WEBSITE ANALYSIS REPORT

http://handfacesnap.cc/e/Ll6DHYlIBh6vk

09 Aug 2026 · 22:05:39.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

29771885-35471-ex.comanicilikeiste.com1 captured requests
35471.pecannerous.com1 captured requests
4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com3 captured requests
adexchangerapid.com1 captured requests
ads.google.com1 captured requests
adsco.re2 captured requests
c.adsco.re1 captured requests
cdnjs.cloudflare.com3 captured requests
clogcatsabrupt.com1 captured requests
dd133.com1 captured requests
displayvertising.com1 captured requests
excavatenearbywand.com1 captured requests
fedoq.com1 captured requests
handfacesnap.cc6 captured requests
jnbhi.com1 captured requests
kwjmlvngpork.com1 captured requests
llvpn.com1 captured requests
luugy.com1 captured requests
m696yefd.s1q2105.com1 captured requests
portalfluently.com1 captured requests
protrafficinspector.com1 captured requests
realizationnewestfangs.com1 captured requests
s25-wyl7.s1q2105.com3 captured requests
ssl.p.jwpcdn.com4 captured requests
usrpubtrk.com1 captured requests
www.displayvertising.com1 captured requests
xo.preplaneffie.com1 captured requests
yluyovvi5x5i.l4.adsco.re1 captured requests
yluyovvi5x5i.n4.adsco.re1 captured requests
yluyovvi5x5i.s4.adsco.re1 captured requests

Connections

handfacesnap.cc → 29771885-35471-ex.comanicilikeiste.comCalls1 captured connections
handfacesnap.cc → 35471.pecannerous.comLoads from1 captured connections
handfacesnap.cc → 4.adsco.reCalls2 captured connections
handfacesnap.cc → 6.adsco.reCalls2 captured connections
handfacesnap.cc → acscdn.comLoads from3 captured connections
handfacesnap.cc → adexchangerapid.comCalls1 captured connections
handfacesnap.cc → ads.google.comCalls1 captured connections
handfacesnap.cc → adsco.reCalls2 captured connections
handfacesnap.cc → c.adsco.reLoads from1 captured connections
handfacesnap.cc → cdnjs.cloudflare.comLoads from3 captured connections
handfacesnap.cc → clogcatsabrupt.comLoads from1 captured connections
handfacesnap.cc → dd133.comLoads from1 captured connections
handfacesnap.cc → displayvertising.comLoads from1 captured connections
handfacesnap.cc → excavatenearbywand.comLoads from1 captured connections
handfacesnap.cc → fedoq.comCalls1 captured connections
handfacesnap.cc → jnbhi.comLoads from1 captured connections
handfacesnap.cc → kwjmlvngpork.comCalls1 captured connections
handfacesnap.cc → llvpn.comLoads from1 captured connections
handfacesnap.cc → luugy.comCalls1 captured connections
handfacesnap.cc → m696yefd.s1q2105.comLoads from1 captured connections
handfacesnap.cc → portalfluently.comLoads from1 captured connections
handfacesnap.cc → protrafficinspector.comCalls1 captured connections
handfacesnap.cc → realizationnewestfangs.comLoads from1 captured connections
handfacesnap.cc → s25-wyl7.s1q2105.comCalls3 captured connections
handfacesnap.cc → ssl.p.jwpcdn.comLoads from4 captured connections
handfacesnap.cc → usrpubtrk.comCalls1 captured connections
handfacesnap.cc → www.displayvertising.comLoads from1 captured connections
handfacesnap.cc → xo.preplaneffie.comLoads from1 captured connections
handfacesnap.cc → yluyovvi5x5i.l4.adsco.reCalls1 captured connections
handfacesnap.cc → yluyovvi5x5i.n4.adsco.reCalls1 captured connections
handfacesnap.cc → yluyovvi5x5i.s4.adsco.reCalls1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

