WEBSITE ANALYSIS REPORT

http://a97js0p4xw.pages.dev/

21 Aug 2026 · 20:46:44.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

a97js0p4xw.pages.dev2 captured requests
cdn.redgarto.com6 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com22 captured requests
consumeririssalary.com18 captured requests
counter.yadro.ru1 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com2 captured requests
furiousexpansion.com19 captured requests
go.realus.lt2 captured requests
mamshirt.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com4 captured requests
racingorchestra.com5 captured requests
sleepoverlimitprofound.com18 captured requests
static.nresystems.com1 captured requests
wingsmob.com3 captured requests
workdeadlinededicate.com12 captured requests

Connections

a97js0p4xw.pages.dev → cdn.redgarto.comCalls3 captured connections
a97js0p4xw.pages.dev → cdn.redgarto.comLoads from3 captured connections
a97js0p4xw.pages.dev → cdn.show-creative1.comCalls1 captured connections
a97js0p4xw.pages.dev → cdn.storageimagedisplay.comLoads from22 captured connections
a97js0p4xw.pages.dev → consumeririssalary.comCalls2 captured connections
a97js0p4xw.pages.dev → consumeririssalary.comLoads from16 captured connections
a97js0p4xw.pages.dev → counter.yadro.ruLoads from1 captured connections
a97js0p4xw.pages.dev → flushpersist.comLoads from2 captured connections
a97js0p4xw.pages.dev → fonts.googleapis.comLoads from1 captured connections
a97js0p4xw.pages.dev → fonts.gstatic.comLoads from2 captured connections
a97js0p4xw.pages.dev → furiousexpansion.comCalls2 captured connections
a97js0p4xw.pages.dev → furiousexpansion.comLoads from17 captured connections
a97js0p4xw.pages.dev → go.realus.ltLoads from2 captured connections
a97js0p4xw.pages.dev → mamshirt.comLoads from1 captured connections
a97js0p4xw.pages.dev → portalfluently.comLoads from2 captured connections
a97js0p4xw.pages.dev → protrafficinspector.comCalls4 captured connections
a97js0p4xw.pages.dev → racingorchestra.comLoads from5 captured connections
a97js0p4xw.pages.dev → sleepoverlimitprofound.comCalls2 captured connections
a97js0p4xw.pages.dev → sleepoverlimitprofound.comLoads from16 captured connections
a97js0p4xw.pages.dev → static.nresystems.comLoads from1 captured connections
a97js0p4xw.pages.dev → wingsmob.comCalls2 captured connections
a97js0p4xw.pages.dev → wingsmob.comLoads from1 captured connections
a97js0p4xw.pages.dev → workdeadlinededicate.comCalls5 captured connections
a97js0p4xw.pages.dev → workdeadlinededicate.comLoads from7 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:46:06.646 GET 200 document 5.0 KB 228 ms —

20:46:07.424 GET 200 script 32.3 KB 886 ms 1 alerts

20:46:07.426 GET 200 script 32.2 KB 484 ms 1 alerts

20:46:07.428 GET 200 script 32.2 KB 911 ms 1 alerts

20:46:07.430 GET 200 script 32.2 KB 913 ms 1 alerts

20:46:07.433 GET 200 script 94.8 KB 903 ms 1 alerts

20:46:07.435 GET No response script 0 B 0 ms —

20:46:07.452 GET 200 img 132 B 149 ms —

20:46:08.375 GET 200 script 83.4 KB 125 ms 1 alerts

20:46:08.380 GET 200 xhr 40 B 109 ms —

20:46:08.383 GET 200 script 4.2 KB 63 ms —

20:46:08.386 GET No response script 0 B 0 ms —

20:46:08.408 GET 200 xhr 40 B 108 ms —

20:46:08.411 GET 200 xhr 14.2 KB 395 ms 1 alerts

20:46:08.415 GET 200 xhr 40 B 97 ms —

20:46:08.416 GET 200 xhr 14.2 KB 108 ms 1 alerts

Transaction #93

Request / response

URL

GET HTTPS

https://sleepoverlimitprofound.com/ntv.json?key=dcc70babb195d7f16e186a05029ee138&vstc=4&rb=e

IP / ASN

23.111.84.116

AS7979 · SERVERS-COM

Requested by: https://a97js0p4xw.pages.dev/

Resource information

File type: JSON text data
MIME type: application/json
First seen (UTC): 21 Aug 2026 · 20:46:59.828 UTC
Last seen (UTC): 21 Aug 2026 · 20:46:59.828 UTC
Times seen: 1

Size: 14.2 KB (14545 bytes)
MD5: 21b84be0446ad7f4631bbcc8df369a5f
SHA1: 0f9bfacb44e88c26e591c2dee274c07aef75d909
SHA256: 48324b9bb5689b8e97670e6fcf5bd6109d9ebafcb9557dcedc962255a68db133

