WEBSITE ANALYSIS REPORT

http://librarygenesis.net

05 Mar 2026 · 19:14:49.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

255md.com1 captured requests
al5sm.com1 captured requests
cdn.exmarketplace.com1 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com7 captured requests
creative-sb1.com6 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
kettledroopingcontinuation.com8 captured requests
librarygenesis.net53 captured requests
mattersmark.com14 captured requests
my.rtmark.net1 captured requests
pl28277825.effectivegatecpm.com2 captured requests
preferencenail.com2 captured requests
protrafficinspector.com5 captured requests
realizationnewestfangs.com1 captured requests
region1.analytics.google.com1 captured requests
weirdopt.com1 captured requests
www.google.no1 captured requests
www.googletagmanager.com1 captured requests

Connections

librarygenesis.net → 255md.comCalls1 captured connections
librarygenesis.net → al5sm.comLoads from1 captured connections
librarygenesis.net → cdn.exmarketplace.comLoads from1 captured connections
librarygenesis.net → cdn.show-creative1.comCalls1 captured connections
librarygenesis.net → cdn.storageimagedisplay.comLoads from7 captured connections
librarygenesis.net → creative-sb1.comCalls3 captured connections
librarygenesis.net → creative-sb1.comLoads from3 captured connections
librarygenesis.net → flushpersist.comLoads from2 captured connections
librarygenesis.net → fonts.googleapis.comLoads from1 captured connections
librarygenesis.net → fonts.gstatic.comLoads from2 captured connections
librarygenesis.net → kettledroopingcontinuation.comCalls1 captured connections
librarygenesis.net → kettledroopingcontinuation.comLoads from7 captured connections
librarygenesis.net → mattersmark.comCalls2 captured connections
librarygenesis.net → mattersmark.comLoads from12 captured connections
librarygenesis.net → my.rtmark.netCalls1 captured connections
librarygenesis.net → pl28277825.effectivegatecpm.comLoads from2 captured connections
librarygenesis.net → preferencenail.comLoads from2 captured connections
librarygenesis.net → protrafficinspector.comCalls5 captured connections
librarygenesis.net → realizationnewestfangs.comLoads from1 captured connections
librarygenesis.net → region1.analytics.google.comCalls1 captured connections
librarygenesis.net → weirdopt.comLoads from1 captured connections
librarygenesis.net → www.google.noLoads from1 captured connections
librarygenesis.net → www.googletagmanager.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:14:26.141 GET 200 document 187.5 KB 2848 ms —