22:05:01.089 GET 200 document 65.6 KB 320 ms —

22:05:01.985 GET 200 script 145.1 KB 51 ms —

22:05:01.988 GET 200 stylesheet 48.2 KB 172 ms —

22:05:01.996 GET 200 script 163.0 KB 54 ms 2 alerts

22:05:01.998 GET 200 script 84.9 KB 63 ms —

22:05:02.000 GET 200 script 45.8 KB 56 ms —

22:05:02.001 GET 200 script 59.4 KB 21 ms —

22:05:02.003 GET No response script 0 B 0 ms —

22:05:02.005 GET 200 script 30.0 KB 101 ms —

22:05:02.006 GET No response script 0 B 0 ms —

22:05:02.011 GET 200 script 67.0 KB 495 ms 1 alerts

22:05:02.013 GET 200 script 5 B 108 ms —

22:05:02.015 GET 200 script 928 B 182 ms —

22:05:02.256 POST 200 fetch 429 B 142 ms —

22:05:02.299 GET 200 script 164.7 KB 23 ms —

22:05:02.341 HEAD 200 xhr 0 B 216 ms —

22:05:02.409 GET 200 script 70.2 KB 10 ms —

22:05:02.412 GET 200 script 321.8 KB 19 ms —

22:05:02.421 GET 200 script 450.6 KB 23 ms —

22:05:02.538 GET 200 script 83.4 KB 168 ms 1 alerts

22:05:02.540 GET 200 xhr 40 B 113 ms —

22:05:02.543 GET 200 script 89.6 KB 26 ms —

22:05:02.545 GET 200 script 163.0 KB 23 ms 2 alerts

22:05:02.547 GET 200 img 0 B 465 ms 1 alerts

22:05:02.643 GET 200 script 67.8 KB 12 ms 2 alerts

22:05:02.645 GET 200 script 41.0 KB 3182 ms 1 alerts

22:05:02.709 HEAD 429 fetch 0 B 594 ms —

22:05:03.048 POST No response xhr 0 B 0 ms —

22:05:03.159 POST No response xhr 0 B 0 ms —

22:05:03.164 GET 200 fetch 1.1 KB 252 ms 3 alerts

22:05:03.210 POST 204 beacon 0 B 168 ms 3 alerts

22:05:03.931 GET 200 img 74.7 KB 95 ms —

22:05:04.093 GET 200 xhr 176 B 151 ms —

22:05:04.095 GET 200 img 27.5 KB 136 ms —

22:05:04.265 GET 200 xhr 404 B 50 ms —

22:05:04.323 GET 200 xhr 1.40 MB 259 ms —

22:05:05.728 GET 200 xhr 1.5 KB 100 ms —

22:05:05.896 GET 200 script 96.0 KB 25 ms —

22:05:05.980 POST 204 beacon 0 B 158 ms —

22:05:05.982 POST 204 beacon 0 B 553 ms —

22:05:05.984 POST 204 beacon 0 B 1056 ms —

22:05:06.620 GET 200 fetch 0 B 565 ms —

22:05:06.621 GET No response fetch 0 B 0 ms —

22:05:06.623 GET No response fetch 0 B 0 ms —

22:05:06.624 GET 200 fetch 47 B 21 ms —

22:05:06.625 GET 200 fetch 47 B 23 ms —

22:05:06.948 POST 200 fetch 1.2 KB 497 ms —

22:05:07.554 GET 200 script 55 B 478 ms 1 alerts

Transaction #35

Request / response

URL

GET HTTPS

