WEBSITE ANALYSIS REPORT

http://triply.baby/b5OzdqPpGB8L

31 Mar 2026 · 06:50:52.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:50:29.237 GET 200 document 21.9 KB 328 ms —

06:50:29.720 GET 200 stylesheet 158.9 KB 659 ms —

06:50:29.722 GET 200 stylesheet 98.4 KB 650 ms —

06:50:29.724 GET 200 stylesheet 7.0 KB 508 ms —

06:50:29.725 GET 200 stylesheet 310 B 499 ms —

06:50:29.727 GET 200 stylesheet 116.7 KB 514 ms —

06:50:29.728 GET 200 stylesheet 0 B 480 ms —

06:50:29.731 GET 200 script 453.9 KB 311 ms —

06:50:29.732 GET 200 script 163.1 KB 38 ms 2 alerts

06:50:29.733 GET 200 img 54.9 KB 881 ms —

06:50:29.735 GET 200 script 85.4 KB 698 ms —

06:50:29.737 GET 200 script 76.6 KB 718 ms —

06:50:29.738 GET 200 script 2.7 KB 489 ms —

06:50:29.739 GET 200 script 28.8 KB 496 ms —

06:50:30.233 GET 200 stylesheet 16.9 KB 192 ms —

06:50:30.236 GET 200 stylesheet 33.6 KB 176 ms —

06:50:30.580 GET 200 script 26.2 KB 11 ms 2 alerts

06:50:30.594 GET 200 font 150.6 KB 734 ms —

06:50:30.609 GET 200 font 26.6 KB 159 ms —

06:50:30.611 GET 200 font 26.6 KB 253 ms —

06:50:30.618 GET 200 font 103.1 KB 809 ms —

06:50:30.690 GET 200 fetch 1.9 KB 233 ms 1 alerts

Transaction #06

Request / response

URL

GET HTTPS

https://adexchangeclear.com/script/banner.php?r=11139338&cbpage=https%3A%2F%2Ftriply.baby%2Fb5OzdqPpGB8L&cbref=&cbdescription=FileDown&cbkeywords=FileDown&cbtitle=FileDown&srs=981580ff3c5d7945e9b9a25897c01c35&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&atv=79.0

IP / ASN

172.67.223.87

AS13335 · CLOUDFLARENET

Requested by: https://triply.baby/b5OzdqPpGB8L

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 31 Mar 2026 · 06:50:54.904 UTC
Last seen (UTC): 31 Mar 2026 · 06:50:54.904 UTC
Times seen: 1

Size: 1.9 KB (1976 bytes)
MD5: bcb22811fb4f623c3a9b04489f998548
SHA1: d46f63faac828210ab9108a797d1e39cdc461a5a
SHA256: 8a9a3a8b4d362561fbbfeb57c4aa42d19f200ab993efe550c2191a9dee5f51b6

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AA:3C:D9:16:46:E3:FE:84:C5:73:1D:FB:D5:DA:00:22:92:46:A9:73
Valid from: Wed, 04 Feb 2026 02:59:45 GMT
Valid until: Tue, 05 May 2026 03:56:04 GMT

Technology fingerprints

Google Cloud CDN (CDN)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/banner.php?r=11139338&cbpage=https%3A%2F%2Ftriply.baby%2Fb5OzdqPpGB8L&cbref=&cbdescription=FileDown&cbkeywords=FileDown&cbtitle=FileDown&srs=981580ff3c5d7945e9b9a25897c01c35&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&atv=79.0 HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://triply.baby/
Origin: https://triply.baby
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Tue, 31 Mar 2026 06:50:30 GMT
content-type: application/json; charset=utf-8
server: cloudflare
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=2sOuf7sx1Wb%2ByMOE5%2Bp5RIT57VZKUJWUSlJFEMhNznZrt5Ncn4tu5GaF0xejsnn1Fv3FPUJsnpcHo9ZZ0cpLZUsk6I6hpw%2FfBtQ9W%2BgMKGjt7YI%2F9P3YV2b6qlLsCulu1nwNBc73"}]}
cf-ray: 9e4d6b95ffc1569d-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

06:50:30.994 POST 204 beacon 0 B 207 ms 3 alerts

06:50:30.995 GET 200 script 55.3 KB 14 ms 2 alerts

06:50:30.998 GET 204 img 0 B 143 ms 1 alerts

06:50:31.072 GET 200 fetch 1.0 KB 214 ms 1 alerts

06:50:31.428 GET 200 img 30.3 KB 369 ms —

http://triply.baby/b5OzdqPpGB8L

Domain graph

Hostnames

Connections