Certificate information

Issuer: Let's Encrypt · YR1
Subject: sleepoverlimitprofound.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 66:BB:03:E4:C6:65:71:73:29:65:60:07:DD:88:3E:54:A6:37:3D:07
Valid from: Sat, 27 Jun 2026 02:42:58 GMT
Valid until: Fri, 25 Sep 2026 02:42:57 GMT

Technology fingerprints

Nginx:1.30.2 (Web servers, Reverse proxies)
Envoy (Reverse proxies)
HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /ntv.json?key=dcc70babb195d7f16e186a05029ee138&vstc=4&rb=e HTTP/1.1
Host: sleepoverlimitprofound.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://a97js0p4xw.pages.dev/
Origin: https://a97js0p4xw.pages.dev
Sec-Fetch-Storage-Access: none
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.30.2
Date: Fri, 21 Aug 2026 20:46:08 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
accept-ch: Sec-Ch-Ua-Mobile,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model
access-control-allow-credentials: true
access-control-allow-origin: https://a97js0p4xw.pages.dev
content-encoding: zstd
set-cookie: pdhtkv=true; Path=/; Expires=Sat, 22 Aug 2026 20:46:08 GMT; Secure; SameSite=None
uncs=1; Path=/; Expires=Sat, 22 Aug 2026 20:46:08 GMT; Secure; SameSite=None
pdhtkv49=true; Path=/; Expires=Sat, 22 Aug 2026 20:46:08 GMT; Secure; SameSite=None
uncs49=1; Path=/; Expires=Sat, 22 Aug 2026 20:46:08 GMT; Secure; SameSite=None
u_pl15679358=1; Path=/; Expires=Sat, 22 Aug 2026 20:46:08 GMT; Secure; SameSite=None
vary: Accept-Encoding
x-envoy-upstream-service-time: 14
Host: sleepoverlimitprofound.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 901f78acf9cd2b7dd50999cbc8f71067
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

20:46:08.418 GET 200 script 90.2 KB 102 ms —

20:46:08.423 GET 200 xhr 40 B 109 ms —

20:46:08.426 GET 200 xhr 14.1 KB 97 ms 1 alerts

20:46:08.431 GET 200 img 0 B 389 ms 1 alerts

20:46:08.566 GET 200 xhr 14.2 KB 478 ms 1 alerts

20:46:08.568 GET 200 xhr 14.2 KB 37 ms 1 alerts

20:46:08.570 GET 200 xhr 14.2 KB 35 ms 1 alerts

20:46:08.642 GET 200 script 83.4 KB 26 ms 1 alerts

20:46:08.644 GET 200 xhr 76 B 86 ms —

20:46:08.657 GET 200 img 0 B 0 ms —

20:46:08.663 GET 200 img 24.8 KB 315 ms —

20:46:08.666 GET 200 img 29.4 KB 98 ms —

20:46:08.668 GET 200 img 135.0 KB 189 ms —

20:46:08.671 GET 200 img 15.6 KB 169 ms —

20:46:08.673 GET 200 img 0 B 0 ms 1 alerts

20:46:08.674 GET 200 img 0 B 0 ms 1 alerts

20:46:08.676 GET 200 img 0 B 0 ms 1 alerts

20:46:08.678 GET 200 img 0 B 0 ms 1 alerts

20:46:08.679 GET 200 img 0 B 0 ms 1 alerts

20:46:08.680 GET 200 img 0 B 0 ms 1 alerts

20:46:08.682 GET 200 img 0 B 0 ms 1 alerts

20:46:08.683 GET 200 img 0 B 0 ms 1 alerts

20:46:08.690 GET 200 img 57.3 KB 86 ms —

20:46:08.691 GET 200 img 115.6 KB 134 ms —

20:46:08.693 GET 200 img 98.0 KB 139 ms —

20:46:08.694 GET 200 img 25.3 KB 108 ms —

20:46:08.705 GET 200 img 0 B 0 ms 1 alerts

20:46:08.706 GET 200 img 0 B 0 ms 1 alerts

20:46:08.707 GET 200 img 0 B 0 ms 1 alerts

20:46:08.708 GET 200 img 0 B 0 ms 1 alerts

20:46:08.710 GET 200 img 0 B 0 ms 1 alerts

20:46:08.711 GET 200 img 0 B 0 ms 1 alerts

20:46:08.712 GET 200 img 0 B 0 ms 1 alerts

20:46:08.713 GET 200 img 0 B 0 ms 1 alerts

http://a97js0p4xw.pages.dev/

Domain graph

Hostnames

Connections

Network requests

Transaction #93

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://a97js0p4xw.pages.dev/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #93

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://a97js0p4xw.pages.dev/

Domain graph

Network requests