WEBSITE ANALYSIS REPORT

https://2shr.ink/DZxq4am

21 Oct 2026 · 05:12:31.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

2shr.ink1 captured requests
auctionr.org3 captured requests
camo.mmcdn.com2 captured requests
chaturbate.com22 captured requests
f.static.mmcdn.com2 captured requests
fonts.gstatic.com2 captured requests
jpeg.live.mmcdn.com2 captured requests
nwr.mmcdn.com1 captured requests
nwr.static.mmcdn.com1 captured requests
realtime.pa.highwebmedia.com1 captured requests
redir.juicyads.com1 captured requests
report-uri.mmcdn.com1 captured requests
static-pub.highwebmedia.com10 captured requests
token.chaturbate.com1 captured requests
web.static.mmcdn.com34 captured requests
web2.static.mmcdn.com67 captured requests
www.google.com4 captured requests
www.googletagmanager.com1 captured requests
www.gstatic.com7 captured requests
xapi.juicyads.com1 captured requests
xina4.qltrk.com1 captured requests

Connections

2shr.ink → xina4.qltrk.comRedirects to1 captured connections
auctionr.org → chaturbate.comRedirects to3 captured connections
auctionr.org → redir.juicyads.comRedirects to1 captured connections
auctionr.org → xapi.juicyads.comRedirects to2 captured connections
chaturbate.com → camo.mmcdn.comLoads from2 captured connections
chaturbate.com → f.static.mmcdn.comLoads from2 captured connections
chaturbate.com → jpeg.live.mmcdn.comLoads from2 captured connections
chaturbate.com → nwr.mmcdn.comCalls1 captured connections
chaturbate.com → nwr.static.mmcdn.comLoads from1 captured connections
chaturbate.com → realtime.pa.highwebmedia.comCalls1 captured connections
chaturbate.com → static-pub.highwebmedia.comLoads from10 captured connections
chaturbate.com → token.chaturbate.comCalls1 captured connections
chaturbate.com → web.static.mmcdn.comCalls5 captured connections
chaturbate.com → web.static.mmcdn.comLoads from29 captured connections
chaturbate.com → web2.static.mmcdn.comLoads from67 captured connections
chaturbate.com → www.google.comEmbeds1 captured connections
chaturbate.com → www.google.comLoads from2 captured connections
chaturbate.com → www.googletagmanager.comLoads from1 captured connections
chaturbate.com → www.gstatic.comLoads from3 captured connections
redir.juicyads.com → chaturbate.comRedirects to1 captured connections
www.google.com → fonts.gstatic.comLoads from2 captured connections
www.google.com → www.gstatic.comLoads from4 captured connections
xapi.juicyads.com → redir.juicyads.comRedirects to1 captured connections
xina4.qltrk.com → auctionr.orgRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
05:11:14.351	GET	302	document	0 B	0 ms	2 alerts

05:11:14.497	GET	302	document	0 B	0 ms	1 alerts

05:11:14.889	GET	200	document	0 B	0 ms	—
Transaction #145 Request / response URL Navigation request GET HTTPS https://auctionr.org/4/b43d0f26a1c147e0db2e36e131416bb7 IP / ASN 104.21.35.135 AS13335 · CLOUDFLARENET Transaction actions#145 Investigate Download resource0 B (0 bytes) Captured resources may contain malicious code. Sign in to download Raw file and protected ZIP External sources Requested by Not recorded Resource information File type Not recorded MIME type Not recorded First seen (UTC) Not recorded Last seen (UTC) 23 Oct 2026 · 18:29:54.333 UTC Times seen 19313519 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate information Certificate and TLS information not recorded. Technology fingerprints Cloudflare (CDN) Envoy (Reverse proxies) HTTP headers Request headers `GET /4/b43d0f26a1c147e0db2e36e131416bb7 HTTP/1.1 Host: auctionr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/140.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Sec-GPC: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: none Priority: u=0, i Pragma: no-cache Cache-Control: no-cache` Response headers HTTP/2 200 date: Wed, 21 Oct 2026 05:11:15 GMT content-type: text/html server: cloudflare set-cookie: uidm=01a15cde-e943-7d96-bd18-83e8891450f4_1; Path=/; Expires=Sat, 18 Oct 2036 05:11:15 GMT; Secure; SameSite=None ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.Bqqu4jVBZjvfTqHxONIfScyoY3KGZOECJJz-8H67AXs; Path=/; Expires=Wed, 21 Oct 2026 05:12:15 GMT; Secure; SameSite=None __cf_bm=pA2iXGYuhqFNRLaaThRbdA7J1kB5cZE6kkzimXKZ8Sk-1792559474.981865-1.0.1.1-9rvYWEl9TKjjpzZUcQwutB9RSopZAvt9r8g0ahMGQ39.Uw8UOdnlmsTRcP7c.eGyl3GLOhxtDVzlAPsDfw4qOKFMbi_f2g76CPKBPni.FCz10KZX538hNUKASdqJymVB; HttpOnly; SameSite=None; Secure; Path=/; Domain=auctionr.org; Expires=Wed, 21 Oct 2026 05:41:15 GMT accept-ch: Device-Stock-Ua,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile link: <https://static.nresystems.com>; rel=preconnect; crossorigin, <https://static.nresystems.com>; rel=dns-prefetch vary: Accept-Encoding, Origin x-envoy-upstream-service-time: 4 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-cache, max-age=0, private, no-cache x-request-id: 92669672cff9176637df42cf3d88ad8e pragma: no-cache access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values access-control-expose-headers: Content-Length,Content-Range access-control-allow-credentials: true access-control-max-age: 1728000 cf-cache-status: DYNAMIC content-encoding: gzip cf-ray: a4ddc2aeaa37568f-OSL X-Firefox-Spdy: h2
05:11:15.298	GET	302	document	0 B	222 ms	—

