WEBSITE ANALYSIS REPORT

https://vidlyx.lol/open.php?id=zzqlcle7t86

03 Oct 2026 · 02:02:53.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

02:02:11.052 GET 302 document 0 B 903 ms 1 alerts

02:02:11.964 GET 200 document 42.0 KB 266 ms 1 alerts

02:02:12.768 GET 302 script 0 B 3122 ms —

02:02:12.771 GET 200 stylesheet 9.9 KB 88 ms —

02:02:12.772 GET 200 img 54.5 KB 3181 ms 1 alerts

02:02:15.907 GET 200 script 397.7 KB 7 ms —

02:02:16.181 GET 200 font 47.4 KB 92 ms —

02:02:16.183 GET 200 font 47.4 KB 83 ms —

02:02:16.185 GET 200 font 47.4 KB 85 ms —

02:02:16.187 GET 200 font 47.4 KB 86 ms —

02:02:16.226 GET 200 subdocument 24.7 KB 764 ms —

02:02:16.285 GET 200 img 9.0 KB 25 ms 1 alerts

02:02:16.351 GET 200 script 133.1 KB 99 ms 1 alerts

Transaction #04

Request / response

URL

GET HTTPS

https://af3f6cf803.3a2ffd59df.com/fe786cc5b02b8af80b9a32d63433a260.js

IP / ASN

92.246.95.227

AS39572 · DataWeb Global Group B.V.

Requested by: https://vidlyx.lol/convert

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: application/javascript; charset=utf-8
First seen (UTC): 29 Jul 2026 · 10:40:22.614 UTC
Last seen (UTC): 07 Oct 2026 · 06:29:21.853 UTC
Times seen: 239

Size: 133.1 KB (136297 bytes)
MD5: f3c889286e7c9c25a3af812f9c5d9cf9
SHA1: da12dfdc7f14873dba3a193678b9cfa18cf6fa62
SHA256: 396b7c3b66d253ce22dc0d0154bbfe28ff191a647902400e6809aa17fe0c5a6e

Certificate information

Issuer: Let's Encrypt · YR2
Subject: af3f6cf803.3a2ffd59df.com
Protocol / cipher: TLSv1.3 · TLS_AES_256_GCM_SHA384
SHA1 fingerprint: 2D:D0:CE:6B:71:1B:85:A6:F9:6E:57:A2:F2:80:7D:B6:36:E4:39:9E
Valid from: Wed, 30 Sep 2026 02:14:55 GMT
Valid until: Tue, 29 Dec 2026 02:14:54 GMT

Technology fingerprints

Nginx:1.18.0 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /fe786cc5b02b8af80b9a32d63433a260.js HTTP/1.1
Host: af3f6cf803.3a2ffd59df.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Origin: https://vidlyx.lol
Sec-GPC: 1
Connection: keep-alive
Referer: https://vidlyx.lol/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sat, 03 Oct 2026 02:02:16 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 28 Jul 2026 10:54:07 GMT
etag: W/"6a688a4f-21469"
content-encoding: gzip
expires: Sat, 03 Oct 2026 02:07:16 GMT
cache-control: max-age=300
x-cdn-host-id: AH1742
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2

02:02:16.353 GET 200 lazy-img 40.9 KB 24 ms 1 alerts

02:02:16.355 GET 200 lazy-img 25.4 KB 24 ms 1 alerts

02:02:16.356 GET 200 lazy-img 31.0 KB 39 ms 1 alerts

02:02:16.358 GET 200 lazy-img 46.8 KB 37 ms 1 alerts

02:02:16.359 GET 200 lazy-img 33.0 KB 21 ms 1 alerts

02:02:16.361 GET 200 lazy-img 34.3 KB 35 ms 1 alerts

02:02:16.362 GET 200 lazy-img 27.0 KB 36 ms 1 alerts

02:02:16.363 GET 200 lazy-img 26.4 KB 37 ms 1 alerts

02:02:16.364 GET 200 lazy-img 65.4 KB 20 ms 1 alerts

02:02:16.366 GET 200 lazy-img 7.5 KB 33 ms 1 alerts

02:02:16.367 GET 200 lazy-img 69.0 KB 32 ms 1 alerts

02:02:16.368 GET 200 lazy-img 1.12 MB 460 ms —

02:02:16.371 GET 200 lazy-img 83.7 KB 32 ms 1 alerts

02:02:16.372 GET 200 lazy-img 48.9 KB 29 ms 1 alerts

02:02:16.373 GET 200 lazy-img 31.1 KB 30 ms 1 alerts

02:02:16.375 GET 200 lazy-img 175.0 KB 14 ms 1 alerts

02:02:16.376 GET 200 lazy-img 13.7 KB 18 ms 1 alerts

02:02:16.378 GET 200 lazy-img 70.6 KB 34 ms 1 alerts

02:02:16.536 GET 200 xhr 4.8 KB 62 ms 1 alerts

02:02:16.538 GET 200 script 0 B 88 ms 1 alerts

02:02:16.540 GET 200 xhr 4.8 KB 521 ms 1 alerts

02:02:16.542 GET 200 script 0 B 77 ms 1 alerts

02:02:16.847 POST 200 xhr 15 B 35 ms —

02:02:16.848 OPTIONS 204 xhr 0 B 173 ms —

02:02:16.849 GET 200 xhr 0 B 75 ms 1 alerts

02:02:16.855 GET 200 script 253.6 KB 25 ms 1 alerts

02:02:17.064 GET 200 img 7.2 KB 302 ms 1 alerts

02:02:17.065 GET 200 img 2.6 KB 301 ms 1 alerts

02:02:17.067 POST 200 xhr 15 B 35 ms —

02:02:17.070 OPTIONS 204 xhr 0 B 35 ms —

02:02:17.073 GET 200 xhr 0 B 28 ms 1 alerts

02:02:17.075 GET 200 script 521.0 KB 151 ms —

02:02:17.076 GET 200 script 34.3 KB 45 ms —

02:02:17.078 GET 200 script 138.9 KB 23 ms —

02:02:17.079 GET 200 script 29.1 KB 20 ms —

02:02:17.080 GET 200 script 3.9 KB 32 ms —

02:02:17.081 GET 200 script 381.6 KB 24 ms —

https://vidlyx.lol/open.php?id=zzqlcle7t86

Domain graph

Hostnames

Connections

Network requests

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://vidlyx.lol/open.php?id=zzqlcle7t86

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #04

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://vidlyx.lol/open.php?id=zzqlcle7t86

Domain graph

Network requests