19:14:29.191 GET 200 stylesheet 116.6 KB 45 ms —

19:14:29.194 GET 200 stylesheet 2.6 KB 21 ms —

19:14:29.197 GET 200 stylesheet 7.3 KB 29 ms —

19:14:29.200 GET 200 stylesheet 3.3 KB 22 ms —

19:14:29.202 GET 200 stylesheet 19.1 KB 37 ms —

19:14:29.204 GET 200 stylesheet 255 B 33 ms —

19:14:29.209 GET 200 script 85.5 KB 50 ms —

19:14:29.213 GET 200 script 13.3 KB 36 ms —

19:14:29.214 GET 200 script 22.1 KB 40 ms —

19:14:29.218 GET 200 script 393.2 KB 644 ms —

19:14:29.219 GET 404 font 89.7 KB 795 ms —

19:14:29.232 GET 404 script 0 B 331 ms —

19:14:29.235 GET 200 stylesheet 44.2 KB 32 ms —

19:14:29.237 GET 200 stylesheet 5.8 KB 22 ms —

19:14:29.242 GET 200 stylesheet 187.1 KB 29 ms —

19:14:29.244 GET 200 stylesheet 9.4 KB 21 ms —

19:14:29.251 GET 200 stylesheet 13.9 KB 23 ms —

19:14:29.256 GET 200 stylesheet 3.8 KB 21 ms —

19:14:29.262 GET 200 stylesheet 328 B 18 ms —

19:14:29.265 GET 200 stylesheet 268 B 15 ms —

19:14:29.270 GET 200 imageset 43.1 KB 24 ms —

19:14:29.271 GET 200 imageset 175.9 KB 43 ms —

19:14:29.274 GET 200 imageset 16.7 KB 21 ms —

19:14:29.278 GET 200 script 46.7 KB 790 ms 3 alerts

19:14:29.280 GET 200 img 78.2 KB 33 ms —

19:14:29.289 GET 200 script 41 B 18 ms —

19:14:29.292 GET 200 script 7.2 KB 15 ms —

19:14:29.297 GET 200 script 2.1 KB 16 ms —

19:14:29.298 GET 200 script 737 B 39 ms —

19:14:29.302 GET 200 script 39 B 21 ms —

19:14:29.303 GET 200 script 26.7 KB 28 ms —

19:14:29.304 GET 200 script 114.5 KB 23 ms —

19:14:29.306 GET 200 script 660.4 KB 39 ms —

19:14:29.308 GET 200 script 48.1 KB 32 ms —

19:14:29.308 GET 200 script 34.6 KB 30 ms —

19:14:29.312 GET 200 script 84.7 KB 30 ms —

19:14:29.316 GET 200 script 2.3 KB 26 ms —

19:14:29.326 GET 200 script 10.4 KB 20 ms —

19:14:29.328 GET 200 script 16.1 KB 16 ms —

19:14:29.329 GET 200 script 6.5 KB 17 ms —

19:14:29.338 GET 200 script 6.2 KB 16 ms —

19:14:29.340 GET 200 script 57.4 KB 16 ms —

19:14:29.342 GET 200 script 2.2 KB 14 ms —

19:14:29.343 GET 200 script 3.7 KB 17 ms —

19:14:29.345 GET 200 script 6.6 KB 16 ms —

19:14:29.349 GET 200 script 134 B 16 ms —

19:14:29.371 GET 200 script 1.3 KB 14 ms —

19:14:29.492 GET 200 script 111.4 KB 122 ms —

19:14:29.496 GET 200 script 46.7 KB 812 ms 3 alerts

Transaction #23

Request / response

URL

GET HTTPS

https://pl28277825.effectivegatecpm.com/b1325a3e9931062f68d140a0864b1c7a/invoke.js

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://librarygenesis.net/

Resource information

File type: JavaScript source, Unicode text, UTF-8 text, with very long lines (47799), with no line terminators
MIME type: application/javascript
First seen (UTC): 05 Mar 2026 · 19:14:58.793 UTC
Last seen (UTC): 05 Mar 2026 · 19:14:58.793 UTC
Times seen: 1

Size: 46.7 KB (47801 bytes)
MD5: f787c7556ba421cdeae6f08ff68a4707
SHA1: 5d85098fe8d211a266cb2e40f4b88bc5bf5dbd06
SHA256: 051013cb56281898c4f502fa46f644a7e00f3564d5b48215c321b4e3c812be17

Certificate information

Issuer: Let's Encrypt · R12
Subject: effectivegatecpm.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 4D:33:AA:27:56:E6:86:A8:20:28:DE:BA:58:20:8F:ED:14:AF:E9:3D
Valid from: Wed, 04 Feb 2026 21:41:44 GMT
Valid until: Tue, 05 May 2026 21:41:43 GMT

Technology fingerprints

Nginx:1.21.6 (Web servers, Reverse proxies)
HSTS (Security)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /b1325a3e9931062f68d140a0864b1c7a/invoke.js HTTP/1.1
Host: pl28277825.effectivegatecpm.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://librarygenesis.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 05 Mar 2026 19:14:29 GMT
Content-Type: application/javascript
Content-Length: 17687
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 5
Host: pl28277825.effectivegatecpm.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: e781be436a87620bd048e8a0d58fdeb8
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

http://librarygenesis.net

Domain graph

Hostnames

Connections

Network requests

Transaction #23

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://librarygenesis.net

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #23

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://librarygenesis.net

Domain graph

Network requests