WEBSITE ANALYSIS REPORT

http://incestflix.com.co/tiny-taunter-by-summer-col/

01 Mar 2026 · 17:24:22.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.show-sb.com2 captured requests
cdn.storageimagedisplay.com2 captured requests
cdn62542989.ahacdn.me1 captured requests
creative-sb1.com21 captured requests
endlesshandbaglinked.com4 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com3 captured requests
incestflix.com.co18 captured requests
kettledroopingcontinuation.com14 captured requests
lampshadescreen.com4 captured requests
lefttongue.com4 captured requests
og.vcdn.cc2 captured requests
preferencenail.com2 captured requests
protrafficinspector.com6 captured requests
realizationnewestfangs.com4 captured requests
sourshaped.com3 captured requests
static.cloudflareinsights.com1 captured requests
www.calculating-laugh.com2 captured requests
www.googletagmanager.com2 captured requests

Connections

incestflix.com.co → cdn.show-sb.comCalls2 captured connections
incestflix.com.co → cdn.storageimagedisplay.comLoads from2 captured connections
incestflix.com.co → creative-sb1.comCalls5 captured connections
incestflix.com.co → creative-sb1.comLoads from16 captured connections
incestflix.com.co → endlesshandbaglinked.comCalls1 captured connections
incestflix.com.co → endlesshandbaglinked.comEmbeds1 captured connections
incestflix.com.co → endlesshandbaglinked.comLoads from2 captured connections
incestflix.com.co → flushpersist.comLoads from2 captured connections
incestflix.com.co → fonts.googleapis.comLoads from2 captured connections
incestflix.com.co → fonts.gstatic.comLoads from3 captured connections
incestflix.com.co → kettledroopingcontinuation.comCalls3 captured connections
incestflix.com.co → kettledroopingcontinuation.comLoads from11 captured connections
incestflix.com.co → lampshadescreen.comLoads from4 captured connections
incestflix.com.co → lefttongue.comCalls1 captured connections
incestflix.com.co → lefttongue.comEmbeds1 captured connections
incestflix.com.co → lefttongue.comLoads from2 captured connections
incestflix.com.co → og.vcdn.ccLoads from2 captured connections
incestflix.com.co → preferencenail.comLoads from2 captured connections
incestflix.com.co → protrafficinspector.comCalls6 captured connections
incestflix.com.co → realizationnewestfangs.comCalls1 captured connections
incestflix.com.co → realizationnewestfangs.comLoads from3 captured connections
incestflix.com.co → sourshaped.comCalls2 captured connections
incestflix.com.co → sourshaped.comLoads from1 captured connections
incestflix.com.co → static.cloudflareinsights.comLoads from1 captured connections
incestflix.com.co → www.calculating-laugh.comCalls1 captured connections
incestflix.com.co → www.calculating-laugh.comLoads from1 captured connections
incestflix.com.co → www.googletagmanager.comLoads from2 captured connections
lefttongue.com → cdn62542989.ahacdn.meLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:23:55.093 GET 200 document 130.4 KB 273 ms —

17:23:55.509 GET 200 stylesheet 25.9 KB 20 ms —

17:23:55.512 GET 200 script 444.7 KB 502 ms —

17:23:55.513 GET 200 script 446.9 KB 492 ms —

17:23:55.514 GET 200 img 17.1 KB 30 ms —

17:23:55.516 GET 200 script 49.8 KB 849 ms 2 alerts

Transaction #68

Request / response

URL

GET HTTPS

https://lampshadescreen.com/cb1225e90a1e09895360a2828e2b81d7/invoke.js

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://incestflix.com.co/tiny-taunter-by-summer-col/

Resource information

File type: JavaScript source, ASCII text, with very long lines (50956), with no line terminators
MIME type: application/javascript
First seen (UTC): 27 Feb 2026 · 23:30:54.189 UTC
Last seen (UTC): 01 Mar 2026 · 17:24:36.821 UTC
Times seen: 2

Size: 49.8 KB (50956 bytes)
MD5: f8948292bb65206166fa50392e8c0bae
SHA1: 04cce5392a5984fdf088c4ab52859cae0f70c39a
SHA256: 563c7ed1e3fb79438b180f925d19288ce95dbc6bd5a55331b0af5e0da8963508

