WEBSITE ANALYSIS REPORT

http://youtube@qxz.llc/lyk1y?g5bn2

06 Mar 2026 · 00:04:30.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.show-sb.com3 captured requests
cdn.storageimagedisplay.com30 captured requests
cdn154.my.canva.site16 captured requests
creative-sb1.com22 captured requests
dholpins.lova.cam1 captured requests
fizzyacerbitymellow.com16 captured requests
flushpersist.com4 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com1 captured requests
kettledroopingcontinuation.com4 captured requests
playafterdark.com0 captured requests
preferencenail.com4 captured requests
protrafficinspector.com4 captured requests
qxz.llc0 captured requests
realizationnewestfangs.com27 captured requests
skinnycrawlinglax.com43 captured requests
sourshaped.com16 captured requests
wayfarerorthodox.com13 captured requests
weirdopt.com1 captured requests
wrappedthorntelevision.com25 captured requests
www.highperformanceformat.com2 captured requests

Connections

dholpins.lova.cam → cdn.show-sb.comCalls3 captured connections
dholpins.lova.cam → cdn.storageimagedisplay.comLoads from30 captured connections
dholpins.lova.cam → cdn154.my.canva.siteLoads from16 captured connections
dholpins.lova.cam → creative-sb1.comCalls7 captured connections
dholpins.lova.cam → creative-sb1.comLoads from15 captured connections
dholpins.lova.cam → fizzyacerbitymellow.comCalls3 captured connections
dholpins.lova.cam → fizzyacerbitymellow.comLoads from13 captured connections
dholpins.lova.cam → flushpersist.comLoads from4 captured connections
dholpins.lova.cam → fonts.googleapis.comLoads from1 captured connections
dholpins.lova.cam → fonts.gstatic.comLoads from1 captured connections
dholpins.lova.cam → kettledroopingcontinuation.comCalls2 captured connections
dholpins.lova.cam → kettledroopingcontinuation.comLoads from2 captured connections
dholpins.lova.cam → preferencenail.comLoads from4 captured connections
dholpins.lova.cam → protrafficinspector.comCalls4 captured connections
dholpins.lova.cam → realizationnewestfangs.comCalls12 captured connections
dholpins.lova.cam → realizationnewestfangs.comLoads from15 captured connections
dholpins.lova.cam → skinnycrawlinglax.comCalls14 captured connections
dholpins.lova.cam → skinnycrawlinglax.comLoads from29 captured connections
dholpins.lova.cam → sourshaped.comCalls8 captured connections
dholpins.lova.cam → sourshaped.comLoads from8 captured connections
dholpins.lova.cam → wayfarerorthodox.comCalls6 captured connections
dholpins.lova.cam → wayfarerorthodox.comLoads from7 captured connections
dholpins.lova.cam → weirdopt.comLoads from1 captured connections
dholpins.lova.cam → wrappedthorntelevision.comCalls1 captured connections
dholpins.lova.cam → wrappedthorntelevision.comLoads from24 captured connections
dholpins.lova.cam → www.highperformanceformat.comLoads from2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

