WEBSITE ANALYSIS REPORT

http://xrysoi3.space/psych-2006/

26 Mar 2026 · 22:32:18.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

1.bp.blogspot.com1 captured requests
ajax.googleapis.com1 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com5 captured requests
creative-sb1.com4 captured requests
cupidirresolute.com1 captured requests
fizzyacerbitymellow.com5 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com4 captured requests
jnn-pa.googleapis.com2 captured requests
kettledroopingcontinuation.com8 captured requests
plantationhick.com1 captured requests
preferencenail.com2 captured requests
protrafficinspector.com2 captured requests
skinnycrawlinglax.com6 captured requests
tainiesonline.xrysoi3.space25 captured requests
www.google.com1 captured requests
www.googletagmanager.com2 captured requests
www.paypal.com1 captured requests
www.paypalobjects.com2 captured requests
www.youtube.com9 captured requests
xrysoi3.space38 captured requests

Connections

tainiesonline.xrysoi3.space → xrysoi3.spaceRedirects to8 captured connections
www.paypal.com → www.paypalobjects.comRedirects to1 captured connections
www.youtube.com → fonts.gstatic.comLoads from2 captured connections
www.youtube.com → jnn-pa.googleapis.comCalls2 captured connections
www.youtube.com → www.google.comLoads from1 captured connections
xrysoi3.space → 1.bp.blogspot.comLoads from1 captured connections
xrysoi3.space → ajax.googleapis.comLoads from1 captured connections
xrysoi3.space → cdn.show-sb.comCalls1 captured connections
xrysoi3.space → cdn.storageimagedisplay.comLoads from5 captured connections
xrysoi3.space → creative-sb1.comCalls3 captured connections
xrysoi3.space → creative-sb1.comLoads from1 captured connections
xrysoi3.space → cupidirresolute.comLoads from1 captured connections
xrysoi3.space → fizzyacerbitymellow.comCalls1 captured connections
xrysoi3.space → fizzyacerbitymellow.comLoads from4 captured connections
xrysoi3.space → flushpersist.comLoads from2 captured connections
xrysoi3.space → fonts.googleapis.comLoads from1 captured connections
xrysoi3.space → fonts.gstatic.comLoads from2 captured connections
xrysoi3.space → kettledroopingcontinuation.comCalls1 captured connections
xrysoi3.space → kettledroopingcontinuation.comLoads from7 captured connections
xrysoi3.space → plantationhick.comLoads from1 captured connections
xrysoi3.space → preferencenail.comLoads from2 captured connections
xrysoi3.space → protrafficinspector.comCalls2 captured connections
xrysoi3.space → skinnycrawlinglax.comCalls2 captured connections
xrysoi3.space → skinnycrawlinglax.comLoads from4 captured connections
xrysoi3.space → tainiesonline.xrysoi3.spaceLoads from25 captured connections
xrysoi3.space → www.googletagmanager.comLoads from2 captured connections
xrysoi3.space → www.paypal.comLoads from1 captured connections
xrysoi3.space → www.paypalobjects.comLoads from2 captured connections
xrysoi3.space → www.youtube.comEmbeds1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

22:31:51.816 GET 200 document 72.8 KB 295 ms 1 alerts

22:31:52.317 GET 200 script 343.1 KB 455 ms —

22:31:52.321 GET 200 stylesheet 33.1 KB 15 ms 1 alerts

22:31:52.326 GET 200 img 14.5 KB 14 ms 1 alerts

22:31:52.335 GET 200 img 1.1 KB 15 ms 1 alerts

22:31:52.346 GET 200 script 49.4 KB 858 ms 1 alerts

Transaction #51

Request / response

URL

GET HTTPS

https://plantationhick.com/7e4b4578005d35978c39aeae316e703e/invoke.js

IP / ASN

172.240.108.76

AS7979 · SERVERS-COM

Requested by: https://xrysoi3.space/psych-2006/

Resource information

File type: JavaScript source, ASCII text, with very long lines (50568), with no line terminators
MIME type: application/javascript
First seen (UTC): 26 Mar 2026 · 22:32:39.825 UTC
Last seen (UTC): 27 Mar 2026 · 14:33:55.162 UTC
Times seen: 2

Size: 49.4 KB (50568 bytes)
MD5: 564ca37385051252d62603f199a9199e
SHA1: cbfcb400d1b1d975d9ed08ecd0ca937e652996e3
SHA256: b0347c628f4575bd1b036e320a69e9f97aa2482cc2c0aeea97f943b9cb47a753