https://displayvertising.com/tmtqvdthlrpmprebqz?iahEkVJv=BQOCAAAAAAAACZUAAuSpYV2i9BYkCi0rpYka59zOD9TWyDwW698c4ZfmD2VsZwyGg4IKmFBB5MBJvmAe8CWmmW9XOsfW5r7RU2wa5NDpQDUbiX5zb9UdUkdLRWpnLBSRITTYoaQzbKUlP02LLHPAWrWramT2Bx4YzHkJiU--1RCDtxy8Arlv_6CVJtYd6Lspaamo-W-xOSOXTcUwEjqtJjcnb2vRv1QZ3VAAv_oEx60SP4Yi1HwD3n-aerMQMBQyEDq6VhhMZ1zBib3qQMVsrUky1YYXKkjltDOmpoAITgob3FE-FSsG0C9uBUCcXfcAITakM8E65mmqK6QSXA69A05u6bjWUoH-t2TuRK-PBgAmfOAz6pvOBNpCdfmc1KnEqZW_j4zyZuk5gT6G_EFWjJFJgGcA7pOViB323bI-jUIN5GHc7_BsIhKZ4CdgE4RWw9wNW3cHMy8mX7SLg6QxWRTtPVzGhe-_zhVV6GTtredhxUR8qoQ-ON__rRKP7UUhLX_B0out8xlAliySMCosco-ESU4EDOACAK6k7rLhFxLjLbhuOm7cxk5-AComwB6Xk55HuR5VPG7rZGtVpPc5eKqvRr3jj2Hd5nkj4m3m44FJABZCB9sMFA9E-k1q6kvPnUZiF8osucz9YuaAErdLeo5htBRPV2Z6oZBa_GHANEBRGsWQlE50LP8GEEr5gcLzdgLYj8B5Nk7Q6Al2ffgBxpDkmpiBrfAvTXzGFsm1s7uwU3788TXR621OkgSAbI3SbjkF75_Ah2NXjvwhgReCnLb3M-Ju3TPGsqAtaS0Tt9RwXSSzXCtTbN2n2XfOEPoYDIMhvFaG5sm45gQkZE5whXH5XpsEsaSdywiMe4uM6bpNinzGqy-6GgDxgz2MUpZ90RrZIHSmuqRcq5qUSEs9QwJw3CTRYkU8tzmr-J8icwQV2aY9-owsjbGr2gPlms4oMhVGeEhYJboQ9AroO_d8-kLAwaRdmkcog0QTYRI-aPOEzTJySKx4hh5UuGc5ReTWTKJHBjFIo4vkH9elMiQv8o15eVCb2puXSemVz0KYGHJ9x4F8WpxraOqP1rhawLHwKZxJYj9CCqX8p9M8UYO23HnYiaW99rxaEg0hkXOKGfIch-83PgEpc0dcrPm_peeFVcwNpaU9AKZuAPFggdKOlSvrXojObyFK3a4FT5VgJ-u_cGLhNp_sDaOpusLq&UFDobCwV=4&NRMJFkmC=5270867&fEsyWpvD=&GPSRosed=0,0&roXTuEHL=&obciZlHM=&ftPcCAzv=1280,1024,1,1280,1024,0

IP / ASN

216.59.56.9

AS53334 · TUT-AS

Requested by: https://handfacesnap.cc/e/Ll6DHYlIBh6vk

Resource information

File type: ASCII text, with no line terminators
MIME type: application/javascript
First seen (UTC): 09 Aug 2026 · 22:05:50.652 UTC
Last seen (UTC): 09 Aug 2026 · 22:05:50.652 UTC
Times seen: 1

Size: 55 B (55 bytes)
MD5: 4b5adfe9147e9c73b58195ccdfa0e7a5
SHA1: bf2d1406ea110edf1772f25f47f2947ce7982c8d
SHA256: 81b46525250137d5ca53e7bd09dcf0ffd7b26f7cf138db62a08b7a2b77cc7008

Certificate information

Issuer: Sectigo Limited · Sectigo Public Server Authentication CA DV R36
Subject: displayvertising.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
SHA1 fingerprint: F4:93:5A:63:37:D7:5A:AE:1D:7F:C4:E4:8D:0C:2F:50:85:18:A4:0D
Valid from: Sat, 02 May 2026 00:00:00 GMT
Valid until: Mon, 16 Nov 2026 23:59:59 GMT

Technology fingerprints

No technology fingerprints recorded for this response.

