WEBSITE ANALYSIS REPORT

http://travesticomlocal.darparamim.com/

01 Apr 2026 · 11:04:17.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

11:03:52.945 GET 200 document 122.0 KB 909 ms —

11:03:54.017 GET 200 script 12.0 KB 5 ms —

11:03:54.019 GET 200 script 100.2 KB 893 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://groundlesspowder.com/gHw/ykGN8/3lhVKxBxYc/CT17kKIng/WdE3cDYt8LMtO/7Mf52O1U/FLlo0_H/8j-af/H-WH9/54Gn/NPj_v3FN3/n2i9dt1v/WUdo/4bMN9c/mCnKshmqVl/l4v/usqgl9IrGu/eTfO/Xx

IP / ASN

172.240.127.244

AS7979 · SERVERS-COM

Requested by: https://travesticomlocal.darparamim.com/

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: application/javascript
First seen (UTC): 31 Mar 2026 · 13:34:28.790 UTC
Last seen (UTC): 01 Apr 2026 · 12:34:24.434 UTC
Times seen: 11

Size: 100.2 KB (102596 bytes)
MD5: 24852b08366ea9f1175207960d6fd605
SHA1: 5bee0300d204194d31c8ac59ba1e0a6e092ac036
SHA256: 027e8b53339edf7436e8f7e88e7feb5e072c06dbce4a4893a6666b76d56ffb13

Certificate information

Issuer: Let's Encrypt · R12
Subject: groundlesspowder.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 11:7F:87:F1:D8:EA:A1:40:61:0E:97:20:87:2C:61:DC:4E:AF:92:0B
Valid from: Fri, 27 Feb 2026 21:28:59 GMT
Valid until: Thu, 28 May 2026 21:28:58 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /gHw/ykGN8/3lhVKxBxYc/CT17kKIng/WdE3cDYt8LMtO/7Mf52O1U/FLlo0_H/8j-af/H-WH9/54Gn/NPj_v3FN3/n2i9dt1v/WUdo/4bMN9c/mCnKshmqVl/l4v/usqgl9IrGu/eTfO/Xx HTTP/1.1
Host: groundlesspowder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://travesticomlocal.darparamim.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 01 Apr 2026 11:03:54 GMT
Content-Type: application/javascript
Content-Length: 39784
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 5
Host: groundlesspowder.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: dc53c21876f80e6fc51ebed6812cac8a
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

11:03:54.021 GET 200 script 89.7 KB 896 ms —

11:03:54.023 GET 200 script 10.5 KB 227 ms —

11:03:54.057 POST 200 xhr 0 B 182 ms —

http://travesticomlocal.darparamim.com/

Domain graph

Hostnames

Connections