urlquery.net
Investigate/Report/d0d8cf37-e7bd-4cd9-b6e9-e8b664242ee0
WEBSITE ANALYSIS REPORT

http://ericalatza.com/

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET200document67.2 KB546 ms1 alerts
GET200stylesheet45.5 KB101 ms1 alerts
GET200script34.6 KB927 ms1 alerts
GET200script34.6 KB609 ms1 alerts
GET301img0 B95 ms1 alerts
GET200fetch20 B114 ms1 alerts
POST204beacon0 B94 ms1 alerts
GET302lazy-img0 B67 ms—
GET200lazy-img42.5 KB49 ms—
GET200script4.2 KB3182 ms—

Transaction #17

Request / response

URL

GET HTTPS
https://mamshirt.com/17/97fce4537c0f81f954d679ccebe0c47c

IP / ASN

Country unknown 172.67.198.70

AS13335 · CLOUDFLARENET

Requested by
https://ericalatza.com/

Resource information

File type
JavaScript source, ASCII text, with very long lines (4255), with no line terminators
MIME type
application/javascript
First seen (UTC)
11 Aug 2026 · 08:47:08.945 UTC
Last seen (UTC)
25 Aug 2026 · 12:26:34.058 UTC
Times seen
677
Size
4.2 KB (4255 bytes)
MD5
0c0e7657bab7937c0563acff6dd2211b
SHA1
cbcdb00be7ed658d132825a279f4f25e77291e00
SHA256
546bd690105f31ab05597dd602364a10e018a92cb15ae8cc6236e21e41b76e0e

Certificate information

Issuer
Google Trust Services · WE1
Subject
mamshirt.com
Protocol / cipher
TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint
4A:61:D5:60:A6:99:C4:08:0F:B0:18:E2:30:0C:95:87:3A:94:03:3D
Valid from
Tue, 30 Jun 2026 08:54:52 GMT
Valid until
Mon, 28 Sep 2026 09:54:49 GMT

Technology fingerprints

  • Cloudflare (CDN)
  • Envoy (Reverse proxies)

HTTP headers

Request headers

GET /17/97fce4537c0f81f954d679ccebe0c47c HTTP/1.1
Host: mamshirt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://ericalatza.com/
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Sun, 23 Aug 2026 14:35:19 GMT
content-type: application/javascript
server: cloudflare
set-cookie: uidm=01a02f0c-2089-7c72-8468-ffa6106dbe19_1; Path=/; Expires=Wed, 20 Aug 2036 14:35:19 GMT; Secure; SameSite=None
__cf_bm=46CsecwauvTTVdHCH_4ovnSKaLG63pNGtEZh0auJEr8-1787495719.0253644-1.0.1.1-ayKBB82G1oKX810t_.MhuK4DPw5usyna3lFN2zFO92OHA_OLC0hgENqabsGQT4phi9KW87kVrCakOKi6_VU.KQN3l7BUZUNCUmJMA6zqUKeursTxJMU1CUEMeq4Mambk; HttpOnly; SameSite=None; Secure; Path=/; Domain=mamshirt.com; Expires=Sun, 23 Aug 2026 15:05:19 GMT
accept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Device-Stock-Ua,X-Device-User-Agent,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version
content-encoding: gzip
link: <https://static.nresystems.com>; rel=preconnect; crossorigin, <https://static.nresystems.com>; rel=dns-prefetch
vary: Accept-Encoding, Origin
x-envoy-upstream-service-time: 3
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, max-age=0, private, no-cache
x-request-id: 63a924a6c875afecd10fc0ef0ee61f77
pragma: no-cache
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values
access-control-expose-headers: Content-Length,Content-Range
access-control-allow-credentials: true
access-control-max-age: 1728000
cf-cache-status: DYNAMIC
cf-ray: a2fad7d3ead45697-OSL
X-Firefox-Spdy: h2
GET200xhr40 B113 ms—
GET200script4.2 KB53 ms—
GET200xhr40 B111 ms—
POST204beacon0 B93 ms1 alerts
GET301lazy-img0 B93 ms1 alerts
GET301lazy-img0 B93 ms1 alerts
GET301lazy-img0 B93 ms1 alerts
GET301lazy-img0 B93 ms1 alerts
GET200lazy-img9.6 KB279 ms1 alerts
GET301lazy-img0 B93 ms1 alerts
GET301lazy-img0 B93 ms1 alerts
GET301lazy-img0 B93 ms1 alerts
GET307xhr0 B479 ms2 alerts
GET307xhr0 B477 ms2 alerts
GET200lazy-img92.6 KB818 ms—
GET200lazy-img136.3 KB255 ms—
GET200lazy-img49.8 KB415 ms—
GET200lazy-img49.2 KB438 ms—
GET200lazy-img75.9 KB450 ms—
GET200lazy-img62.7 KB214 ms—
GET200lazy-img191.1 KB53 ms—
GET200xhr4.0 KB125 ms2 alerts
GET200xhr4.0 KB108 ms2 alerts
GET200img25.0 KB144 ms—
GET200img0 B0 ms2 alerts
GET200img80.3 KB360 ms—
GET200img0 B0 ms2 alerts
GET200img330 B94 ms1 alerts
POST204beacon0 B94 ms1 alerts
39 visible / 39 matching / 39 captured
First
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close
LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot