WEBSITE ANALYSIS REPORT

https://2shr.ink/DZxq4am

21 Oct 2026 · 05:12:31.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

2shr.ink1 captured requests
auctionr.org3 captured requests
camo.mmcdn.com2 captured requests
chaturbate.com22 captured requests
f.static.mmcdn.com2 captured requests
fonts.gstatic.com2 captured requests
jpeg.live.mmcdn.com2 captured requests
nwr.mmcdn.com1 captured requests
nwr.static.mmcdn.com1 captured requests
realtime.pa.highwebmedia.com1 captured requests
redir.juicyads.com1 captured requests
report-uri.mmcdn.com1 captured requests
static-pub.highwebmedia.com10 captured requests
token.chaturbate.com1 captured requests
web.static.mmcdn.com34 captured requests
web2.static.mmcdn.com67 captured requests
www.google.com4 captured requests
www.googletagmanager.com1 captured requests
www.gstatic.com7 captured requests
xapi.juicyads.com1 captured requests
xina4.qltrk.com1 captured requests

Connections

2shr.ink → xina4.qltrk.comRedirects to1 captured connections
auctionr.org → chaturbate.comRedirects to3 captured connections
auctionr.org → redir.juicyads.comRedirects to1 captured connections
auctionr.org → xapi.juicyads.comRedirects to2 captured connections
chaturbate.com → camo.mmcdn.comLoads from2 captured connections
chaturbate.com → f.static.mmcdn.comLoads from2 captured connections
chaturbate.com → jpeg.live.mmcdn.comLoads from2 captured connections
chaturbate.com → nwr.mmcdn.comCalls1 captured connections
chaturbate.com → nwr.static.mmcdn.comLoads from1 captured connections
chaturbate.com → realtime.pa.highwebmedia.comCalls1 captured connections
chaturbate.com → static-pub.highwebmedia.comLoads from10 captured connections
chaturbate.com → token.chaturbate.comCalls1 captured connections
chaturbate.com → web.static.mmcdn.comCalls5 captured connections
chaturbate.com → web.static.mmcdn.comLoads from29 captured connections
chaturbate.com → web2.static.mmcdn.comLoads from67 captured connections
chaturbate.com → www.google.comEmbeds1 captured connections
chaturbate.com → www.google.comLoads from2 captured connections
chaturbate.com → www.googletagmanager.comLoads from1 captured connections
chaturbate.com → www.gstatic.comLoads from3 captured connections
redir.juicyads.com → chaturbate.comRedirects to1 captured connections
www.google.com → fonts.gstatic.comLoads from2 captured connections
www.google.com → www.gstatic.comLoads from4 captured connections
xapi.juicyads.com → redir.juicyads.comRedirects to1 captured connections
xina4.qltrk.com → auctionr.orgRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

05:11:14.351 GET 302 document 0 B 0 ms 2 alerts

05:11:14.497 GET 302 document 0 B 0 ms 1 alerts

Transaction #138

Request / response

URL

GET HTTPS

https://xina4.qltrk.com/l/sxazkk

IP / ASN

91.98.14.181

Unknown

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: Not recorded
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 02:44:09.755 UTC
Times seen: 19296329

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

Ubuntu (Operating systems)
Nginx:1.24.0 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /l/sxazkk HTTP/1.1
Host: xina4.qltrk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/140.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 302 
server: nginx/1.24.0 (Ubuntu)
content-type: text/html; charset=utf-8
cache-control: no-cache, private
date: Wed, 21 Oct 2026 05:11:14 GMT
location: https://auctionr.org/4/b43d0f26a1c147e0db2e36e131416bb7
x-ratelimit-limit: 101
x-ratelimit-remaining: 100
set-cookie: XSRF-TOKEN=eyJpdiI6ImtUNGpINGtyK1k4a1BVS3pvaGpnZFE9PSIsInZhbHVlIjoicnhqZkFmSTRiQS9Xb0d5NVRMMXdEN0tDTHUwdk02OUhXYmVrTkkwUjdpWEkraGo3OGNud1MzcG9Va3dUc1hRLzVRNWF2cUxkQXBCMzd5a0k5TCtuVTNhUDN4a0Q3NmpJSFVtam0reFB2Q2h4SVh6cFJsS2YwTUNwN0JQaHRybVUiLCJtYWMiOiI0YjU1NDNhNDM2MjgwYjIzMTQ2ZTA4M2FlNDE2MjRmOThkYThlMjA5YWNhOWVkOTFiYmU4MjhlMTA1MGZkOWNmIiwidGFnIjoiIn0%3D; expires=Thu, 25 Nov 2027 05:11:14 GMT; Max-Age=34560000; path=/; domain=qltrk.com; secure; samesite=lax
qlikersession=eyJpdiI6IjdVV1hjT1pRandJVVpTeTBtVDkya2c9PSIsInZhbHVlIjoiVXNCVVR1QzZia3FsWnRRcFRnRnNsYUxRSzFmTGthVHNRK2RkWnRpbEowYTRiTWdsa3A0ekRYRWp4VGZjVzlSd0k4cjNXbFFHdElEOXdYQ3gvZnkyQWdCbHdFZDNGMERVL0YwM2ZzRFdCa3gxN2dkZ1A3R0tCeG5EQ0JJQXhUVkQiLCJtYWMiOiIxNWM2YzFiOWM5MGVlMzJhNzI5N2UzMDU4YzQ2YWU2OTMwZWIyMDZmY2NlZjU2NDFkZjA2ZjRiNjRlODE3Y2Q5IiwidGFnIjoiIn0%3D; expires=Thu, 25 Nov 2027 05:11:14 GMT; Max-Age=34560000; path=/; domain=qltrk.com; secure; samesite=lax
ln=eyJpdiI6Ikl0UkxxYUpzNUNEL3k4cVcxZmZxR3c9PSIsInZhbHVlIjoiNHNKYjhSZE9IYVFXSTluVGZhTXY4MlMxNzlTRW44VzRjVWw2SWZQeUhOTkt0Q3gwaFE0em1KSEF6VzhjbEN2dm5VY3Y1SjNzelhIQnJxQ092UVVnWVpPL0tBdTJvWE1kZ24rYzJ3a20zcVU9IiwibWFjIjoiOTFlYWFmMjkwZjZhZTI5Y2Y5NDkwYzI1ZDNhZWVjMzg4YzdiODg5NTc4MWQxNjAwYzllZTliZDc0YjRjNGJkZSIsInRhZyI6IiJ9; expires=Thu, 21 Oct 2027 05:11:14 GMT; Max-Age=31536000; path=/; domain=qltrk.com; secure; httponly; samesite=lax
qcid=eyJpdiI6IlJQSERzVnphcFJaTUQ3RGd0bVZyVUE9PSIsInZhbHVlIjoiWDlYNUlBZll4MFlzU2xqQXNEWStRQ1JKNlp4L3ZveC9xQUw0dnVYR3YvTGZzOUp4eVpmTGdKamdjVzhJR3JGWHFhdjJ0d2RGbkpoZVdjTjVnK01ZOWc9PSIsIm1hYyI6ImY5ODljMDhkMmE3YzA5NWUyMTc0ZTRkMmMyYzBiOTdmMjNjYWE4MWU1MDc2ZjE0NjNmN2JhMjJhYzc5MTg2YjIiLCJ0YWciOiIifQ%3D%3D; expires=Thu, 21 Oct 2027 05:11:14 GMT; Max-Age=31536000; path=/; domain=qltrk.com; secure; httponly; samesite=lax
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
X-Firefox-Spdy: h2

