WEBSITE ANALYSIS REPORT

http://gsmatoztool.com/

25 Jun 2026 · 15:37:55.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

15:37:26.727 GET 200 document 151.4 KB 3719 ms 2 alerts

15:37:31.022 GET 200 document 151.4 KB 99 ms 2 alerts

15:37:31.048 GET 200 stylesheet 3.0 KB 57 ms —

15:37:31.050 GET 200 stylesheet 1.7 KB 175 ms —

15:37:31.053 GET 200 stylesheet 173.3 KB 223 ms —

15:37:31.056 GET 200 script 85.5 KB 164 ms —

15:37:31.090 GET 200 stylesheet 128.1 KB 157 ms —

15:37:31.156 GET 200 stylesheet 3.0 KB 4 ms —

15:37:31.163 GET 200 imageset 3.4 KB 4 ms —

15:37:31.177 GET 200 script 9.7 KB 141 ms —

15:37:31.180 GET 200 script 16.8 KB 151 ms —

15:37:31.263 GET 200 font 18.8 KB 295 ms —

15:37:31.284 GET 200 script 6.3 KB 154 ms —

15:37:31.343 GET 200 font 180.8 KB 344 ms —

15:37:31.348 POST 200 beacon 0 B 1210 ms 2 alerts

15:37:31.360 GET 200 img 22.6 KB 327 ms —

15:37:31.448 GET 200 script 85.5 KB 3 ms —

15:37:31.488 GET 200 script 13.3 KB 138 ms —

15:37:31.656 GET 200 script 16.7 KB 152 ms —

15:37:31.660 GET 200 script 50.1 KB 933 ms 2 alerts

15:37:31.661 GET 200 script 50.0 KB 931 ms 2 alerts

Transaction #44

Request / response

URL

GET HTTPS

https://lampshadescreen.com/a5992a62a59b3e4f4f78932eef19374d/invoke.js

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://gsmatoztool.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (51161), with no line terminators
MIME type: application/javascript
First seen (UTC): 25 Jun 2026 · 15:46:15.114 UTC
Last seen (UTC): 25 Jun 2026 · 15:46:15.114 UTC
Times seen: 1

Size: 50.0 KB (51161 bytes)
MD5: 296f3516206548046e45b6539e973fab
SHA1: 56465c889edf42ea5a9dafba74c8a366d4b47145
SHA256: c434eba83a257e46b070b0e334aa84f143ab6b3ff3777688431e0fac051f08ec

Certificate information

Issuer: Let's Encrypt · YR1
Subject: lampshadescreen.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 4E:92:73:EB:05:FA:57:7E:EF:8E:7D:D9:D8:53:C3:E2:61:8F:59:F4
Valid from: Sun, 14 Jun 2026 23:03:39 GMT
Valid until: Sat, 12 Sep 2026 23:03:38 GMT

Technology fingerprints

Nginx:1.28.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /a5992a62a59b3e4f4f78932eef19374d/invoke.js HTTP/1.1
Host: lampshadescreen.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Referer: https://gsmatoztool.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.28.2
Date: Thu, 25 Jun 2026 15:37:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-CH-UA-Model,Sec-CH-UA-Mobile,Device-Stock-UA,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA,User-Agent,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,Sec-CH-UA-Platform,X-Device-User-Agent,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List
access-control-allow-origin: *
content-encoding: zstd
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
vary: Accept-Encoding
x-envoy-upstream-service-time: 6
Host: lampshadescreen.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 903965b25e51da902a5221d74614f5c7
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

15:37:31.663 GET 200 script 50.0 KB 601 ms 2 alerts

15:37:31.819 GET 200 script 5.4 KB 145 ms —

15:37:31.823 GET 200 imageset 9.1 KB 143 ms —

15:37:31.826 GET 200 imageset 4.5 KB 137 ms —

15:37:31.827 GET 200 imageset 8.2 KB 140 ms —

15:37:31.829 GET 200 lazy-imageset 6.6 KB 136 ms —

15:37:31.976 GET 200 script 98.9 KB 188 ms —

15:37:32.043 GET 200 lazy-imageset 4.6 KB 151 ms —

15:37:32.044 GET 200 lazy-imageset 5.5 KB 144 ms —

15:37:32.045 GET 200 lazy-imageset 5.9 KB 143 ms —

15:37:32.217 GET 200 imageset 2.6 KB 143 ms —

15:37:32.289 GET 200 script 5.0 KB 481 ms —

15:37:32.300 GET 200 xhr 40 B 126 ms —

15:37:32.310 GET 200 xhr 40 B 125 ms —

15:37:32.459 GET 307 xhr 0 B 384 ms —

15:37:32.461 GET 307 xhr 0 B 378 ms —

15:37:32.607 GET 200 script 5.0 KB 471 ms 4 alerts

15:37:32.615 GET 307 xhr 0 B 479 ms 4 alerts

15:37:32.616 GET 200 script 101.4 KB 566 ms 4 alerts

15:37:32.618 GET 200 script 91.3 KB 566 ms 4 alerts

15:37:32.620 GET 200 script 5.0 KB 480 ms 1 alerts

15:37:32.861 GET 200 xhr 4.0 KB 116 ms —

15:37:32.871 GET 200 xhr 4.0 KB 110 ms —

15:37:32.994 GET 200 img 100.9 KB 347 ms —

15:37:32.996 GET 200 img 0 B 0 ms —

15:37:33.000 GET 200 img 55.0 KB 141 ms —

15:37:33.002 GET 200 img 0 B 0 ms —

15:37:33.116 GET 200 xhr 4.0 KB 115 ms 4 alerts

15:37:33.226 GET 200 script 83.4 KB 142 ms —

http://gsmatoztool.com/

Domain graph

Hostnames

Connections