WEBSITE ANALYSIS REPORT

http://youtube@qxz.llc/lyk1y?g5bn2

06 Mar 2026 · 00:07:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

cdn.show-creative1.com1 captured requests
cdn.show-sb.com2 captured requests
cdn.storageimagedisplay.com28 captured requests
cdn154.my.canva.site16 captured requests
creative-sb1.com36 captured requests
dholpins.lova.cam1 captured requests
fizzyacerbitymellow.com16 captured requests
flushpersist.com4 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
kettledroopingcontinuation.com18 captured requests
my.qxz.llc0 captured requests
preferencenail.com4 captured requests
protrafficinspector.com1 captured requests
qxz.llc2 captured requests
realizationnewestfangs.com30 captured requests
skinnycrawlinglax.com25 captured requests
sourshaped.com14 captured requests
wayfarerorthodox.com16 captured requests
weirdopt.com1 captured requests
wrappedthorntelevision.com25 captured requests
www.highperformanceformat.com2 captured requests

Connections

dholpins.lova.cam → cdn.show-creative1.comCalls1 captured connections
dholpins.lova.cam → cdn.show-sb.comCalls2 captured connections
dholpins.lova.cam → cdn.storageimagedisplay.comLoads from28 captured connections
dholpins.lova.cam → cdn154.my.canva.siteLoads from16 captured connections
dholpins.lova.cam → creative-sb1.comCalls6 captured connections
dholpins.lova.cam → creative-sb1.comLoads from30 captured connections
dholpins.lova.cam → fizzyacerbitymellow.comCalls3 captured connections
dholpins.lova.cam → fizzyacerbitymellow.comLoads from13 captured connections
dholpins.lova.cam → flushpersist.comLoads from4 captured connections
dholpins.lova.cam → fonts.googleapis.comLoads from1 captured connections
dholpins.lova.cam → fonts.gstatic.comLoads from2 captured connections
dholpins.lova.cam → kettledroopingcontinuation.comCalls7 captured connections
dholpins.lova.cam → kettledroopingcontinuation.comLoads from11 captured connections
dholpins.lova.cam → preferencenail.comLoads from4 captured connections
dholpins.lova.cam → protrafficinspector.comCalls1 captured connections
dholpins.lova.cam → realizationnewestfangs.comCalls14 captured connections
dholpins.lova.cam → realizationnewestfangs.comLoads from16 captured connections
dholpins.lova.cam → skinnycrawlinglax.comCalls11 captured connections
dholpins.lova.cam → skinnycrawlinglax.comLoads from14 captured connections
dholpins.lova.cam → sourshaped.comCalls2 captured connections
dholpins.lova.cam → sourshaped.comLoads from12 captured connections
dholpins.lova.cam → wayfarerorthodox.comCalls8 captured connections
dholpins.lova.cam → wayfarerorthodox.comLoads from8 captured connections
dholpins.lova.cam → weirdopt.comLoads from1 captured connections
dholpins.lova.cam → wrappedthorntelevision.comCalls1 captured connections
dholpins.lova.cam → wrappedthorntelevision.comLoads from24 captured connections
dholpins.lova.cam → www.highperformanceformat.comLoads from2 captured connections
qxz.llc → my.qxz.llcRedirects to2 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