Certificate information

Issuer: Let's Encrypt · R12
Subject: plantationhick.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 0D:F3:9B:97:53:3E:5C:AD:E3:20:AF:85:8E:63:D8:36:BA:60:F1:F0
Valid from: Thu, 19 Feb 2026 21:56:08 GMT
Valid until: Wed, 20 May 2026 21:56:07 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /7e4b4578005d35978c39aeae316e703e/invoke.js HTTP/1.1
Host: plantationhick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xrysoi3.space/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 26 Mar 2026 22:31:52 GMT
Content-Type: application/javascript
Content-Length: 20320
Connection: keep-alive
content-encoding: gzip
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
x-envoy-upstream-service-time: 7
Host: plantationhick.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: 9d9a4fc2c992ba655a3f8a0b3d18f830
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

22:31:52.350 GET 404 img 23.6 KB 206 ms 1 alerts

22:31:52.354 GET 200 img 14.6 KB 342 ms —

22:31:52.358 GET 200 script 46.7 KB 877 ms 2 alerts

22:31:52.360 GET 200 img 571 B 16 ms 1 alerts

22:31:52.363 GET 301 img 47.4 KB 171 ms 1 alerts

22:31:52.365 GET 301 img 2.6 KB 382 ms 1 alerts

22:31:52.366 GET 301 img 4.0 KB 167 ms 1 alerts

22:31:52.368 GET 301 img 3.3 KB 355 ms 1 alerts

22:31:52.370 GET 301 img 5.0 KB 228 ms 1 alerts

22:31:52.372 GET 301 img 14.5 KB 457 ms 1 alerts

22:31:52.376 GET 200 img 482 B 14 ms 1 alerts

22:31:52.377 GET 200 img 3.7 KB 158 ms 1 alerts

22:31:52.379 GET 200 img 2.0 KB 158 ms 1 alerts

22:31:52.380 GET 200 img 2.9 KB 155 ms 1 alerts

22:31:52.381 GET 200 img 3.0 KB 154 ms 1 alerts

22:31:52.383 GET 200 img 2.1 KB 152 ms 1 alerts

22:31:52.384 GET 301 img 3.3 KB 153 ms 1 alerts

22:31:52.385 GET 200 img 2.7 KB 152 ms 1 alerts

22:31:52.386 GET 200 img 1.7 KB 152 ms 1 alerts

22:31:52.387 GET 200 img 2.3 KB 151 ms 1 alerts

22:31:52.388 GET 200 img 2.5 KB 153 ms 1 alerts

22:31:52.393 GET 301 img 2.2 KB 144 ms 1 alerts

22:31:52.395 GET 200 img 2.0 KB 144 ms 1 alerts

22:31:52.396 GET 200 img 3.2 KB 143 ms 1 alerts

22:31:52.397 GET 200 img 1.4 KB 141 ms 1 alerts

22:31:52.398 GET 200 img 1.9 KB 143 ms 1 alerts

22:31:52.400 GET 200 img 1.7 KB 158 ms 1 alerts

22:31:52.401 GET 200 img 1.8 KB 157 ms 1 alerts

22:31:52.402 GET 301 img 42 B 275 ms —

22:31:52.403 GET 200 img 2.8 KB 11 ms 1 alerts

22:31:52.404 GET 200 img 4.2 KB 14 ms 1 alerts

22:31:52.405 GET 200 img 5.9 KB 9 ms 1 alerts

22:31:52.406 GET 200 img 3.2 KB 8 ms 1 alerts

22:31:52.408 GET 200 img 9.5 KB 12 ms 1 alerts

22:31:52.409 GET 200 img 7.7 KB 12 ms 1 alerts

22:31:52.410 GET 200 img 8.8 KB 13 ms 1 alerts

22:31:52.412 GET 200 img 3.7 KB 10 ms 1 alerts

22:31:52.414 GET 200 img 3.8 KB 10 ms 1 alerts

22:31:52.418 GET 200 stylesheet 33.1 KB 11 ms 1 alerts

22:31:52.420 GET 200 stylesheet 46.3 KB 9 ms 1 alerts

22:31:52.430 GET 200 script 98.8 KB 204 ms 1 alerts

22:31:52.437 GET 200 script 11.9 KB 218 ms 1 alerts

22:31:52.493 GET 200 img 489 B 10 ms 1 alerts

22:31:52.495 GET 200 img 5.8 KB 10 ms 1 alerts

http://xrysoi3.space/psych-2006/

Domain graph

Hostnames

Connections

Network requests

Transaction #51

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://xrysoi3.space/psych-2006/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #51

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://xrysoi3.space/psych-2006/

Domain graph

Network requests