WEBSITE ANALYSIS REPORT

http://a97js0p4xw.pages.dev/

21 Aug 2026 · 20:46:44.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a97js0p4xw.pages.dev2 captured requests
cdn.redgarto.com6 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com22 captured requests
consumeririssalary.com18 captured requests
counter.yadro.ru1 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
furiousexpansion.com19 captured requests
go.realus.lt2 captured requests
mamshirt.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com4 captured requests
racingorchestra.com5 captured requests
sleepoverlimitprofound.com18 captured requests
static.nresystems.com1 captured requests
wingsmob.com3 captured requests
workdeadlinededicate.com12 captured requests

Connections

a97js0p4xw.pages.dev → cdn.redgarto.comCalls3 captured connections
a97js0p4xw.pages.dev → cdn.redgarto.comLoads from3 captured connections
a97js0p4xw.pages.dev → cdn.show-creative1.comCalls1 captured connections
a97js0p4xw.pages.dev → cdn.storageimagedisplay.comLoads from22 captured connections
a97js0p4xw.pages.dev → consumeririssalary.comCalls2 captured connections
a97js0p4xw.pages.dev → consumeririssalary.comLoads from16 captured connections
a97js0p4xw.pages.dev → counter.yadro.ruLoads from1 captured connections
a97js0p4xw.pages.dev → flushpersist.comLoads from2 captured connections
a97js0p4xw.pages.dev → fonts.googleapis.comLoads from1 captured connections
a97js0p4xw.pages.dev → fonts.gstatic.comLoads from2 captured connections
a97js0p4xw.pages.dev → furiousexpansion.comCalls2 captured connections
a97js0p4xw.pages.dev → furiousexpansion.comLoads from17 captured connections
a97js0p4xw.pages.dev → go.realus.ltLoads from2 captured connections
a97js0p4xw.pages.dev → mamshirt.comLoads from1 captured connections
a97js0p4xw.pages.dev → portalfluently.comLoads from2 captured connections
a97js0p4xw.pages.dev → protrafficinspector.comCalls4 captured connections
a97js0p4xw.pages.dev → racingorchestra.comLoads from5 captured connections
a97js0p4xw.pages.dev → sleepoverlimitprofound.comCalls2 captured connections
a97js0p4xw.pages.dev → sleepoverlimitprofound.comLoads from16 captured connections
a97js0p4xw.pages.dev → static.nresystems.comLoads from1 captured connections
a97js0p4xw.pages.dev → wingsmob.comCalls2 captured connections
a97js0p4xw.pages.dev → wingsmob.comLoads from1 captured connections
a97js0p4xw.pages.dev → workdeadlinededicate.comCalls5 captured connections
a97js0p4xw.pages.dev → workdeadlinededicate.comLoads from7 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)	Method	Status	Type	Size	Duration	Signals
20:46:06.646	GET	200	document	5.0 KB	228 ms	—

