WEBSITE ANALYSIS REPORT

http://handfacesnap.cc/e/i9jwx6c1FWM1i

02 Aug 2026 · 09:07:27.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
accounts.google.com2 captured requests
acscdn.com3 captured requests
adexchangerapid.com1 captured requests
adsco.re2 captured requests
aifpleasurebeh.org8 captured requests
c.adsco.re1 captured requests
cdnjs.cloudflare.com3 captured requests
clogcatsabrupt.com1 captured requests
d3gzvoml0v92ql.cloudfront.net1 captured requests
dc9xwpjprguup.cloudfront.net2 captured requests
dd133.com1 captured requests
displayvertising.com1 captured requests
droomhesaidsoftly.org1 captured requests
entitlements.jwplayer.com1 captured requests
fedoq.com1 captured requests
handfacesnap.cc6 captured requests
imasdk.googleapis.com2 captured requests
jnbhi.com1 captured requests
jovthrcle.com1 captured requests
llvpn.com1 captured requests
luugy.com1 captured requests
m696yefd.s1q2105.com1 captured requests
moonlighthathel.org1 captured requests
p1-s3-d2.s1q2105.com3 captured requests
portalfluently.com1 captured requests
protrafficinspector.com1 captured requests
ssl.p.jwpcdn.com1 captured requests
ubtpijtsmn5k.l4.adsco.re1 captured requests
ubtpijtsmn5k.n4.adsco.re1 captured requests
ubtpijtsmn5k.s4.adsco.re1 captured requests
ukankingwithea.com2 captured requests
usrpubtrk.com1 captured requests
www.displayvertising.com1 captured requests
xo.preplaneffie.com1 captured requests
zoologyfibre.com1 captured requests

Connections

droomhesaidsoftly.org → dc9xwpjprguup.cloudfront.netLoads from1 captured connections
handfacesnap.cc → 4.adsco.reCalls2 captured connections
handfacesnap.cc → 6.adsco.reCalls2 captured connections
handfacesnap.cc → accounts.google.comLoads from2 captured connections
handfacesnap.cc → acscdn.comLoads from3 captured connections
handfacesnap.cc → adexchangerapid.comCalls1 captured connections
handfacesnap.cc → adsco.reCalls2 captured connections
handfacesnap.cc → aifpleasurebeh.orgCalls2 captured connections
handfacesnap.cc → aifpleasurebeh.orgLoads from6 captured connections
handfacesnap.cc → c.adsco.reLoads from1 captured connections
handfacesnap.cc → cdnjs.cloudflare.comLoads from3 captured connections
handfacesnap.cc → clogcatsabrupt.comLoads from1 captured connections
handfacesnap.cc → d3gzvoml0v92ql.cloudfront.netLoads from1 captured connections
handfacesnap.cc → dc9xwpjprguup.cloudfront.netLoads from1 captured connections
handfacesnap.cc → dd133.comLoads from1 captured connections
handfacesnap.cc → displayvertising.comLoads from1 captured connections
handfacesnap.cc → droomhesaidsoftly.orgEmbeds1 captured connections
handfacesnap.cc → entitlements.jwplayer.comCalls1 captured connections
handfacesnap.cc → fedoq.comCalls1 captured connections
handfacesnap.cc → imasdk.googleapis.comEmbeds1 captured connections
handfacesnap.cc → imasdk.googleapis.comLoads from1 captured connections
handfacesnap.cc → jnbhi.comLoads from1 captured connections
handfacesnap.cc → jovthrcle.comCalls1 captured connections
handfacesnap.cc → llvpn.comLoads from1 captured connections
handfacesnap.cc → luugy.comCalls1 captured connections
handfacesnap.cc → m696yefd.s1q2105.comLoads from1 captured connections
handfacesnap.cc → moonlighthathel.orgCalls1 captured connections
handfacesnap.cc → p1-s3-d2.s1q2105.comCalls3 captured connections
handfacesnap.cc → portalfluently.comLoads from1 captured connections
handfacesnap.cc → protrafficinspector.comCalls1 captured connections
handfacesnap.cc → ssl.p.jwpcdn.comLoads from1 captured connections
handfacesnap.cc → ubtpijtsmn5k.l4.adsco.reCalls1 captured connections
handfacesnap.cc → ubtpijtsmn5k.n4.adsco.reCalls1 captured connections
handfacesnap.cc → ubtpijtsmn5k.s4.adsco.reCalls1 captured connections
handfacesnap.cc → ukankingwithea.comCalls2 captured connections
handfacesnap.cc → usrpubtrk.comCalls1 captured connections
handfacesnap.cc → www.displayvertising.comLoads from1 captured connections
handfacesnap.cc → xo.preplaneffie.comLoads from1 captured connections
handfacesnap.cc → zoologyfibre.comLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:06:47.306 GET 200 document 50.2 KB 396 ms —

