WEBSITE ANALYSIS REPORT

http://triply.baby/b5OzdqPpGB8L

31 Mar 2026 · 06:50:52.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

06:50:29.237 GET 200 document 21.9 KB 328 ms —

06:50:29.720 GET 200 stylesheet 158.9 KB 659 ms —

06:50:29.722 GET 200 stylesheet 98.4 KB 650 ms —

06:50:29.724 GET 200 stylesheet 7.0 KB 508 ms —

06:50:29.725 GET 200 stylesheet 310 B 499 ms —

06:50:29.727 GET 200 stylesheet 116.7 KB 514 ms —

06:50:29.728 GET 200 stylesheet 0 B 480 ms —

06:50:29.731 GET 200 script 453.9 KB 311 ms —

06:50:29.732 GET 200 script 163.1 KB 38 ms 2 alerts

06:50:29.733 GET 200 img 54.9 KB 881 ms —

06:50:29.735 GET 200 script 85.4 KB 698 ms —

06:50:29.737 GET 200 script 76.6 KB 718 ms —

06:50:29.738 GET 200 script 2.7 KB 489 ms —

06:50:29.739 GET 200 script 28.8 KB 496 ms —

06:50:30.233 GET 200 stylesheet 16.9 KB 192 ms —

06:50:30.236 GET 200 stylesheet 33.6 KB 176 ms —

06:50:30.580 GET 200 script 26.2 KB 11 ms 2 alerts

06:50:30.594 GET 200 font 150.6 KB 734 ms —

06:50:30.609 GET 200 font 26.6 KB 159 ms —

06:50:30.611 GET 200 font 26.6 KB 253 ms —

06:50:30.618 GET 200 font 103.1 KB 809 ms —

06:50:30.690 GET 200 fetch 1.9 KB 233 ms 1 alerts

06:50:30.994 POST 204 beacon 0 B 207 ms 3 alerts

06:50:30.995 GET 200 script 55.3 KB 14 ms 2 alerts

06:50:30.998 GET 204 img 0 B 143 ms 1 alerts

Transaction #07

Request / response

URL

GET HTTPS

https://adexchangeclear.com/script/i.php?t=1&c=24096236&stamat=m%257C%252C%252CAhMWY3Y_oGU3BJ-GH0dEdHP3xP.852%252CGbFKnPd11OjqtAJjUr9Ghnc10MFPqAtv4I0iUHo7U_BguTCC2_-0pyjUSNmuD3K8UirGV_yLOSC5LlcqdNa6kpxPGdpkoJn26JJqeQXHdV6n-VGA50CtzJUh0G3az6IjdCITUhwV6RFrPuzBSneGaO5AfKYRIbypNOPATMRd3lCDVItkFqBfhhHnB_ySBbd6_ShbrR836t-JCizqTJe_QBk_5DHcd0TmWuV6EsWZ2_zPsxIziwHP0XGUuTpvHu1nBtGcyU9nlLGA-AAlm39i1s6ox7gcuDiXy1HKKTXX_BoCOoQ5NBXh3PFbBBUczLzoUkWrbBcPszY_5rxiK_3vp1q9h_V48FvymaNqAXHG0hfzn9VkA2IpoVnGiwuoFSDmc5i-RTO6q-AkrpUm2vHO1mYv4L9Gbc0_iOxSUAZoe6QZhoKfjjVhww44KAJ5R93DR7-AzDwU5TCwMnkVXhZVxKDa7jFqjOablE3bBJYv6OIsTsWvqpBTyxHff7h7REpUJ1hziTkmO4Z3Gxt1imwi4h3pwm-BLgCABX83uYY_xATQZYO8jCBraMeNqwZThL1bYonFXQAqikaYkwR0IgNwFYb7KUxPkn-gDViPTvJ-olf3z9pD2hCNAg1EvUriSI3Sj_7PMhth2e08Zoo-o2tUIw%252C%252C

IP / ASN

172.67.223.87

AS13335 · CLOUDFLARENET

Requested by: https://triply.baby/b5OzdqPpGB8L

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 16:44:04.869 UTC
Times seen: 19285755

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AA:3C:D9:16:46:E3:FE:84:C5:73:1D:FB:D5:DA:00:22:92:46:A9:73
Valid from: Wed, 04 Feb 2026 02:59:45 GMT
Valid until: Tue, 05 May 2026 03:56:04 GMT

Technology fingerprints

Cloudflare (CDN)
Google Cloud CDN (CDN)
Google Cloud (IaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/i.php?t=1&c=24096236&stamat=m%257C%252C%252CAhMWY3Y_oGU3BJ-GH0dEdHP3xP.852%252CGbFKnPd11OjqtAJjUr9Ghnc10MFPqAtv4I0iUHo7U_BguTCC2_-0pyjUSNmuD3K8UirGV_yLOSC5LlcqdNa6kpxPGdpkoJn26JJqeQXHdV6n-VGA50CtzJUh0G3az6IjdCITUhwV6RFrPuzBSneGaO5AfKYRIbypNOPATMRd3lCDVItkFqBfhhHnB_ySBbd6_ShbrR836t-JCizqTJe_QBk_5DHcd0TmWuV6EsWZ2_zPsxIziwHP0XGUuTpvHu1nBtGcyU9nlLGA-AAlm39i1s6ox7gcuDiXy1HKKTXX_BoCOoQ5NBXh3PFbBBUczLzoUkWrbBcPszY_5rxiK_3vp1q9h_V48FvymaNqAXHG0hfzn9VkA2IpoVnGiwuoFSDmc5i-RTO6q-AkrpUm2vHO1mYv4L9Gbc0_iOxSUAZoe6QZhoKfjjVhww44KAJ5R93DR7-AzDwU5TCwMnkVXhZVxKDa7jFqjOablE3bBJYv6OIsTsWvqpBTyxHff7h7REpUJ1hziTkmO4Z3Gxt1imwi4h3pwm-BLgCABX83uYY_xATQZYO8jCBraMeNqwZThL1bYonFXQAqikaYkwR0IgNwFYb7KUxPkn-gDViPTvJ-olf3z9pD2hCNAg1EvUriSI3Sj_7PMhth2e08Zoo-o2tUIw%252C%252C HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://triply.baby/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 204 No Content
server: cloudflare
date: Tue, 31 Mar 2026 06:50:31 GMT
access-control-allow-origin: *
via: 1.1 google
cf-cache-status: DYNAMIC
priority: u=4,i=?0
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=ZTBBzlF2P10h3JOVx2dtpsM0Uy4UDYgSlHdLumUXrZ4nNbATdrKhvGSZW6pWeJROcbPZMcV00ZV3QDjjHcAvoLeFo6OpqwRGsegD8dEVweJoi%2FkOcIUdusLLjt67YkZbG6pLG8Ja"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: 9e4d6b97bc2c5696-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

06:50:31.072 GET 200 fetch 1.0 KB 214 ms 1 alerts

06:50:31.428 GET 200 img 30.3 KB 369 ms —

http://triply.baby/b5OzdqPpGB8L

Domain graph

Hostnames

Connections