05:11:15.417	GET	204	img	0 B	60 ms	—

05:11:15.526	GET	302	document	0 B	197 ms	—

05:11:15.729	GET	302	document	0 B	481 ms	—

05:11:16.214	GET	301	document	0 B	181 ms	—

05:11:16.402	GET	302	document	0 B	170 ms	—

05:11:16.578	GET	200	document	188.1 KB	364 ms	—

05:11:17.323	GET	200	script	6.1 KB	31 ms	—

05:11:17.325	GET	200	stylesheet	641 B	10 ms	—

05:11:17.327	GET	200	stylesheet	313.0 KB	21 ms	—

05:11:17.328	GET	200	stylesheet	594 B	12 ms	—

05:11:17.330	GET	200	stylesheet	124.2 KB	12 ms	—

05:11:17.331	GET	200	stylesheet	38.9 KB	12 ms	—

05:11:17.332	GET	200	stylesheet	184.0 KB	16 ms	—

05:11:17.334	GET	200	stylesheet	20.3 KB	14 ms	—

05:11:17.336	GET	200	script	13.4 KB	11 ms	—

05:11:17.356	GET	200	script	3.3 KB	12 ms	—

05:11:17.357	GET	200	script	107.0 KB	16 ms	—

05:11:17.359	GET	200	script	1.7 KB	9 ms	—

05:11:17.361	GET	200	script	1010 B	66 ms	—

05:11:17.363	GET	200	script	4.2 KB	91 ms	—

05:11:17.365	GET	200	script	1.16 MB	50 ms	—

05:11:17.368	GET	200	script	1.0 KB	35 ms	—

05:11:17.370	GET	200	script	300 B	9 ms	—

05:11:17.372	GET	200	script	528.2 KB	164 ms	—

05:11:17.373	GET	200	script	178.9 KB	20 ms	—

05:11:17.375	GET	200	script	29.7 KB	13 ms	—

05:11:17.377	GET	200	script	3.9 KB	12 ms	—

05:11:17.378	GET	200	script	243.7 KB	18 ms	—

05:11:17.379	GET	200	script	175.8 KB	21 ms	—

05:11:17.381	GET	200	script	3.6 KB	10 ms	—

05:11:17.382	GET	200	script	7.6 KB	10 ms	—

05:11:17.384	GET	200	script	216.7 KB	30 ms	—

05:11:17.385	GET	200	script	34.5 KB	13 ms	—

05:11:17.387	GET	200	script	190.5 KB	29 ms	—

05:11:17.389	GET	200	script	1.47 MB	68 ms	—

05:11:17.391	GET	200	script	45.3 KB	15 ms	—

05:11:17.392	GET	200	script	82.1 KB	23 ms	—

05:11:17.393	GET	200	script	31.8 KB	12 ms	—

05:11:17.395	GET	200	script	25.3 KB	23 ms	—

05:11:17.396	GET	200	script	67.2 KB	11 ms	—

05:11:17.398	GET	200	script	172.1 KB	21 ms	—

05:11:17.400	GET	200	script	87.6 KB	19 ms	—

05:11:17.403	GET	200	script	27.6 KB	20 ms	—

05:11:17.406	GET	200	script	58.0 KB	19 ms	—

05:11:17.407	GET	200	script	162.0 KB	18 ms	—

05:11:17.409	GET	200	script	3.5 KB	15 ms	—

https://2shr.ink/DZxq4am

Domain graph

Hostnames

Connections

Network requests

Transaction #145

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>https://2shr.ink/DZxq4am

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #145

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

https://2shr.ink/DZxq4am

Domain graph

Network requests