WEBSITE ANALYSIS REPORT

http://www.xxmygirl.com/pvt-show-two-girls-dildo-ride-cumshow/sQuiRtcHM6Ly9jZG4uY2Ftd2hvcmVzLnR2L2NvbnRlbnRzL3ZpZGVvc19zb3VyY2VzLzEzNjIwMDAwLzEzNjIwNzE2L3NjcmVlbnNob3RzLzIuanBnfulL-hDvideofulL-hDsQuiRtcHM6Ly90czMubW0uYmluZy5uZXQvdGgbLonDeaWQ9T0lQLkVjMEVKWHFWbWhvc3lXczJKVmhEWVFIYUVLJnBpZD0xNS4x.html

24 Apr 2026 · 08:52:18.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

c.adsco.re1 captured requests
cdn.camwhores.tv1 captured requests
cdn.nightdestruct.com10 captured requests
cdn.show-sb.com2 captured requests
cdn.storageimagedisplay.com1 captured requests
cdnjs.cloudflare.com1 captured requests
e3fvz9sbjegr.l4.adsco.re1 captured requests
e3fvz9sbjegr.n4.adsco.re1 captured requests
e3fvz9sbjegr.s4.adsco.re1 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com4 captured requests
intelligenceadx.com1 captured requests
marchshotgun.com6 captured requests
preferencenail.com3 captured requests
protrafficinspector.com2 captured requests
realizationnewestfangs.com2 captured requests
sourshaped.com12 captured requests
ts1.mm.bing.net8 captured requests
ts2.mm.bing.net12 captured requests
ts3.mm.bing.net8 captured requests
ts4.mm.bing.net7 captured requests
www.intelligenceadx.com1 captured requests
www.xxmygirl.com12 captured requests

Connections

www.xxmygirl.com → c.adsco.reLoads from1 captured connections
www.xxmygirl.com → cdn.camwhores.tvLoads from1 captured connections
www.xxmygirl.com → cdn.nightdestruct.comCalls6 captured connections
www.xxmygirl.com → cdn.nightdestruct.comLoads from4 captured connections
www.xxmygirl.com → cdn.show-sb.comCalls2 captured connections
www.xxmygirl.com → cdn.storageimagedisplay.comLoads from1 captured connections
www.xxmygirl.com → cdnjs.cloudflare.comLoads from1 captured connections
www.xxmygirl.com → e3fvz9sbjegr.l4.adsco.reCalls1 captured connections
www.xxmygirl.com → e3fvz9sbjegr.n4.adsco.reCalls1 captured connections
www.xxmygirl.com → e3fvz9sbjegr.s4.adsco.reCalls1 captured connections
www.xxmygirl.com → fonts.googleapis.comLoads from2 captured connections
www.xxmygirl.com → fonts.gstatic.comLoads from4 captured connections
www.xxmygirl.com → intelligenceadx.comLoads from1 captured connections
www.xxmygirl.com → marchshotgun.comCalls1 captured connections
www.xxmygirl.com → marchshotgun.comLoads from5 captured connections
www.xxmygirl.com → preferencenail.comLoads from3 captured connections
www.xxmygirl.com → protrafficinspector.comCalls2 captured connections
www.xxmygirl.com → realizationnewestfangs.comLoads from2 captured connections
www.xxmygirl.com → sourshaped.comCalls1 captured connections
www.xxmygirl.com → sourshaped.comLoads from11 captured connections
www.xxmygirl.com → ts1.mm.bing.netLoads from8 captured connections
www.xxmygirl.com → ts2.mm.bing.netLoads from12 captured connections
www.xxmygirl.com → ts3.mm.bing.netLoads from8 captured connections
www.xxmygirl.com → ts4.mm.bing.netLoads from7 captured connections
www.xxmygirl.com → www.intelligenceadx.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:51:55.289 GET 200 document 43.7 KB 1635 ms —