00:05:23.386 GET 302 document 0 B 97 ms —

00:05:30.745 GET 302 document 484 B 231 ms —

00:05:31.248 GET 200 document 56.4 KB 47 ms —

00:05:31.336 GET 200 script 105.2 KB 805 ms —

00:05:31.341 GET 200 script 90.0 KB 1148 ms —

00:05:31.342 GET 200 script 49.7 KB 790 ms —

00:05:31.343 GET 200 script 49.7 KB 787 ms —

00:05:31.344 GET 200 script 49.8 KB 1386 ms 3 alerts

00:05:31.345 GET 200 script 49.7 KB 1144 ms 3 alerts

00:05:31.347 GET 200 script 49.8 KB 503 ms —

00:05:31.348 GET 200 script 49.7 KB 499 ms —

00:05:31.349 GET 200 script 49.7 KB 759 ms —

00:05:31.349 GET 200 script 49.7 KB 752 ms —

00:05:31.350 GET 200 script 49.7 KB 776 ms —

00:05:31.351 GET 200 script 49.7 KB 774 ms —

00:05:31.352 GET 200 script 46.6 KB 745 ms —

00:05:31.883 GET 200 script 5.0 KB 693 ms 4 alerts

00:05:31.886 GET 200 script 83.4 KB 165 ms 3 alerts

00:05:31.889 GET 200 xhr 40 B 236 ms 1 alerts

00:05:32.221 GET 200 script 83.4 KB 22 ms 3 alerts

00:05:32.224 GET 200 script 5.0 KB 697 ms 3 alerts

Transaction #16

Request / response

URL

GET HTTPS

https://sourshaped.com/84/97/50/849750becb377806181d7532a131ed47.js

IP / ASN

172.240.127.243

AS7979 · SERVERS-COM

Requested by: https://dholpins.lova.cam/

Resource information

File type: JavaScript source, ASCII text, with very long lines (5153), with no line terminators
MIME type: application/javascript
First seen (UTC): 18 Feb 2026 · 13:17:41.242 UTC
Last seen (UTC): 12 Mar 2026 · 06:03:11.940 UTC
Times seen: 1663

Size: 5.0 KB (5153 bytes)
MD5: 6da75851d7f8415205c256fed50a6416
SHA1: 843b017397ff1e4101029a0c2610cfdda819acca
SHA256: f9cc7670e67285102774201d602e2a32a449a22c5518df4627d26d5532c8bb81

Certificate information

Issuer: Let's Encrypt · R12
Subject: sourshaped.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: F1:AF:5D:36:35:F4:F3:93:55:9A:8D:70:8F:C7:F5:6B:E2:26:FB:8E
Valid from: Fri, 27 Feb 2026 00:01:03 GMT
Valid until: Thu, 28 May 2026 00:01:02 GMT

Technology fingerprints

HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)
Envoy (Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
Quad9 DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /84/97/50/849750becb377806181d7532a131ed47.js HTTP/1.1
Host: sourshaped.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://dholpins.lova.cam/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 06 Mar 2026 00:05:32 GMT
Content-Type: application/javascript
Content-Length: 2636
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 1
Host: sourshaped.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 2535ee6c5eb793788a4f097ed9c166b0
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

00:05:32.227 GET 200 script 5.0 KB 712 ms 2 alerts

00:05:32.234 GET 307 xhr 4.7 KB 590 ms 2 alerts

00:05:32.241 GET 200 script 5.0 KB 676 ms 3 alerts

00:05:32.250 GET 307 xhr 4.3 KB 1000 ms 3 alerts

00:05:32.255 GET 200 script 5.0 KB 682 ms 2 alerts

00:05:32.262 GET 307 xhr 4.7 KB 380 ms 2 alerts

00:05:32.264 GET 200 script 110.6 KB 505 ms 2 alerts

00:05:32.265 GET 200 script 90.0 KB 509 ms 2 alerts

00:05:32.270 GET 200 script 5.0 KB 383 ms 3 alerts

00:05:32.273 GET 307 xhr 4.2 KB 385 ms 3 alerts

00:05:32.276 GET 200 script 5.0 KB 399 ms 4 alerts

00:05:32.281 GET 200 script 110.6 KB 507 ms 4 alerts

00:05:32.281 GET 307 xhr 4.7 KB 401 ms 4 alerts

00:05:32.301 GET 200 script 90.0 KB 493 ms 4 alerts

00:05:32.315 GET 200 script 5.0 KB 429 ms 2 alerts

00:05:32.321 GET 307 xhr 4.4 KB 730 ms 2 alerts

00:05:32.332 GET 200 script 5.0 KB 389 ms 3 alerts

00:05:32.333 GET 200 script 5.0 KB 107 ms 4 alerts

00:05:32.333 GET 307 xhr 4.3 KB 310 ms 3 alerts

00:05:32.334 GET 307 xhr 4.7 KB 381 ms 4 alerts

00:05:32.335 GET 200 script 5.0 KB 723 ms 2 alerts

00:05:32.337 GET 307 xhr 4.2 KB 405 ms 2 alerts

00:05:32.338 GET 200 script 5.0 KB 401 ms 4 alerts

00:05:32.338 GET 307 xhr 4.3 KB 403 ms 4 alerts

00:05:32.339 GET 200 script 49.7 KB 106 ms —

00:05:32.453 GET 200 script 5.0 KB 386 ms 2 alerts

00:05:32.458 GET 200 script 49.7 KB 417 ms —

00:05:32.458 GET 307 xhr 4.8 KB 691 ms 2 alerts

00:05:32.814 GET 200 xhr 4.7 KB 106 ms 2 alerts

http://youtube@qxz.llc/lyk1y?g5bn2

Domain graph

Hostnames

Connections

Network requests

Transaction #16

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://youtube@qxz.llc/lyk1y?g5bn2

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #16

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://youtube@qxz.llc/lyk1y?g5bn2

Domain graph

Network requests