WEBSITE ANALYSIS REPORT

http://www.ythxswkj.com/

27 Jan 2026 · 09:42:37.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:42:12.499 GET 200 document 84.7 KB 1985 ms 3 alerts

09:42:13.922 GET 200 script 90.0 KB 238 ms 3 alerts

09:42:13.925 GET 200 script 91.5 KB 470 ms 3 alerts

09:42:13.927 GET 200 script 9.9 KB 471 ms 3 alerts

09:42:13.929 GET 200 stylesheet 13.4 KB 471 ms 3 alerts

09:42:13.931 GET 200 stylesheet 19.3 KB 471 ms 3 alerts

09:42:13.933 GET 200 stylesheet 59.9 KB 470 ms 3 alerts

09:42:13.935 GET 200 stylesheet 6.7 KB 470 ms 3 alerts

09:42:13.937 GET 200 stylesheet 1.8 KB 469 ms 3 alerts

09:42:13.938 GET 200 stylesheet 38.1 KB 478 ms 3 alerts

09:42:13.940 GET 200 stylesheet 5.2 KB 698 ms 3 alerts

09:42:13.942 GET 200 stylesheet 3.4 KB 698 ms 3 alerts

09:42:13.943 GET 200 script 1.2 KB 698 ms 3 alerts

09:42:13.944 GET 200 script 1.8 KB 1126 ms —

09:42:13.945 GET 200 script 1.5 KB 697 ms 3 alerts

09:42:13.946 GET 200 img 5.5 KB 695 ms 3 alerts

09:42:13.947 GET 200 stylesheet 30.4 KB 695 ms 3 alerts

09:42:13.949 GET 200 script 8.0 KB 693 ms 3 alerts

09:42:13.949 GET 200 script 266.8 KB 694 ms 3 alerts

09:42:13.953 GET 200 script 62.3 KB 108 ms —

09:42:13.954 GET 200 script 353.8 KB 665 ms —

09:42:13.955 GET 200 script 223.7 KB 688 ms 3 alerts

09:42:13.957 GET 200 script 6.7 KB 684 ms 3 alerts

09:42:13.958 GET 200 script 3.5 KB 684 ms 3 alerts

09:42:13.959 GET 200 script 0 B 684 ms 3 alerts

09:42:13.960 GET 200 script 19.5 KB 39 ms —

09:42:14.736 GET 200 subdocument 42.4 KB 1565 ms —

09:42:14.744 GET 200 script 29.2 KB 1496 ms —

09:42:14.746 GET 200 stylesheet 1.1 KB 234 ms 3 alerts

09:42:14.750 GET 200 font 91.6 KB 246 ms 3 alerts

09:42:14.779 GET 200 font 91.8 KB 308 ms 3 alerts

09:42:15.006 GET 404 xhr 33.8 KB 235 ms 3 alerts

09:42:15.008 GET 404 xhr 33.8 KB 236 ms 3 alerts

09:42:15.015 GET 200 img 24.6 KB 236 ms 3 alerts

09:42:15.019 GET 200 img 2.3 KB 234 ms 3 alerts

09:42:15.021 GET 200 img 3.4 KB 234 ms 3 alerts

09:42:15.125 GET 206 media 554.3 KB 428 ms 3 alerts

09:42:15.129 GET 206 media 116.3 KB 477 ms 3 alerts

09:42:15.131 GET 200 lazy-img 1.1 KB 476 ms 3 alerts

09:42:15.134 GET 200 lazy-img 1.6 KB 476 ms 3 alerts

09:42:15.135 GET 200 lazy-img 2.0 KB 478 ms 3 alerts

09:42:15.137 GET 200 lazy-img 2.5 KB 475 ms 3 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://www.ythxswkj.com/webp/logo-freesoft100b86f.webp?v=1638343680

IP / ASN

35.220.181.155

AS396982 · GOOGLE-CLOUD-PLATFORM

Requested by: https://www.ythxswkj.com/

Resource information

File type: RIFF (little-endian) data, Web/P image
MIME type: image/webp
First seen (UTC): 27 Jan 2026 · 09:42:51.040 UTC
Last seen (UTC): 27 Jan 2026 · 09:42:51.040 UTC
Times seen: 1

Size: 2.5 KB (2540 bytes)
MD5: e553a3f2447bb731db7c302b9c1d0a58
SHA1: f77ed40b21524d2895e684d6d2fb950ad6f3f19a
SHA256: 470d345e3c8f7299ef24731800697044e08e19d304c08c73869718bcc7a01244

Certificate information

Issuer: Let's Encrypt · R12
Subject: m.ythxswkj.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: CF:40:F3:95:62:26:9A:0D:96:CF:74:F0:CC:FB:01:3D:76:70:6B:A0
Valid from: Thu, 18 Dec 2025 02:14:46 GMT
Valid until: Wed, 18 Mar 2026 02:14:45 GMT

Technology fingerprints

HSTS (Security)
Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /webp/logo-freesoft100b86f.webp?v=1638343680 HTTP/1.1
Host: www.ythxswkj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.ythxswkj.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
server: nginx
date: Tue, 27 Jan 2026 09:42:15 GMT
content-type: image/webp
content-length: 2540
last-modified: Wed, 01 Dec 2021 07:28:00 GMT
etag: "61a72400-9ec"
strict-transport-security: max-age=31536000
accept-ranges: bytes
X-Firefox-Spdy: h2

09:42:15.142 GET 200 lazy-img 1.7 KB 475 ms 3 alerts

09:42:15.144 GET 200 lazy-img 920 B 474 ms 3 alerts

09:42:15.156 GET 200 subdocument 1.1 KB 29 ms —

09:42:15.158 GET 200 font 92.2 KB 448 ms 3 alerts

09:42:15.280 POST 210 xhr 0 B 294 ms —

09:42:15.282 GET 200 script 62.3 KB 31 ms —

09:42:15.292 POST 210 xhr 0 B 279 ms —

09:42:15.723 GET 200 script 241.4 KB 256 ms —

http://www.ythxswkj.com/

Domain graph

Hostnames

Connections

Network requests

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.ythxswkj.com/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #02

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.ythxswkj.com/

Domain graph

Network requests