloudflare.com1 captured requests
c.adsco.re1 captured requests
cdn.popcash.net1 captured requests
cdn.storageimagedisplay.com1 captured requests
cdn.tailwindcss.com2 captured requests
cdnjs.cloudflare.com1 captured requests
challenges.cloudflare.com13 captured requests
cuplikenominee.com1 captured requests
excavatenearbywand.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com1 captured requests
imp9.pubadx.one1 captured requests
lp.mybestartist.com4 captured requests
ouo.io12 captured requests
p.asdfix.com2 captured requests
platform.pubadx.one2 captured requests
protrafficinspector.com1 captured requests
rrnivx7bwyom.l4.adsco.re1 captured requests
rrnivx7bwyom.n4.adsco.re1 captured requests
rrnivx7bwyom.s4.adsco.re1 captured requests
walnutneckvariability.com1 captured requests
workdeadlinededicate.com3 captured requests
www.blurparkskipper.courses1 captured requests
www.googletagmanager.com1 captured requests

Connections

challenges.cloudflare.com → brunhild.challenges.cloudflare.comCalls1 captured connections
lp.mybestartist.com → cdn.tailwindcss.comLoads from2 captured connections
lp.mybestartist.com → cdnjs.cloudflare.comLoads from1 captured connections
ouo.io → 4.adsco.reCalls2 captured connections
ouo.io → 6.adsco.reCalls2 captured connections
ouo.io → adsco.reCalls3 captured connections
ouo.io → c.adsco.reLoads from1 captured connections
ouo.io → cdn.popcash.netLoads from1 captured connections
ouo.io → cdn.storageimagedisplay.comLoads from1 captured connections
ouo.io → challenges.cloudflare.comEmbeds2 captured connections
ouo.io → challenges.cloudflare.comLoads from2 captured connections
ouo.io → cuplikenominee.comLoads from1 captured connections
ouo.io → excavatenearbywand.comLoads from1 captured connections
ouo.io → fonts.googleapis.comLoads from1 captured connections
ouo.io → fonts.gstatic.comLoads from1 captured connections
ouo.io → imp9.pubadx.oneLoads from1 captured connections
ouo.io → platform.pubadx.oneCalls1 captured connections
ouo.io → platform.pubadx.oneLoads from1 captured connections
ouo.io → protrafficinspector.comCalls1 captured connections
ouo.io → rrnivx7bwyom.l4.adsco.reCalls1 captured connections
ouo.io → rrnivx7bwyom.n4.adsco.reCalls1 captured connections
ouo.io → rrnivx7bwyom.s4.adsco.reCalls1 captured connections
ouo.io → walnutneckvariability.comLoads from1 captured connections
ouo.io → workdeadlinededicate.comCalls2 captured connections
ouo.io → workdeadlinededicate.comLoads from1 captured connections
ouo.io → www.googletagmanager.comLoads from1 captured connections
p.asdfix.com → www.blurparkskipper.coursesRedirects to2 captured connections
www.blurparkskipper.courses → lp.mybestartist.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