00:03:37.916 GET 200 document 56.4 KB 47 ms —

00:03:38.000 GET 200 script 105.2 KB 764 ms —

00:03:38.012 GET 200 script 90.0 KB 763 ms —

00:03:38.013 GET 200 script 49.7 KB 768 ms —

00:03:38.014 GET 200 script 49.7 KB 765 ms —

00:03:38.015 GET 200 script 49.8 KB 1241 ms 3 alerts

00:03:38.016 GET 200 script 49.7 KB 1244 ms 3 alerts

00:03:38.018 GET 200 script 49.8 KB 805 ms —

00:03:38.019 GET 200 script 49.7 KB 805 ms —

00:03:38.020 GET 200 script 49.7 KB 559 ms —

00:03:38.021 GET 200 script 49.7 KB 567 ms —

00:03:38.022 GET 200 script 49.7 KB 576 ms —

00:03:38.024 GET 200 script 49.7 KB 568 ms —

00:03:38.024 GET 200 script 46.6 KB 655 ms —

00:03:38.520 GET 200 script 5.0 KB 678 ms 2 alerts

00:03:38.523 GET 200 script 83.4 KB 186 ms 3 alerts

00:03:38.524 GET 200 xhr 40 B 386 ms 1 alerts

00:03:38.549 GET 200 script 83.4 KB 172 ms 3 alerts

00:03:38.552 GET 200 xhr 40 B 449 ms 1 alerts

00:03:38.554 GET 200 script 5.0 KB 685 ms 3 alerts

00:03:38.557 GET 200 script 5.0 KB 602 ms 4 alerts

00:03:38.561 GET 200 xhr 40 B 303 ms 1 alerts

00:03:38.563 GET 200 script 5.0 KB 377 ms 4 alerts

00:03:38.564 GET 200 xhr 40 B 175 ms 1 alerts

00:03:38.834 GET 200 script 5.0 KB 683 ms 2 alerts

00:03:38.835 GET 307 xhr 4.3 KB 173 ms 2 alerts

00:03:38.837 GET 200 script 110.6 KB 759 ms 2 alerts

00:03:38.837 GET 200 script 90.0 KB 768 ms 2 alerts

00:03:38.838 GET 200 script 5.0 KB 207 ms 3 alerts

00:03:38.839 GET 307 xhr 4.3 KB 682 ms 3 alerts

00:03:38.841 GET 307 xhr 4.7 KB 391 ms 4 alerts

00:03:38.851 GET 307 xhr 4.7 KB 195 ms 4 alerts

00:03:38.857 GET 200 script 5.0 KB 392 ms 4 alerts

00:03:38.860 GET 307 xhr 4.3 KB 388 ms 4 alerts

00:03:38.862 GET 200 script 110.6 KB 676 ms 4 alerts

00:03:38.863 GET 200 script 90.0 KB 393 ms 4 alerts

00:03:38.866 GET 200 script 5.0 KB 386 ms 3 alerts

00:03:38.867 GET 307 xhr 4.3 KB 354 ms 3 alerts

00:03:38.872 GET 200 script 5.0 KB 269 ms 4 alerts

00:03:38.874 GET 307 xhr 4.7 KB 366 ms 4 alerts

00:03:38.878 GET 200 script 5.0 KB 348 ms 2 alerts

00:03:38.880 GET 307 xhr 4.7 KB 575 ms 2 alerts

Transaction #32

Request / response

URL

GET HTTPS

https://realizationnewestfangs.com/watch.22246631889.js?key=5e7f2e014ff0eebd7e1ed674df0cb3c0&kw=%5B%22flirt4free%22%2C%22live%22%2C%22cams%22%2C%22sex-dholpin-main%22%5D&refer=https%3A%2F%2Fdholpins.lova.cam%2F&tz=0&dev=e&res=14.3095&rb=&uuid=468daf43-9513-4123-997c-f728b2456b0e%3A1%3A1

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://dholpins.lova.cam/

Resource information

File type: Not recorded
MIME type: text/html
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 13:29:52.401 UTC
Times seen: 19308098

Size: 4.7 KB (4811 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: realizationnewestfangs.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 2F:D0:7E:69:4A:D0:06:61:89:AF:78:09:0A:5A:F1:7B:F9:4A:B7:96
Valid from: Thu, 26 Feb 2026 23:39:43 GMT
Valid until: Wed, 27 May 2026 23:39:42 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.22246631889.js?key=5e7f2e014ff0eebd7e1ed674df0cb3c0&kw=%5B%22flirt4free%22%2C%22live%22%2C%22cams%22%2C%22sex-dholpin-main%22%5D&refer=https%3A%2F%2Fdholpins.lova.cam%2F&tz=0&dev=e&res=14.3095&rb=&uuid=468daf43-9513-4123-997c-f728b2456b0e%3A1%3A1 HTTP/1.1
Host: realizationnewestfangs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dholpins.lova.cam
DNT: 1
Connection: keep-alive
Referer: https://dholpins.lova.cam/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Fri, 06 Mar 2026 00:03:39 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://dholpins.lova.cam
access-control-allow-credentials: true
location: https://realizationnewestfangs.com/watch.22246631889.js?key=5e7f2e014ff0eebd7e1ed674df0cb3c0&kw=%5B%22flirt4free%22%2C%22live%22%2C%22cams%22%2C%22sex-dholpin-main%22%5D&refer=https%3A%2F%2Fdholpins.lova.cam%2F&tz=0&dev=e&res=14.3095&rb=&uuid=468daf43-9513-4123-997c-f728b2456b0e%3A1%3A1&shu=4b70c33e654bfbf70b4026546ef89ad92d693cff652d620cc261cb1449569d06bca17dec491ec4edcb91ea4c34c76edf86885939cc09326899fbd3b7d0d8cdecedbef68c24edb1c871e50cbead86abfe5fdad7c06da2392012a6ac&pst=1772755479&rmtc=t&st1=2d4536caff5dfcafa24f337c14c5684a&ps1=1772755419&rid=019cc075-004e-7ab6-98cb-d3f1ad06c785
set-cookie: uid_id2=468daf43-9513-4123-997c-f728b2456b0e:1:1; expires=Fri, 13 Mar 2026 00:03:39 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.6OrocMhqiOrYNRgHH9m_BAAgKOW4jA1N7S8zemz1deA; expires=Fri, 06 Mar 2026 00:04:39 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 1
Host: realizationnewestfangs.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: d5a6e0023700d49baae206dc1af6389f
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

00:03:38.882 GET 200 script 5.0 KB 223 ms 2 alerts

00:03:38.883 GET 307 xhr 4.3 KB 320 ms 2 alerts

00:03:38.885 GET 200 script 5.0 KB 417 ms 2 alerts

00:03:38.886 GET 307 xhr 4.8 KB 435 ms 2 alerts

00:03:38.887 GET 200 script 49.7 KB 100 ms —

00:03:39.025 GET 200 script 5.0 KB 1018 ms 3 alerts

00:03:39.033 GET 307 xhr 4.2 KB 558 ms 3 alerts

00:03:39.035 GET 200 script 49.8 KB 104 ms —

http://youtube@qxz.llc/lyk1y?g5bn2

Domain graph

Hostnames

Connections

Network requests

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://youtube@qxz.llc/lyk1y?g5bn2

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #32

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://youtube@qxz.llc/lyk1y?g5bn2

Domain graph

Network requests