WEBSITE ANALYSIS REPORT

https://kosmha.com/video/315

07 Nov 2025 · 17:45:03.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:44:40.318 GET 200 document 43.8 KB 182 ms —

17:44:40.634 GET 200 img 283 B 727 ms 1 alerts

17:44:40.876 GET 200 img 327 B 126 ms 1 alerts

17:44:42.429 GET 200 script 45.3 KB 686 ms 3 alerts

17:44:42.432 GET 200 script 45.3 KB 678 ms 3 alerts

17:44:42.433 GET 200 script 83.0 KB 745 ms 5 alerts

17:44:42.436 GET 200 script 422.2 KB 375 ms —

17:44:42.835 GET 200 script 6.3 KB 690 ms 4 alerts

17:44:42.850 GET 200 xhr 40 B 414 ms —

17:44:42.851 GET 200 script 109.4 KB 774 ms 4 alerts

17:44:42.858 GET 200 script 6.3 KB 706 ms 2 alerts

17:44:42.859 GET 200 script 109.4 KB 801 ms 2 alerts

17:44:42.881 GET 200 script 83.4 KB 154 ms 3 alerts

17:44:42.884 GET 200 xhr 40 B 186 ms —

17:44:42.886 GET 200 script 6.3 KB 406 ms 3 alerts

17:44:43.119 GET 307 xhr 4.4 KB 671 ms 4 alerts

17:44:43.372 GET 200 img 0 B 96 ms 4 alerts

17:44:43.374 GET 200 script 0 B 142 ms 2 alerts

17:44:43.375 GET 200 script 83.4 KB 29 ms 3 alerts

17:44:43.384 GET 200 xhr 5.6 KB 309 ms 3 alerts

17:44:43.508 GET 200 xhr 4.4 KB 265 ms 4 alerts

17:44:43.677 GET 200 script 45.2 KB 100 ms 3 alerts

17:44:43.701 GET 200 img 0 B 98 ms 3 alerts

17:44:43.702 GET 200 xhr 2.2 KB 524 ms 1 alerts

17:44:43.808 GET 200 script 6.3 KB 97 ms 2 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://sourshaped.com/97/fc/e4/97fce4537c0f81f954d679ccebe0c47c.js

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://kosmha.com/video/315

Resource information

File type: JavaScript source, ASCII text, with very long lines (6461), with no line terminators
MIME type: application/javascript
First seen (UTC): 22 Oct 2025 · 08:34:06.793 UTC
Last seen (UTC): 01 Dec 2025 · 10:40:04.095 UTC
Times seen: 3160

Size: 6.3 KB (6461 bytes)
MD5: 26ce7791f08fb671816e8ac15c21abcc
SHA1: cd121446322214f9ee849fadd1686452f9acf3a9
SHA256: e039e804b7483aec11801d7a306db1603f9c6d5f562340f9a5dbeda753c0224d

Certificate information

Issuer: Let's Encrypt · R13
Subject: sourshaped.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: AA:F8:F2:CD:8F:90:E0:34:26:52:5F:28:83:02:25:29:22:DE:BB:79
Valid from: Thu, 30 Oct 2025 00:22:29 GMT
Valid until: Wed, 28 Jan 2026 00:22:28 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /97/fc/e4/97fce4537c0f81f954d679ccebe0c47c.js HTTP/1.1
Host: sourshaped.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kosmha.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 07 Nov 2025 17:44:43 GMT
Content-Type: application/javascript
Content-Length: 3422
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: sourshaped.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c6c599a2abb8dcfc5dc802a6afa8b0f8
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

17:44:43.814 GET 307 xhr 4.4 KB 100 ms 2 alerts

17:44:43.826 GET 200 img 28.8 KB 136 ms —

17:44:43.827 GET 200 img 0 B 98 ms 4 alerts

17:44:43.942 GET 200 xhr 4.4 KB 123 ms 2 alerts

17:44:44.093 GET 200 img 63.6 KB 47 ms —

17:44:44.096 GET 200 img 0 B 97 ms 2 alerts

17:44:44.182 GET 200 script 45.3 KB 103 ms 3 alerts

17:44:44.229 GET 200 img 0 B 94 ms 3 alerts

17:44:44.239 GET 200 xhr 44.0 KB 505 ms 2 alerts

17:44:44.240 GET 200 xhr 6.8 KB 521 ms 2 alerts

17:44:44.302 GET 200 script 6.3 KB 129 ms 3 alerts

17:44:44.307 GET 307 xhr 4.7 KB 567 ms 3 alerts

17:44:44.356 GET 200 stylesheet 16.4 KB 320 ms —

17:44:44.357 GET 200 img 6.8 KB 11 ms 2 alerts

17:44:44.359 GET 200 img 31.0 KB 9 ms 2 alerts

17:44:44.360 GET 200 img 65.8 KB 13 ms 2 alerts

17:44:44.361 GET 200 img 9.7 KB 10 ms 2 alerts

17:44:44.362 GET 200 script 82.4 KB 11 ms 2 alerts

17:44:44.504 GET 200 xhr 13.8 KB 599 ms 2 alerts

17:44:44.691 GET 200 xhr 4.7 KB 113 ms 3 alerts

17:44:44.732 GET 200 img 0 B 96 ms 3 alerts

17:44:44.747 GET 200 img 0 B 97 ms 3 alerts

17:44:44.844 GET 200 img 60.8 KB 29 ms —

17:44:44.848 GET 200 img 0 B 98 ms 3 alerts

17:44:45.110 GET 200 img 0 B 98 ms 3 alerts

https://kosmha.com/video/315

Domain graph

Hostnames

Connections