WEBSITE ANALYSIS REPORT

http://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

18 Oct 2026 · 17:26:16.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

abscloud.org2 captured requests
araplhn.org1 captured requests
bauval.org20 captured requests
cdn.holdbitter.com13 captured requests
cdn.jsdelivr.net1 captured requests
cdn.show-creative1.com1 captured requests
cdn.show-sb.com1 captured requests
cdn.storageimagedisplay.com1 captured requests
flushpersist.com3 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com3 captured requests
pl28758395.profitablecpmratenetwork.com1 captured requests
pl28767403.profitablecpmratenetwork.com1 captured requests
portalfluently.com2 captured requests
protrafficinspector.com1 captured requests
static.nresystems.com2 captured requests
www.google.no1 captured requests
www.googletagmanager.com1 captured requests
www.highperformanceformat.com1 captured requests
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org33 captured requests
zoologyfibre.com11 captured requests

Connections

www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → abscloud.orgCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → abscloud.orgLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → araplhn.orgCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → bauval.orgCalls7 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → bauval.orgLoads from13 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.holdbitter.comCalls6 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.holdbitter.comLoads from7 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.jsdelivr.netLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.show-creative1.comCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.show-sb.comCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → cdn.storageimagedisplay.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → flushpersist.comLoads from3 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → fonts.googleapis.comLoads from2 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → fonts.gstatic.comLoads from3 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → pl28758395.profitablecpmratenetwork.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → pl28767403.profitablecpmratenetwork.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → portalfluently.comLoads from2 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → protrafficinspector.comCalls1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → static.nresystems.comLoads from2 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → www.google.noLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → www.googletagmanager.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → www.highperformanceformat.comLoads from1 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → zoologyfibre.comCalls7 captured connections
www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org → zoologyfibre.comLoads from4 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:25:27.117 GET 200 document 12.7 KB 623 ms 2 alerts

17:25:28.194 GET 200 script 77.6 KB 271 ms 2 alerts

17:25:28.197 GET 200 script 53.6 KB 610 ms 2 alerts

17:25:28.198 GET 200 script 75.0 KB 535 ms 2 alerts

17:25:28.200 GET 200 script 595.7 KB 151 ms —

17:25:28.202 GET 200 fetch 524.4 KB 382 ms 2 alerts

17:25:28.204 GET 200 script 759 B 195 ms 2 alerts

17:25:28.205 GET 200 script 2.01 MB 102 ms 2 alerts

17:25:28.207 GET 200 stylesheet 230.4 KB 98 ms 2 alerts

17:25:28.208 GET 200 stylesheet 787 B 191 ms 2 alerts

17:25:28.210 GET 200 script 2.4 KB 330 ms 2 alerts

Transaction #28

Request / response

URL

GET HTTPS

https://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/js/education-proxy-paths.js?v=20260512f

IP / ASN

152.53.83.13

AS214996 · netcup GmbH

Requested by: https://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

Resource information

File type: JavaScript source, ASCII text
MIME type: application/javascript; charset=utf-8
First seen (UTC): 16 May 2026 · 02:18:32.716 UTC
Last seen (UTC): 18 Oct 2026 · 17:26:29.508 UTC
Times seen: 8

Size: 2.4 KB (2455 bytes)
MD5: b412e47cd700abe4ab349b0ba1e02b8b
SHA1: 348635eeaa0173b3c6decbed70e9f83deee42174
SHA256: ed51a06e3e589db043e0f2fabd842da7d6599bf27d543501a8e55536765cad44

Certificate information

Issuer: Let's Encrypt · YE2
Subject: www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 7B:E2:B6:86:D3:E2:BE:28:6D:FD:71:CC:C9:D1:D3:C4:DF:6C:3A:97
Valid from: Sun, 18 Oct 2026 16:18:10 GMT
Valid until: Sat, 16 Jan 2027 16:18:09 GMT