05:11:14.889 GET 200 document 0 B 0 ms —

05:11:15.298 GET 302 document 0 B 222 ms —

05:11:15.417 GET 204 img 0 B 60 ms —

05:11:15.526 GET 302 document 0 B 197 ms —

05:11:15.729 GET 302 document 0 B 481 ms —

05:11:16.214 GET 301 document 0 B 181 ms —

05:11:16.402 GET 302 document 0 B 170 ms —

05:11:16.578 GET 200 document 188.1 KB 364 ms —

05:11:17.323 GET 200 script 6.1 KB 31 ms —

05:11:17.325 GET 200 stylesheet 641 B 10 ms —

05:11:17.327 GET 200 stylesheet 313.0 KB 21 ms —

05:11:17.328 GET 200 stylesheet 594 B 12 ms —

05:11:17.330 GET 200 stylesheet 124.2 KB 12 ms —

05:11:17.331 GET 200 stylesheet 38.9 KB 12 ms —

05:11:17.332 GET 200 stylesheet 184.0 KB 16 ms —

05:11:17.334 GET 200 stylesheet 20.3 KB 14 ms —

05:11:17.336 GET 200 script 13.4 KB 11 ms —

05:11:17.356 GET 200 script 3.3 KB 12 ms —

05:11:17.357 GET 200 script 107.0 KB 16 ms —

05:11:17.359 GET 200 script 1.7 KB 9 ms —

05:11:17.361 GET 200 script 1010 B 66 ms —

05:11:17.363 GET 200 script 4.2 KB 91 ms —

05:11:17.365 GET 200 script 1.16 MB 50 ms —

05:11:17.368 GET 200 script 1.0 KB 35 ms —

05:11:17.370 GET 200 script 300 B 9 ms —

05:11:17.372 GET 200 script 528.2 KB 164 ms —

05:11:17.373 GET 200 script 178.9 KB 20 ms —

05:11:17.375 GET 200 script 29.7 KB 13 ms —

05:11:17.377 GET 200 script 3.9 KB 12 ms —

05:11:17.378 GET 200 script 243.7 KB 18 ms —

05:11:17.379 GET 200 script 175.8 KB 21 ms —

05:11:17.381 GET 200 script 3.6 KB 10 ms —

05:11:17.382 GET 200 script 7.6 KB 10 ms —

05:11:17.384 GET 200 script 216.7 KB 30 ms —

05:11:17.385 GET 200 script 34.5 KB 13 ms —

05:11:17.387 GET 200 script 190.5 KB 29 ms —

05:11:17.389 GET 200 script 1.47 MB 68 ms —

05:11:17.391 GET 200 script 45.3 KB 15 ms —

05:11:17.392 GET 200 script 82.1 KB 23 ms —

05:11:17.393 GET 200 script 31.8 KB 12 ms —

05:11:17.395 GET 200 script 25.3 KB 23 ms —

05:11:17.396 GET 200 script 67.2 KB 11 ms —

05:11:17.398 GET 200 script 172.1 KB 21 ms —

05:11:17.400 GET 200 script 87.6 KB 19 ms —

05:11:17.403 GET 200 script 27.6 KB 20 ms —

05:11:17.406 GET 200 script 58.0 KB 19 ms —

05:11:17.407 GET 200 script 162.0 KB 18 ms —

05:11:17.409 GET 200 script 3.5 KB 15 ms —

https://2shr.ink/DZxq4am

Domain graph

Hostnames

Connections

Network requests

Transaction #138

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://2shr.ink/DZxq4am

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #138

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

https://2shr.ink/DZxq4am

Domain graph

Network requests