WEBSITE ANALYSIS REPORT

http://psfh.link/MCKFiF4I

18 Feb 2026 · 16:52:54.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acceptableredheadcaviar.com3 captured requests
adsco.re1 captured requests
c.adsco.re1 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com11 captured requests
cdn4ads.com1 captured requests
creative-sb1.com17 captured requests
cx.dornrusky.com1 captured requests
fonts.googleapis.com1 captured requests
fonts.gstatic.com1 captured requests
indirectcertaintypersecute.com28 captured requests
pasteflash.sx2 captured requests
preferencenail.com1 captured requests
protrafficinspector.com2 captured requests
psfh.link4 captured requests
realizationnewestfangs.com8 captured requests
sourshaped.com3 captured requests
www.cdn4ads.com1 captured requests
zncauwx35lja.l4.adsco.re1 captured requests
zncauwx35lja.n4.adsco.re1 captured requests
zncauwx35lja.s4.adsco.re1 captured requests

Connections

psfh.link → 4.adsco.reCalls2 captured connections
psfh.link → 6.adsco.reCalls2 captured connections
psfh.link → acceptableredheadcaviar.comLoads from3 captured connections
psfh.link → adsco.reCalls1 captured connections
psfh.link → c.adsco.reLoads from1 captured connections
psfh.link → cdn.show-creative1.comCalls1 captured connections
psfh.link → cdn.storageimagedisplay.comLoads from11 captured connections
psfh.link → cdn4ads.comLoads from1 captured connections
psfh.link → creative-sb1.comCalls2 captured connections
psfh.link → creative-sb1.comLoads from15 captured connections
psfh.link → cx.dornrusky.comLoads from1 captured connections
psfh.link → fonts.googleapis.comLoads from1 captured connections
psfh.link → fonts.gstatic.comLoads from1 captured connections
psfh.link → indirectcertaintypersecute.comCalls3 captured connections
psfh.link → indirectcertaintypersecute.comLoads from25 captured connections
psfh.link → pasteflash.sxLoads from2 captured connections
psfh.link → pasteflash.sxRedirects to2 captured connections
psfh.link → preferencenail.comLoads from1 captured connections
psfh.link → protrafficinspector.comCalls2 captured connections
psfh.link → realizationnewestfangs.comCalls1 captured connections
psfh.link → realizationnewestfangs.comLoads from7 captured connections
psfh.link → sourshaped.comCalls2 captured connections
psfh.link → sourshaped.comLoads from1 captured connections
psfh.link → www.cdn4ads.comLoads from1 captured connections
psfh.link → zncauwx35lja.l4.adsco.reCalls1 captured connections
psfh.link → zncauwx35lja.n4.adsco.reCalls1 captured connections
psfh.link → zncauwx35lja.s4.adsco.reCalls1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:52:31.498 GET 200 document 19.2 KB 359 ms 1 alerts

16:52:31.849 GET 301 script 819 B 48 ms 1 alerts

16:52:31.851 GET 200 script 5 B 288 ms 1 alerts

16:52:31.852 GET 301 script 1.2 KB 47 ms 1 alerts

16:52:31.902 GET 200 script 819 B 459 ms 1 alerts

16:52:31.903 GET 200 script 1.2 KB 462 ms 1 alerts

16:52:32.213 GET 200 script 40.9 KB 146 ms —

16:52:32.227 GET 200 script 46.7 KB 834 ms 3 alerts

16:52:32.228 GET 200 script 49.7 KB 823 ms 3 alerts

16:52:32.362 GET 200 script 75.0 KB 111 ms —

16:52:32.580 GET 200 fetch 45 B 228 ms —

16:52:32.585 GET 200 fetch 45 B 221 ms —

16:52:32.592 GET 200 fetch 45 B 91 ms —

16:52:32.594 GET 200 fetch 45 B 41 ms —

16:52:32.596 GET 200 xhr 0 B 294 ms —

16:52:32.598 GET 200 xhr 0 B 859 ms —

16:52:32.599 GET 200 xhr 0 B 2007 ms —

16:52:32.996 GET 200 img 535.1 KB 259 ms 1 alerts

16:52:33.499 GET 200 xhr 40 B 455 ms —

16:52:33.501 GET 200 xhr 13.5 KB 820 ms —

16:52:33.501 GET 200 script 5.0 KB 733 ms —

16:52:33.507 GET 200 xhr 40 B 441 ms —

16:52:34.008 GET 200 xhr 14.4 KB 121 ms —

16:52:34.010 GET 307 xhr 4.2 KB 703 ms 3 alerts

Transaction #59

Request / response

URL

GET HTTPS

https://sourshaped.com/watch.87761208507.js?key=d761dcd55d52a6b15500cb64599a7a34&kw=%5B%22leaked%22%2C%22amateurs%22%2C%22%E2%80%93%22%2C%22pasteflash%22%5D&refer=https%3A%2F%2Fpsfh.link%2FMCKFiF4I&tz=0&dev=e&res=14.3095&rb=&uuid=60284d7e-542b-4e90-8aa5-debf96a42df3%3A3%3A1