Technology fingerprints

HSTS (Security)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /js/education-proxy-paths.js?v=20260512f HTTP/1.1
Host: www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000
cache-control: public, max-age=31536000, immutable, public, max-age=0
content-encoding: gzip
content-security-policy: default-src * data: blob: filesystem: mediastream:; script-src * 'unsafe-inline' 'unsafe-eval' data: blob: filesystem: mediastream:; style-src * 'unsafe-inline' data: blob: filesystem:; img-src * data: blob: filesystem:; font-src * data: blob: filesystem:; connect-src * data: blob: filesystem: ws: wss:; media-src * data: blob: filesystem:; frame-src * data: blob: filesystem:; child-src * data: blob: filesystem:; worker-src * data: blob: filesystem:; object-src * data: blob: filesystem:; manifest-src * data: blob: filesystem:; base-uri *; form-action *; frame-ancestors *
content-type: application/javascript; charset=utf-8
cross-origin-resource-policy: same-origin
date: Sun, 18 Oct 2026 17:25:28 GMT
etag: W/"997-19e95a37ef1"
last-modified: Fri, 05 Jun 2026 02:36:20 GMT
origin-agent-cluster: ?1
permissions-policy: geolocation=(), microphone=(), camera=()
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubDomains
vary: accept-encoding
via: 1.1 Caddy
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: DENY
x-permitted-cross-domain-policies: none
x-xss-protection: 1; mode=block
X-Firefox-Spdy: h2

17:25:28.212 GET 200 script 176.1 KB 373 ms 2 alerts

17:25:28.213 GET 200 script 8.5 KB 279 ms 2 alerts

17:25:28.214 GET 200 script 213.4 KB 50 ms —

17:25:28.216 GET 200 script 2.4 KB 369 ms 2 alerts

17:25:28.217 GET 200 script 4.7 KB 368 ms 2 alerts

17:25:28.218 GET 200 script 5.2 KB 366 ms 2 alerts

17:25:28.220 GET 200 script 2.8 KB 365 ms 2 alerts

17:25:28.221 GET 200 script 15.6 KB 364 ms 2 alerts

17:25:28.222 GET 200 script 6.0 KB 363 ms 2 alerts

17:25:28.224 GET 200 script 30.7 KB 362 ms 2 alerts

17:25:28.225 GET 200 script 3.9 KB 361 ms 2 alerts

17:25:28.226 GET 200 script 243 B 358 ms 2 alerts

17:25:28.227 GET 200 script 2.1 KB 358 ms 2 alerts

17:25:28.228 GET 200 script 1.4 KB 357 ms 2 alerts

17:25:28.229 GET 200 script 1.9 KB 357 ms 2 alerts

17:25:28.230 GET 200 script 37.3 KB 355 ms 2 alerts

17:25:28.235 GET 200 img 86.8 KB 351 ms 2 alerts

17:25:28.505 GET 200 script 37.1 KB 114 ms 1 alerts

17:25:28.507 GET 200 xhr 40 B 146 ms —

17:25:28.822 GET 307 xhr 0 B 112 ms 2 alerts

17:25:28.826 GET 200 script 90.8 KB 3281 ms —

17:25:28.827 GET 200 script 87.4 KB 100 ms —

17:25:28.830 GET 200 script 37.1 KB 24 ms 1 alerts

17:25:28.854 GET 200 fetch 1.6 KB 96 ms 2 alerts

17:25:28.856 GET 200 fetch 376 B 93 ms 2 alerts

17:25:28.873 GET 200 font 309.0 KB 104 ms 2 alerts

17:25:28.974 GET 200 xhr 4.0 KB 73 ms 2 alerts

17:25:28.990 GET 200 script 39.2 KB 46 ms —

17:25:28.994 GET 200 img 0 B 0 ms —

17:25:29.037 GET 200 img 42 B 87 ms —

17:25:29.071 GET 200 xhr 0 B 77 ms —

17:25:29.091 GET 200 lazy-img 9.7 KB 96 ms 2 alerts

17:25:29.092 GET 200 lazy-img 2.8 KB 96 ms 2 alerts

17:25:29.095 GET 200 lazy-img 2.0 KB 100 ms 2 alerts

17:25:29.096 GET 200 lazy-img 25.0 KB 104 ms 2 alerts

17:25:29.097 GET 200 lazy-img 9.8 KB 103 ms 2 alerts

17:25:29.116 GET 200 img 23.0 KB 126 ms —

17:25:29.118 GET 200 img 0 B 0 ms 2 alerts

17:25:29.310 GET 200 img 86.8 KB 98 ms 2 alerts

http://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

Domain graph

Hostnames

Connections

Network requests

Transaction #28

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #28

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://www.www.jwgxuend.eu.whm.ynn.educations.mytunnel.org/

Domain graph

Network requests