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /tmtqvdthlrpmprebqz?iahEkVJv=BQOCAAAAAAAACZUAAuSpYV2i9BYkCi0rpYka59zOD9TWyDwW698c4ZfmD2VsZwyGg4IKmFBB5MBJvmAe8CWmmW9XOsfW5r7RU2wa5NDpQDUbiX5zb9UdUkdLRWpnLBSRITTYoaQzbKUlP02LLHPAWrWramT2Bx4YzHkJiU--1RCDtxy8Arlv_6CVJtYd6Lspaamo-W-xOSOXTcUwEjqtJjcnb2vRv1QZ3VAAv_oEx60SP4Yi1HwD3n-aerMQMBQyEDq6VhhMZ1zBib3qQMVsrUky1YYXKkjltDOmpoAITgob3FE-FSsG0C9uBUCcXfcAITakM8E65mmqK6QSXA69A05u6bjWUoH-t2TuRK-PBgAmfOAz6pvOBNpCdfmc1KnEqZW_j4zyZuk5gT6G_EFWjJFJgGcA7pOViB323bI-jUIN5GHc7_BsIhKZ4CdgE4RWw9wNW3cHMy8mX7SLg6QxWRTtPVzGhe-_zhVV6GTtredhxUR8qoQ-ON__rRKP7UUhLX_B0out8xlAliySMCosco-ESU4EDOACAK6k7rLhFxLjLbhuOm7cxk5-AComwB6Xk55HuR5VPG7rZGtVpPc5eKqvRr3jj2Hd5nkj4m3m44FJABZCB9sMFA9E-k1q6kvPnUZiF8osucz9YuaAErdLeo5htBRPV2Z6oZBa_GHANEBRGsWQlE50LP8GEEr5gcLzdgLYj8B5Nk7Q6Al2ffgBxpDkmpiBrfAvTXzGFsm1s7uwU3788TXR621OkgSAbI3SbjkF75_Ah2NXjvwhgReCnLb3M-Ju3TPGsqAtaS0Tt9RwXSSzXCtTbN2n2XfOEPoYDIMhvFaG5sm45gQkZE5whXH5XpsEsaSdywiMe4uM6bpNinzGqy-6GgDxgz2MUpZ90RrZIHSmuqRcq5qUSEs9QwJw3CTRYkU8tzmr-J8icwQV2aY9-owsjbGr2gPlms4oMhVGeEhYJboQ9AroO_d8-kLAwaRdmkcog0QTYRI-aPOEzTJySKx4hh5UuGc5ReTWTKJHBjFIo4vkH9elMiQv8o15eVCb2puXSemVz0KYGHJ9x4F8WpxraOqP1rhawLHwKZxJYj9CCqX8p9M8UYO23HnYiaW99rxaEg0hkXOKGfIch-83PgEpc0dcrPm_peeFVcwNpaU9AKZuAPFggdKOlSvrXojObyFK3a4FT5VgJ-u_cGLhNp_sDaOpusLq&UFDobCwV=4&NRMJFkmC=5270867&fEsyWpvD=&GPSRosed=0,0&roXTuEHL=&obciZlHM=&ftPcCAzv=1280,1024,1,1280,1024,0 HTTP/1.1
Host: displayvertising.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://handfacesnap.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sun, 09 Aug 2026 22:05:07 GMT
content-type: application/javascript
cache-control: private, no-store, no-cache, no-transform
x-popads-ec: BotDetectedException-2-147
X-Firefox-Spdy: h2

22:05:12.346 HEAD No response xhr 0 B 0 ms —

http://handfacesnap.cc/e/Ll6DHYlIBh6vk

Domain graph

Hostnames

Connections

Network requests

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://handfacesnap.cc/e/Ll6DHYlIBh6vk

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://handfacesnap.cc/e/Ll6DHYlIBh6vk

Domain graph

Network requests