Certificate information

Issuer: Let's Encrypt · R13
Subject: lampshadescreen.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 3E:65:BC:7E:60:D2:56:AE:F4:18:4D:57:77:A6:32:DB:06:50:09:F6
Valid from: Sat, 14 Feb 2026 22:48:40 GMT
Valid until: Fri, 15 May 2026 22:48:39 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /cb1225e90a1e09895360a2828e2b81d7/invoke.js HTTP/1.1
Host: lampshadescreen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://incestflix.com.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Sun, 01 Mar 2026 17:23:55 GMT
Content-Type: application/javascript
Content-Length: 20231
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 2
Host: lampshadescreen.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 0bf7785336b855be0a1b4ca1bd2bb5f7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

17:23:55.517 GET 200 script 1.7 KB 16 ms —

17:23:55.518 GET 200 script 3.0 KB 17 ms —

17:23:55.519 GET 200 script 90.0 KB 858 ms 2 alerts

17:23:55.520 GET 200 script 90.1 KB 847 ms 2 alerts

17:23:55.522 GET 200 script 71.0 KB 173 ms —

17:23:55.524 GET 200 script 29.5 KB 36 ms —

17:23:55.592 GET 200 script 55.2 KB 258 ms —

17:23:55.681 GET 206 media 1.61 MB 557 ms —

17:23:55.861 GET 200 subdocument 2.8 KB 129 ms —

17:23:55.863 GET 200 xhr 101.2 KB 140 ms —

17:23:55.866 GET 200 script 101.2 KB 143 ms —

17:23:55.867 POST 200 beacon 0 B 29 ms —

17:23:56.112 GET 200 img 112.0 KB 898 ms —

17:23:56.155 GET 200 xhr 40 B 778 ms 1 alerts

17:23:56.158 GET 200 script 49.7 KB 122 ms 2 alerts

17:23:56.236 GET 206 media 3.75 MB 148 ms —

17:23:56.239 GET 200 img 23.5 KB 139 ms —

17:23:56.241 GET 200 img 67.4 KB 228 ms —

17:23:56.242 GET 200 img 42.2 KB 229 ms —

17:23:56.244 GET 200 img 24.0 KB 139 ms —

17:23:56.245 GET 200 img 43.7 KB 280 ms —

17:23:56.248 GET 200 img 30.7 KB 174 ms —

17:23:56.250 GET 200 img 22.9 KB 173 ms —

17:23:56.252 GET 200 img 25.4 KB 272 ms —

17:23:56.254 GET 200 img 29.2 KB 268 ms —

17:23:56.395 GET 200 xhr 40 B 391 ms 1 alerts

17:23:56.399 GET 200 script 83.4 KB 464 ms 3 alerts

17:23:56.400 GET 200 xhr 40 B 452 ms 1 alerts

17:23:56.404 GET 200 script 83.4 KB 452 ms 3 alerts

17:23:56.408 GET 200 xhr 40 B 366 ms 1 alerts

17:23:56.855 GET 200 subdocument 926 B 18 ms —

17:23:56.865 GET 200 img 14.8 KB 19 ms —

17:23:56.867 GET 200 img 50.7 KB 23 ms —

17:23:56.904 GET 200 script 22.2 KB 18 ms —

17:23:57.006 GET 200 xhr 4.6 KB 687 ms 4 alerts

17:23:57.007 GET 200 script 0 B 68 ms —

17:23:57.096 POST 200 beacon 43 B 19 ms —

17:23:57.098 GET 200 script 3.4 KB 21 ms —

17:23:57.139 GET 200 xhr 40 B 23 ms 1 alerts

17:23:57.142 GET 200 xhr 40 B 22 ms 1 alerts

17:23:57.148 GET 307 xhr 4.7 KB 656 ms 4 alerts

17:23:57.149 GET 307 xhr 4.2 KB 677 ms 3 alerts

17:23:57.153 POST 204 xhr 0 B 10 ms —

17:23:57.518 GET 200 img 0 B 100 ms 4 alerts

http://incestflix.com.co/tiny-taunter-by-summer-col/

Domain graph

Hostnames

Connections

Network requests

Transaction #68

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://incestflix.com.co/tiny-taunter-by-summer-col/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #68

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://incestflix.com.co/tiny-taunter-by-summer-col/

Domain graph

Network requests