09:06:48.079 GET 200 script 145.1 KB 52 ms —

09:06:48.082 GET 200 stylesheet 48.2 KB 6 ms —

09:06:48.083 GET 200 script 163.0 KB 37 ms 2 alerts

09:06:48.085 GET 200 script 84.9 KB 63 ms —

09:06:48.086 GET 200 script 45.8 KB 59 ms —

09:06:48.088 GET 200 script 59.4 KB 20 ms —

09:06:48.091 GET 200 script 478.9 KB 657 ms —

09:06:48.092 GET No response script 0 B 0 ms —

09:06:48.094 GET 200 script 66.9 KB 132 ms —

09:06:48.096 GET 200 script 5 B 144 ms —

09:06:48.098 GET 200 script 928 B 7 ms —

09:06:48.259 POST 200 fetch 408 B 135 ms —

09:06:48.828 GET 200 fetch 27 B 147 ms 3 alerts

09:06:48.835 GET 200 subdocument 3.0 KB 154 ms —

09:06:48.839 GET 200 fetch 26 B 130 ms 3 alerts

09:06:48.842 GET 204 img 0 B 140 ms 1 alerts

09:06:48.850 GET 200 script 162.5 KB 35 ms —

09:06:48.875 HEAD 200 xhr 0 B 214 ms —

09:06:48.919 GET 200 script 83.4 KB 134 ms 1 alerts

09:06:48.921 GET 200 xhr 40 B 128 ms —

09:06:48.926 GET 200 script 87.2 KB 27 ms —

09:06:48.927 GET 200 script 163.0 KB 27 ms 2 alerts

09:06:48.929 GET 204 img 0 B 123 ms 1 alerts

09:06:48.932 GET 200 img 0 B 472 ms —

09:06:49.074 GET 200 script 67.8 KB 14 ms 2 alerts

09:06:49.075 GET 200 script 41.0 KB 3185 ms 1 alerts

09:06:49.190 GET 200 script 875 B 172 ms —

09:06:49.247 POST No response xhr 0 B 0 ms —

09:06:49.339 POST 204 xhr 0 B 118 ms —

09:06:49.435 GET No response subdocument 0 B 0 ms —

09:06:49.437 GET 204 img 0 B 121 ms 1 alerts

09:06:49.469 GET No response subdocument 0 B 0 ms —

09:06:49.472 GET 204 img 0 B 119 ms 1 alerts

09:06:49.473 GET 204 img 0 B 121 ms 1 alerts

09:06:49.540 GET 200 fetch 1.1 KB 261 ms 3 alerts

Transaction #12

Request / response

URL

GET HTTPS

https://adexchangerapid.com/script/suurl5.php?r=11269754&cbur=0.5871763328437927&cbiframe=0&cbWidth=1280&cbHeight=973&cbtitle=Kylie_Quinn_Vs_Brickzilla_-_Happy_Booty_Bonus_Day&cbpage=https%3A%2F%2Fhandfacesnap.cc%2Fe%2Fi9jwx6c1FWM1i&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&ts=1785661609272&srs=fb4aba1271748b4122fa500222db6220&atv=85.1-pa&btp=0.01

IP / ASN

104.21.35.134

AS13335 · CLOUDFLARENET

Requested by: https://handfacesnap.cc/e/i9jwx6c1FWM1i

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 02 Aug 2026 · 09:07:40.457 UTC
Last seen (UTC): 02 Aug 2026 · 09:07:40.457 UTC
Times seen: 1

Size: 1.1 KB (1098 bytes)
MD5: 587085c1f209a1f92131f34fbe09f38b
SHA1: f37d2a7d6323556723a02aef96cc647816e165bd
SHA256: 402644f76fda2df40a3992297679632e9c84efd1fb578e803cc26c6487de5b4e

Certificate information

Issuer: Let's Encrypt · YE1
Subject: adexchangerapid.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 05:FA:95:2D:66:AE:32:6A:6D:E8:85:EA:35:1A:3A:15:CE:0E:B1:7D
Valid from: Fri, 26 Jun 2026 15:52:58 GMT
Valid until: Thu, 24 Sep 2026 15:52:57 GMT

Technology fingerprints

Google Cloud (IaaS)
Cloudflare (CDN)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/suurl5.php?r=11269754&cbur=0.5871763328437927&cbiframe=0&cbWidth=1280&cbHeight=973&cbtitle=Kylie_Quinn_Vs_Brickzilla_-_Happy_Booty_Bonus_Day&cbpage=https%3A%2F%2Fhandfacesnap.cc%2Fe%2Fi9jwx6c1FWM1i&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&ts=1785661609272&srs=fb4aba1271748b4122fa500222db6220&atv=85.1-pa&btp=0.01 HTTP/1.1
Host: adexchangerapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://handfacesnap.cc/
Origin: https://handfacesnap.cc
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Sun, 02 Aug 2026 09:06:49 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
content-encoding: gzip
via: 1.1 google
priority: u=4,i=?0
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Jxfz7kJJBfV%2FJ6Kix09Pv%2Bv7tTyA1fVsxXapSgwzZNxx1rgL0sne12fly1o3K5vkKo85T77V4j1k6BStVNVw04XPj2PkHsUhhnfGKJai3WdLP5r%2Bi5464ERxJtxDQpOt5GGPCpoC"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
cf-ray: a24bedc3bc93b503-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

09:06:49.543 POST 204 beacon 0 B 168 ms 3 alerts

09:06:49.850 GET 200 img 35 B 6 ms 1 alerts

09:06:50.102 POST 204 beacon 0 B 122 ms 1 alerts

09:06:50.104 GET 200 xhr 687 B 259 ms 2 alerts

09:06:50.680 GET 200 img 74.7 KB 180 ms —

09:06:50.713 GET 400 xhr 71 B 13 ms —

09:06:50.720 GET 200 script 476.5 KB 149 ms —

09:06:50.871 GET 200 xhr 304 B 181 ms —

09:06:50.873 GET 200 img 110.6 KB 156 ms —

09:06:51.064 GET 200 xhr 15.5 KB 396 ms —

09:06:51.417 POST 204 beacon 0 B 120 ms 1 alerts

09:06:51.467 GET 200 xhr 1.41 MB 229 ms —

09:06:51.508 GET 200 img 13.9 KB 47 ms —

09:06:52.005 GET 302 img 0 B 57 ms —

http://handfacesnap.cc/e/i9jwx6c1FWM1i

Domain graph

Hostnames

Connections

Network requests

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://handfacesnap.cc/e/i9jwx6c1FWM1i

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #12

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://handfacesnap.cc/e/i9jwx6c1FWM1i

Domain graph

Network requests