IP / ASN

172.240.253.132

AS7979 · SERVERS-COM

Requested by: https://psfh.link/MCKFiF4I

Resource information

File type: Not recorded
MIME type: text/html
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 15:29:55.883 UTC
Times seen: 19310193

Size: 4.2 KB (4282 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · R12
Subject: sourshaped.com
Protocol / cipher: TLSv1.2 · TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
SHA1 fingerprint: 93:86:61:9F:2D:73:66:D5:37:73:1C:FE:70:C8:9F:23:B1:C8:8A:D6
Valid from: Mon, 29 Dec 2025 00:11:03 GMT
Valid until: Sun, 29 Mar 2026 00:11:02 GMT

Technology fingerprints

Envoy (Reverse proxies)
HSTS (Security)
Nginx:1.21.6 (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Quad9 DNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /watch.87761208507.js?key=d761dcd55d52a6b15500cb64599a7a34&kw=%5B%22leaked%22%2C%22amateurs%22%2C%22%E2%80%93%22%2C%22pasteflash%22%5D&refer=https%3A%2F%2Fpsfh.link%2FMCKFiF4I&tz=0&dev=e&res=14.3095&rb=&uuid=60284d7e-542b-4e90-8aa5-debf96a42df3%3A3%3A1 HTTP/1.1
Host: sourshaped.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://psfh.link
DNT: 1
Connection: keep-alive
Referer: https://psfh.link/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Wed, 18 Feb 2026 16:52:34 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
accept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
access-control-allow-origin: https://psfh.link
access-control-allow-credentials: true
location: https://sourshaped.com/watch.87761208507.js?key=d761dcd55d52a6b15500cb64599a7a34&kw=%5B%22leaked%22%2C%22amateurs%22%2C%22%E2%80%93%22%2C%22pasteflash%22%5D&refer=https%3A%2F%2Fpsfh.link%2FMCKFiF4I&tz=0&dev=e&res=14.3095&rb=&uuid=60284d7e-542b-4e90-8aa5-debf96a42df3%3A3%3A1&shu=7f65612e8a6df60291bb974c9a5e3ddab6527269baa668c3b8a4f5e90fe84c49fbf31a62d5b369943f0696d626aab8270b67d9d954a0beff69076f9055f28aef8179268dba47a33f189c3ecdd8f01b493d25d1826bc8e02d9e5902&pst=1771433614&rmtc=t&st1=099e91a8359ef8acd78c4f866a9c6c3a&ps1=1771433554
set-cookie: uid_id2=60284d7e-542b-4e90-8aa5-debf96a42df3:3:1; expires=Wed, 25 Feb 2026 16:52:34 GMT; path=/; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.JN2on3OHrbxZjMRdl0jNY0DXQMBgGJGjpq4MQ_LS3Io; expires=Wed, 18 Feb 2026 16:53:34 GMT; path=/; secure; SameSite=None
x-envoy-upstream-service-time: 4
Host: sourshaped.com
Expires: Thu, 01 Jan 1970 00:00:01 GMT
X-Request-ID: c027990626d6fb401d4f87cb2ab185c9
Cache-Control: no-cache, max-age=0, private, no-cache
Pragma: no-cache
Strict-Transport-Security: max-age=0; includeSubdomains

16:52:34.030 GET 200 img 0 B 94 ms —

16:52:34.034 GET 200 img 0 B 180 ms —

16:52:34.041 GET 200 img 0 B 656 ms —

16:52:34.046 GET 200 img 0 B 175 ms —

16:52:34.050 GET 200 img 70.9 KB 251 ms —

16:52:34.051 GET 200 img 55.9 KB 258 ms —

16:52:34.055 GET 200 img 80.1 KB 213 ms —

16:52:34.057 GET 200 img 74.8 KB 206 ms —

16:52:34.058 GET 200 img 0 B 360 ms —

16:52:34.060 GET 200 img 0 B 562 ms —

16:52:34.061 GET 200 img 0 B 574 ms —

16:52:34.062 GET 200 img 0 B 251 ms —

16:52:34.067 POST 200 fetch 1.2 KB 135 ms —

16:52:34.153 GET 200 img 0 B 168 ms —

16:52:34.159 GET 200 img 0 B 253 ms —

16:52:34.166 GET 200 img 0 B 253 ms —

16:52:34.170 GET 200 img 0 B 340 ms —

16:52:34.175 GET 200 img 74.1 KB 104 ms —

16:52:34.177 GET 200 img 70.4 KB 103 ms —

16:52:34.179 GET 200 img 58.3 KB 93 ms —

16:52:34.180 GET 200 img 39.9 KB 93 ms —

16:52:34.181 GET 200 img 0 B 329 ms —

16:52:34.181 GET 200 img 0 B 326 ms —

16:52:34.182 GET 200 img 0 B 336 ms —

16:52:34.183 GET 200 img 0 B 351 ms —

16:52:34.312 GET 200 script 44 B 733 ms —

http://psfh.link/MCKFiF4I

Domain graph

Hostnames

Connections

Network requests

Transaction #59

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://psfh.link/MCKFiF4I

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #59

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://psfh.link/MCKFiF4I

Domain graph

Network requests