20:46:07.424	GET	200	script	32.3 KB	886 ms	1 alerts

20:46:07.426	GET	200	script	32.2 KB	484 ms	1 alerts

20:46:07.428	GET	200	script	32.2 KB	911 ms	1 alerts

20:46:07.430	GET	200	script	32.2 KB	913 ms	1 alerts

20:46:07.433	GET	200	script	94.8 KB	903 ms	1 alerts

20:46:07.435	GET	No response	script	0 B	0 ms	—

20:46:07.452	GET	200	img	132 B	149 ms	—

20:46:08.375	GET	200	script	83.4 KB	125 ms	1 alerts

20:46:08.380	GET	200	xhr	40 B	109 ms	—

20:46:08.383	GET	200	script	4.2 KB	63 ms	—
Transaction #112 Request / response URL GET HTTPS https://mamshirt.com/17/1ee3363d3f6736b5616821dca2afa5c7 IP / ASN 172.67.198.70 AS13335 · CLOUDFLARENET Transaction actions#112 Investigate Download resource4.2 KB (4255 bytes) Captured resources may contain malicious code. Sign in to download Raw file and protected ZIP External sources Requested by https://a97js0p4xw.pages.dev/ Resource information File type JavaScript source, ASCII text, with very long lines (4255), with no line terminators MIME type application/javascript First seen (UTC) 11 Aug 2026 · 08:47:08.945 UTC Last seen (UTC) 25 Aug 2026 · 12:26:34.058 UTC Times seen 677 Size 4.2 KB (4255 bytes) MD5 0c0e7657bab7937c0563acff6dd2211b SHA1 cbcdb00be7ed658d132825a279f4f25e77291e00 SHA256 546bd690105f31ab05597dd602364a10e018a92cb15ae8cc6236e21e41b76e0e Certificate information Issuer Google Trust Services · WE1 Subject mamshirt.com Protocol / cipher TLSv1.3 · TLS_AES_128_GCM_SHA256 SHA1 fingerprint 4A:61:D5:60:A6:99:C4:08:0F:B0:18:E2:30:0C:95:87:3A:94:03:3D Valid from Tue, 30 Jun 2026 08:54:52 GMT Valid until Mon, 28 Sep 2026 09:54:49 GMT Technology fingerprints Envoy (Reverse proxies) Cloudflare (CDN) HTTP headers Request headers `GET /17/1ee3363d3f6736b5616821dca2afa5c7 HTTP/1.1 Host: mamshirt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: / Accept-Language: en-US,en;q=0.9 Accept-Encoding: gzip, deflate, br, zstd Referer: https://a97js0p4xw.pages.dev/ Sec-Fetch-Storage-Access: none Sec-GPC: 1 Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` Response headers HTTP/2 200 date: Fri, 21 Aug 2026 20:46:08 GMT content-type: application/javascript server: cloudflare set-cookie: uidm=01a02612-e822-7fbc-8a89-a29533b3804f_1; Path=/; Expires=Mon, 18 Aug 2036 20:46:08 GMT; Secure; SameSite=None __cf_bm=ghTsUHo0G0pzwdAMyZSHm5v8jPim7yfpIU9Yl9cVtPk-1787345168.4009647-1.0.1.1-zbBO3Lt1CXW1i7zKbpbcZzVNtiHWmO.87Ar4WL8QtdV3CAWnmrpm24xVzPNrvh2yjVPdML6jUbkV2QskE03.Cj5IJscFvFX0fIGiM5ByIjeswW._kSFg5nmlcmY._4aY; HttpOnly; SameSite=None; Secure; Path=/; Domain=mamshirt.com; Expires=Fri, 21 Aug 2026 21:16:08 GMT accept-ch: Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent content-encoding: gzip link: <https://static.nresystems.com>; rel=preconnect; crossorigin, <https://static.nresystems.com>; rel=dns-prefetch vary: Accept-Encoding, Origin x-envoy-upstream-service-time: 3 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-cache, max-age=0, private, no-cache x-request-id: a5926ebe46b8b23db51e80d8ee2c4423 pragma: no-cache access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,User-Agent,X-Requested-With,X-Forwarded-For,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values access-control-expose-headers: Content-Length,Content-Range access-control-allow-credentials: true access-control-max-age: 1728000 cf-cache-status: DYNAMIC cf-ray: a2ec7c467ba356ae-OSL X-Firefox-Spdy: h2
20:46:08.386	GET	No response	script	0 B	0 ms	—

20:46:08.408	GET	200	xhr	40 B	108 ms	—

20:46:08.411	GET	200	xhr	14.2 KB	395 ms	1 alerts

20:46:08.415	GET	200	xhr	40 B	97 ms	—

20:46:08.416	GET	200	xhr	14.2 KB	108 ms	1 alerts

20:46:08.418	GET	200	script	90.2 KB	102 ms	—

20:46:08.423	GET	200	xhr	40 B	109 ms	—

20:46:08.426	GET	200	xhr	14.1 KB	97 ms	1 alerts

20:46:08.431	GET	200	img	0 B	389 ms	1 alerts

20:46:08.566	GET	200	xhr	14.2 KB	478 ms	1 alerts

20:46:08.568	GET	200	xhr	14.2 KB	37 ms	1 alerts

20:46:08.570	GET	200	xhr	14.2 KB	35 ms	1 alerts

20:46:08.642	GET	200	script	83.4 KB	26 ms	1 alerts

20:46:08.644	GET	200	xhr	76 B	86 ms	—

20:46:08.657	GET	200	img	0 B	0 ms	—

20:46:08.663	GET	200	img	24.8 KB	315 ms	—

20:46:08.666	GET	200	img	29.4 KB	98 ms	—

20:46:08.668	GET	200	img	135.0 KB	189 ms	—

20:46:08.671	GET	200	img	15.6 KB	169 ms	—

20:46:08.673	GET	200	img	0 B	0 ms	1 alerts

20:46:08.674	GET	200	img	0 B	0 ms	1 alerts

20:46:08.676	GET	200	img	0 B	0 ms	1 alerts

20:46:08.678	GET	200	img	0 B	0 ms	1 alerts

20:46:08.679	GET	200	img	0 B	0 ms	1 alerts

20:46:08.680	GET	200	img	0 B	0 ms	1 alerts

20:46:08.682	GET	200	img	0 B	0 ms	1 alerts

20:46:08.683	GET	200	img	0 B	0 ms	1 alerts

20:46:08.690	GET	200	img	57.3 KB	86 ms	—

20:46:08.691	GET	200	img	115.6 KB	134 ms	—

20:46:08.693	GET	200	img	98.0 KB	139 ms	—

20:46:08.694	GET	200	img	25.3 KB	108 ms	—

20:46:08.705	GET	200	img	0 B	0 ms	1 alerts

20:46:08.706	GET	200	img	0 B	0 ms	1 alerts

20:46:08.707	GET	200	img	0 B	0 ms	1 alerts

20:46:08.708	GET	200	img	0 B	0 ms	1 alerts

20:46:08.710	GET	200	img	0 B	0 ms	1 alerts

20:46:08.711	GET	200	img	0 B	0 ms	1 alerts

20:46:08.712	GET	200	img	0 B	0 ms	1 alerts

20:46:08.713	GET	200	img	0 B	0 ms	1 alerts

http://a97js0p4xw.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #112

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://a97js0p4xw.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #112

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

HTTP headers

Request headers

Response headers

http://a97js0p4xw.pages.dev/

Domain graph

Network requests