WEBSITE ANALYSIS REPORT

http://xvideostop.beartube.net/

31 Mar 2026 · 19:55:13.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

19:54:48.012 GET 200 document 105.8 KB 3152 ms 1 alerts

19:54:51.303 GET 200 script 430.0 KB 356 ms —

19:54:51.309 GET 200 stylesheet 19.9 KB 381 ms —

19:54:51.316 GET 200 stylesheet 18.4 KB 496 ms 1 alerts

19:54:51.320 GET 200 stylesheet 22.9 KB 389 ms 1 alerts

19:54:51.324 GET 200 stylesheet 4.7 KB 2478 ms 1 alerts

19:54:51.327 GET 200 script 68.4 KB 1495 ms 1 alerts

19:54:51.329 GET 502 script 6.3 KB 182 ms 1 alerts

19:54:51.331 GET 200 script 59.0 KB 1759 ms 1 alerts

19:54:51.345 GET 200 script 10.0 KB 1036 ms 1 alerts

19:54:51.349 GET 200 img 14.9 KB 2667 ms 1 alerts

19:54:51.352 GET 502 img 6.3 KB 163 ms 1 alerts

19:54:51.353 GET 200 img 14.9 KB 2211 ms 1 alerts

19:54:51.357 GET 200 img 14.9 KB 1860 ms 1 alerts

19:54:51.358 GET 200 script 183.9 KB 39 ms —

19:54:51.360 GET 200 imageset 14.9 KB 1999 ms 1 alerts

19:54:51.361 GET 502 imageset 6.3 KB 163 ms 1 alerts

19:54:51.362 GET 200 imageset 14.9 KB 706 ms 1 alerts

19:54:51.365 GET 200 img 14.9 KB 408 ms 1 alerts

19:54:51.369 GET 200 script 63.3 KB 306 ms —

19:54:51.373 GET 200 script 100.2 KB 781 ms 1 alerts

Transaction #13

Request / response

URL

GET HTTPS

https://groundlesspowder.com/gHw/ykGN8/3lhVKxBxYc/CT17kKIng/WdE3cDYt8LMtO/7Mf52O1U/FLlo0_H/8j-af/H-WH9/54Gn/NPj_v3FN3/n2i9dt1v/WUdo/4bMN9c/mCnKshmqVl/l4v/usqgl9IrGu/eTfO/Xx

IP / ASN

172.240.127.234

AS7979 · SERVERS-COM

Requested by: https://xvideostop.beartube.net/

Resource information

File type: JavaScript source, ASCII text, with very long lines (65536), with no line terminators
MIME type: application/javascript
First seen (UTC): 30 Mar 2026 · 18:15:35.457 UTC
Last seen (UTC): 01 Apr 2026 · 22:37:47.800 UTC
Times seen: 8

Size: 100.2 KB (102592 bytes)
MD5: 6483a9b25c75ca470b4048f97a15f931
SHA1: 453ba39510f85ae4d5f1e537b063c580672fc41a
SHA256: a5671d4f0a85788131d8057ca8fa71e0948da75aa235ab6ea30dc369235a70fa

Certificate information

Issuer: Let's Encrypt · R12
Subject: groundlesspowder.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 11:7F:87:F1:D8:EA:A1:40:61:0E:97:20:87:2C:61:DC:4E:AF:92:0B
Valid from: Fri, 27 Feb 2026 21:28:59 GMT
Valid until: Thu, 28 May 2026 21:28:58 GMT

Technology fingerprints

HSTS (Security)
Envoy (Reverse proxies)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Hagezi Threat Feed Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /gHw/ykGN8/3lhVKxBxYc/CT17kKIng/WdE3cDYt8LMtO/7Mf52O1U/FLlo0_H/8j-af/H-WH9/54Gn/NPj_v3FN3/n2i9dt1v/WUdo/4bMN9c/mCnKshmqVl/l4v/usqgl9IrGu/eTfO/Xx HTTP/1.1
Host: groundlesspowder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xvideostop.beartube.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 31 Mar 2026 19:54:51 GMT
Content-Type: application/javascript
Content-Length: 39786
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 3
Host: groundlesspowder.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 401917c170b133b7f823a424b03510ec
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

19:54:51.374 GET 200 script 89.7 KB 986 ms —

19:54:51.376 GET 200 script 10.5 KB 228 ms —

19:54:51.378 GET 302 script 69.6 KB 206 ms —

19:54:51.380 GET 200 script 41.0 KB 106 ms —

19:54:51.648 GET 200 script 69.6 KB 281 ms —

19:54:51.689 GET 200 script 311.2 KB 84 ms —

19:54:53.799 GET 502 script 6.3 KB 62 ms 1 alerts

19:54:53.893 GET 200 img 14.9 KB 237 ms 1 alerts

19:54:53.894 GET 200 img 14.9 KB 6 ms 1 alerts

19:54:53.896 GET 200 img 14.9 KB 7 ms 1 alerts

19:54:53.918 GET 200 imageset 14.9 KB 8 ms 1 alerts

19:54:53.921 GET 200 imageset 14.9 KB 275 ms 1 alerts

19:54:53.927 GET 200 imageset 14.9 KB 9 ms 1 alerts

19:54:53.929 GET 200 img 909 B 290 ms 1 alerts

19:54:53.932 GET 200 img 127 B 4257 ms 1 alerts

19:54:53.938 GET 502 img 6.3 KB 166 ms 1 alerts

19:54:53.941 GET 200 img 101 B 305 ms 1 alerts

19:54:53.945 GET 200 font 21.3 KB 295 ms —

19:54:53.946 GET 200 font 21.3 KB 316 ms —

19:54:53.950 GET 200 font 21.3 KB 343 ms —

19:54:53.951 GET 200 font 21.3 KB 320 ms —

19:54:53.953 GET 502 font 6.3 KB 159 ms 1 alerts

19:54:53.993 GET 500 lazy-imageset 186 B 159 ms 1 alerts

19:54:53.996 GET 502 lazy-imageset 6.3 KB 167 ms 1 alerts

19:54:53.998 GET 502 lazy-imageset 6.3 KB 165 ms 1 alerts

19:54:54.004 GET 200 lazy-imageset 14.9 KB 509 ms 1 alerts

19:54:54.006 GET 502 lazy-imageset 6.3 KB 171 ms 1 alerts

19:54:54.010 GET 502 lazy-imageset 6.3 KB 149 ms 1 alerts

19:54:54.011 GET 200 lazy-imageset 14.9 KB 1030 ms 1 alerts

http://xvideostop.beartube.net/

Domain graph

Hostnames

Connections