13:13:53.142 GET 403 document 5.5 KB 83 ms —

13:13:53.396 GET 200 script 224.5 KB 28 ms —

13:13:53.449 GET 200 img 0 B 29 ms —

13:13:53.722 GET 200 script 82.3 KB 26 ms —

13:13:53.747 POST 200 xhr 110.9 KB 34 ms —

13:13:53.753 GET 200 img 0 B 28 ms —

13:13:53.837 GET 200 subdocument 264.1 KB 17 ms —

13:13:54.188 POST 200 xhr 826.3 KB 190 ms —

13:13:54.656 GET 401 fetch 1 B 4 ms —

13:13:55.213 GET 200 img 752 B 48 ms —

13:13:55.896 POST 200 xhr 124.7 KB 37 ms —

13:14:00.442 POST 200 xhr 5.0 KB 23 ms —

13:14:00.535 POST 200 xhr 3.2 KB 27 ms —

13:14:02.590 GET 200 document 6.0 KB 404 ms —

13:14:03.068 GET 200 stylesheet 1.2 KB 89 ms —

13:14:03.073 GET 200 stylesheet 107.0 KB 27 ms —

13:14:03.075 GET 200 stylesheet 5.5 KB 28 ms —

13:14:03.077 GET 200 script 6 B 128 ms 2 alerts

13:14:03.078 GET 200 script 96.0 KB 29 ms —

13:14:03.083 GET 200 script 9.4 KB 73 ms —

13:14:03.085 GET 200 script 442.1 KB 151 ms —

13:14:03.090 GET 200 img 2.3 KB 27 ms —

13:14:03.248 GET 200 font 20.2 KB 61 ms —

13:14:03.258 POST 204 beacon 0 B 181 ms —

13:14:03.260 POST 204 beacon 0 B 553 ms —

13:14:03.261 POST 204 beacon 0 B 1052 ms —

13:14:03.707 GET 200 fetch 10.8 KB 183 ms —

13:14:03.809 GET 200 img 5.3 KB 27 ms —

13:14:03.829 GET 200 script 82.3 KB 8 ms —

13:14:03.895 GET 200 subdocument 259.3 KB 15 ms —

13:14:03.897 GET 200 script 34.6 KB 610 ms 1 alerts

13:14:03.899 GET No response script 0 B 0 ms —

13:14:03.902 GET 200 script 108.3 KB 93 ms —

13:14:03.903 GET 200 img 0 B 143 ms —

13:14:03.927 GET 200 fetch 0 B 561 ms —

13:14:03.928 GET No response fetch 0 B 0 ms —

13:14:03.929 GET No response fetch 0 B 0 ms —

13:14:03.933 GET No response fetch 0 B 0 ms —

13:14:03.934 GET No response fetch 0 B 0 ms —

13:14:04.204 POST 200 fetch 119 B 503 ms —

13:14:04.230 POST 200 xhr 803.7 KB 191 ms —

13:14:04.525 GET 200 xhr 40 B 112 ms —

13:14:04.651 GET 307 xhr 0 B 376 ms 2 alerts

13:14:04.697 GET 401 fetch 1 B 8 ms —

13:14:04.705 GET No response fetch 0 B 0 ms —

13:14:04.707 POST No response fetch 0 B 0 ms —

13:14:04.713 GET 200 img 1.1 KB 50 ms —

13:14:05.032 GET 200 xhr 4.0 KB 118 ms 2 alerts

Transaction #59

Request / response

URL

GET HTTPS

https://workdeadlinededicate.com/watch.810066410710.js?dev=e&fstu=01a02ec1-c130-7c73-9ff1-d6083d9ee8cf&key=dc7f2662e6465cd971b7286ff95b283d&kw=%5B%22earn%22%2C%22money%22%2C%22on%22%2C%22short%22%2C%22links%22%2C%22make%22%2C%22and%22%2C%22the%22%2C%22biggest%22%2C%22-%22%2C%22ouo%22%2C%22io%22%5D&ps1=1787490844&rb=e&refer=https%3A%2F%2Fouo.io%2FfJrxQE&res=14.1055&rmtc=t&sht=hgm8e0sWQVlNrV9w_cjq09iPCM-qrMprU3SGiYThcT4&shv=2&st1=e43903f983ae0797d62f2f78eb395adf&tz=0&uuid=11a12913-a2b6-4ebf-b589-e299beef6940%3A2%3A1

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://ouo.io/fJrxQE

Resource information

File type: JavaScript source, ASCII text, with very long lines (3214)
MIME type: text/html
First seen (UTC): 23 Aug 2026 · 13:15:24.206 UTC
Last seen (UTC): 23 Aug 2026 · 13:15:24.206 UTC
Times seen: 1