08:51:57.131 GET 200 stylesheet 4.5 KB 17 ms —

08:51:57.134 GET 200 stylesheet 7.4 KB 19 ms —

08:51:57.136 GET 200 img 120.4 KB 211 ms —

08:51:57.138 GET 200 img 7.2 KB 473 ms —

08:51:57.140 GET 200 img 11.3 KB 553 ms —

08:51:57.141 GET 200 img 12.1 KB 558 ms —

08:51:57.142 GET 200 img 20.1 KB 635 ms —

08:51:57.143 GET 200 img 8.1 KB 338 ms —

08:51:57.143 GET 200 img 19.3 KB 559 ms —

08:51:57.145 GET 200 img 17.7 KB 262 ms —

08:51:57.147 GET 200 img 36.2 KB 263 ms —

08:51:57.147 GET 200 img 19.3 KB 307 ms —

08:51:57.148 GET 200 img 40.2 KB 308 ms —

08:51:57.149 GET 200 img 36.6 KB 334 ms —

08:51:57.150 GET 200 img 29.1 KB 319 ms —

08:51:57.151 GET 200 img 30.4 KB 302 ms —

08:51:57.151 GET 200 img 25.3 KB 294 ms —

08:51:57.153 GET 200 img 9.1 KB 234 ms —

08:51:57.154 GET 200 img 19.0 KB 312 ms —

08:51:57.155 GET 200 img 19.1 KB 324 ms —

08:51:57.156 GET 200 img 32.3 KB 311 ms —

08:51:57.156 GET 200 img 17.1 KB 311 ms —

08:51:57.157 GET 200 img 20.1 KB 234 ms —

08:51:57.159 GET 200 img 18.1 KB 244 ms —

08:51:57.160 GET 200 img 16.8 KB 307 ms —

08:51:57.163 GET 200 img 15.6 KB 305 ms —

08:51:57.165 GET 200 img 16.4 KB 311 ms —

08:51:57.166 GET 200 img 40.4 KB 289 ms —

08:51:57.167 GET 200 img 43.2 KB 235 ms —

08:51:57.168 GET 200 img 17.1 KB 253 ms —

08:51:57.169 GET 200 img 47.1 KB 215 ms —

08:51:57.170 GET 200 img 25.0 KB 225 ms —

08:51:57.170 GET 200 img 15.5 KB 222 ms —

08:51:57.171 GET 200 img 19.3 KB 238 ms —

08:51:57.172 GET 200 img 10.9 KB 199 ms —

08:51:57.173 GET 200 img 19.5 KB 193 ms —

08:51:57.173 GET 200 img 11.3 KB 226 ms —

08:51:57.174 GET 200 img 23.4 KB 224 ms —

08:51:57.175 GET 200 script 12.0 KB 5 ms —

08:51:57.220 GET 404 img 1.2 KB 92 ms —

08:51:57.226 GET 200 script 41.0 KB 157 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://www.intelligenceadx.com/fjson.min.js

IP / ASN

95.173.205.14

AS60068 · Datacamp Limited

Requested by: https://www.xxmygirl.com/pvt-show-two-girls-dildo-ride-cumshow/sQuiRtcHM6Ly9jZG4uY2Ftd2hvcmVzLnR2L2NvbnRlbnRzL3ZpZGVvc19zb3VyY2VzLzEzNjIwMDAwLzEzNjIwNzE2L3NjcmVlbnNob3RzLzIuanBnfulL-hDvideofulL-hDsQuiRtcHM6Ly90czMubW0uYmluZy5uZXQvdGgbLonDeaWQ9T0lQLkVjMEVKWHFWbWhvc3lXczJKVmhEWVFIYUVLJnBpZD0xNS4x.html

Resource information

File type: JavaScript source, ASCII text, with very long lines (1568)
MIME type: application/javascript
First seen (UTC): 18 Apr 2026 · 22:23:12.557 UTC
Last seen (UTC): 08 Jun 2026 · 01:48:32.491 UTC
Times seen: 6

Size: 41.0 KB (41946 bytes)
MD5: 210f9f82940d6f56c96630fb7a2ef4e0
SHA1: 88916c21515444462cb0fe9ae64de683088ca6d9
SHA256: 37180b50c0d970a0f9b22d290e3efc777aa8fce921debd0f850e04041dd83f6c

Certificate information

Issuer: Let's Encrypt · E7
Subject: 1868349309.rsc.cdn77.org
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 93:E9:A0:E4:E6:9A:07:D2:01:5E:3A:D1:34:0F:38:94:2A:54:69:C4
Valid from: Thu, 02 Apr 2026 00:33:03 GMT
Valid until: Wed, 01 Jul 2026 00:33:02 GMT

Technology fingerprints

CDN77 (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /fjson.min.js HTTP/1.1
Host: www.intelligenceadx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.xxmygirl.com
DNT: 1
Connection: keep-alive
Referer: https://www.xxmygirl.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Fri, 24 Apr 2026 08:51:57 GMT
content-type: application/javascript
cache-control: max-age=259200, immutable, stale-if-error=259200, stale-while-revalidate=259200, must-revalidate
expires: Mon, 16 Mar 2026 19:35:15 GMT
link: <https://intelligenceadx.com/>;rel=preconnect,<https://c.adsco.re/>;rel=preload;as=script,<https://adsco.re/>;rel=preconnect;as=1;crossorigin,<https://4.adsco.re/>;rel=preload;as=fetch;crossorigin,<https://6.adsco.re/>;rel=preload;as=fetch;crossorigin,<https://4.adsco.re:2087/>;rel=preload;as=fetch;crossorigin,<https://6.adsco.re:2087/>;rel=preload;as=fetch;crossorigin
etag: W/"9d3a9e0067740dd23bcfc0ec08526cd6"
x-77-nzt: k3J/vXY8emvJK43fmKrlS8QXmfB36cvWtxQe3GTv9yWLeOA9GvnxkVMF9Gmltvg+DwDU7M0
x-77-nzt-ray: 2a494a159f879c71522feb69354d7318
x-77-cache: HIT
x-77-age: 217380
vary: Accept-Encoding, Origin
content-encoding: gzip
server: CDN77-Turbo
access-control-allow-origin: https://www.xxmygirl.com
x-77-pop: osloNO
X-Firefox-Spdy: h2

08:51:57.244 GET 200 script 89.7 KB 533 ms 2 alerts

08:51:57.245 GET 200 script 91.5 KB 522 ms 2 alerts

08:51:57.246 GET 200 script 1.9 KB 67 ms —

08:51:57.249 GET 200 script 3.0 KB 34 ms —

08:51:57.250 GET 200 script 1.3 KB 153 ms —

08:51:57.251 GET 200 script 6.8 KB 31 ms —

08:51:57.253 GET 200 script 27.4 KB 61 ms —

08:51:57.254 GET 200 script 84.9 KB 60 ms —

http://www.xxmygirl.com/pvt-show-two-girls-dildo-ride-cumshow/sQuiRtcHM6Ly9jZG4uY2Ftd2hvcmVzLnR2L2NvbnRlbnRzL3ZpZGVvc19zb3VyY2VzLzEzNjIwMDAwLzEzNjIwNzE2L3NjcmVlbnNob3RzLzIuanBnfulL-hDvideofulL-hDsQuiRtcHM6Ly90czMubW0uYmluZy5uZXQvdGgbLonDeaWQ9T0lQLkVjMEVKWHFWbWhvc3lXczJKVmhEWVFIYUVLJnBpZD0xNS4x.html

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Domain graph

Network requests