Size: 4.0 KB (4090 bytes)
MD5: 56bd3acf6dbfe80c5bd0011257636d94
SHA1: d4efd0d9799c3bd5cbaf491aefdd46cea8e6c33c
SHA256: 4093bc7580fa84f82c0ce36cb171f453e933204dfdb119dbc9988ce5e73958e6

Certificate information

Issuer: Let's Encrypt · YR1
Subject: workdeadlinededicate.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 10:47:66:26:DB:09:A5:17:78:DA:F0:CB:92:C3:2C:F2:8D:0B:43:39
Valid from: Sat, 27 Jun 2026 03:50:31 GMT
Valid until: Fri, 25 Sep 2026 03:50:30 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.28.2 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.810066410710.js?dev=e&fstu=01a02ec1-c130-7c73-9ff1-d6083d9ee8cf&key=dc7f2662e6465cd971b7286ff95b283d&kw=%5B%22earn%22%2C%22money%22%2C%22on%22%2C%22short%22%2C%22links%22%2C%22make%22%2C%22and%22%2C%22the%22%2C%22biggest%22%2C%22-%22%2C%22ouo%22%2C%22io%22%5D&ps1=1787490844&rb=e&refer=https%3A%2F%2Fouo.io%2FfJrxQE&res=14.1055&rmtc=t&sht=hgm8e0sWQVlNrV9w_cjq09iPCM-qrMprU3SGiYThcT4&shv=2&st1=e43903f983ae0797d62f2f78eb395adf&tz=0&uuid=11a12913-a2b6-4ebf-b589-e299beef6940%3A2%3A1 HTTP/1.1
Host: workdeadlinededicate.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://ouo.io
Referer: https://ouo.io/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Cookie: uid_id2=11a12913-a2b6-4ebf-b589-e299beef6940:2:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyMDEwNjIwOCwiayI6ImRjN2YyNjYyZTY0NjVjZDk3MWI3Mjg2ZmY5NWIyODNkIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxMjQxNjMsInBpZCI6MjQ1NjgsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjEsImFpZCI6NSwicHQiOjQsInBrIjoiYXEzaWMwY2hzIiwiY3BrcyI6eyIyOCI6IjE2ZmNhMjg1MzQwYzZhYTZiOWRlZTBmOWU0OTkzYWUxIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0NjI3MCwibiI6Ik1hdXJhIn0sInJnIjp7ImlkIjozMjcxLCJuIjoiVmlrZW4ifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9vdW8uaW8vZkpyeFFFIiwidHoiOjIsImlkdWMiOjAsImFyIjpbXX19.qqf-hbkbsQMlBo6MzM3_88rpCGD7bq5ff76KwAWRx4o
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Sun, 23 Aug 2026 13:14:05 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Device-Stock-Ua
access-control-allow-credentials: true
access-control-allow-origin: https://ouo.io
content-encoding: zstd
set-cookie: uid_id2=11a12913-a2b6-4ebf-b589-e299beef6940:2:1; Path=/; Expires=Sun, 30 Aug 2026 13:14:05 GMT; Secure; SameSite=None
pdhtkv=true; Path=/; Expires=Mon, 24 Aug 2026 13:14:05 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Mon, 24 Aug 2026 13:14:05 GMT; Secure; SameSite=None
pdhtkv5=true; Path=/; Expires=Mon, 24 Aug 2026 13:14:05 GMT; Secure; SameSite=None
uncs5=1; Path=/; Expires=Mon, 24 Aug 2026 13:14:05 GMT; Secure; SameSite=None
u_pl20106208=1; Path=/; Expires=Mon, 24 Aug 2026 13:14:05 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 19
Host: workdeadlinededicate.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 3881a09b550428e15101e83bcc740415
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

13:14:05.199 GET 200 img 76.6 KB 133 ms —

13:14:05.201 GET 200 img 0 B 0 ms 2 alerts

https://ouo.io/fJrxQE

Domain graph

Hostnames

Connections

Network requests

Transaction #59

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://ouo.io/fJrxQE

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #59

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://ouo.io/fJrxQE

Domain graph

Network requests