WEBSITE ANALYSIS REPORT

http://zpaste.net/p/vcd0a

24 Oct 2025 · 17:36:18.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

4.adsco.re2 captured requests
6.adsco.re2 captured requests
acscdn.com2 captured requests
ad.vidoomy.com8 captured requests
adexchangeclear.com2 captured requests
ads.vidoomy.com1 captured requests
adsco.re1 captured requests
c.adsco.re1 captured requests
cdn4ads.com1 captured requests
d.vidoomy.com9 captured requests
fonts.gstatic.com1 captured requests
h8hwx4z8ip28.l4.adsco.re1 captured requests
h8hwx4z8ip28.n4.adsco.re1 captured requests
h8hwx4z8ip28.s4.adsco.re1 captured requests
onetag-sys.com8 captured requests
usrpubtrk.com1 captured requests
vpaid.vidoomy.com2 captured requests
www.cdn4ads.com1 captured requests
www.google.com4 captured requests
www.googletagmanager.com2 captured requests
www.gstatic.com7 captured requests
xa.workcahoots.com1 captured requests
zpaste.net13 captured requests
zshorte.net1 captured requests

Connections

www.google.com → fonts.gstatic.comLoads from1 captured connections
www.google.com → www.gstatic.comLoads from6 captured connections
zpaste.net → 4.adsco.reCalls2 captured connections
zpaste.net → 6.adsco.reCalls2 captured connections
zpaste.net → acscdn.comLoads from2 captured connections
zpaste.net → ad.vidoomy.comCalls8 captured connections
zpaste.net → adexchangeclear.comCalls2 captured connections
zpaste.net → ads.vidoomy.comLoads from1 captured connections
zpaste.net → adsco.reCalls1 captured connections
zpaste.net → c.adsco.reEmbeds1 captured connections
zpaste.net → cdn4ads.comLoads from1 captured connections
zpaste.net → d.vidoomy.comCalls9 captured connections
zpaste.net → h8hwx4z8ip28.l4.adsco.reCalls1 captured connections
zpaste.net → h8hwx4z8ip28.n4.adsco.reCalls1 captured connections
zpaste.net → h8hwx4z8ip28.s4.adsco.reCalls1 captured connections
zpaste.net → onetag-sys.comCalls7 captured connections
zpaste.net → onetag-sys.comLoads from1 captured connections
zpaste.net → usrpubtrk.comCalls1 captured connections
zpaste.net → vpaid.vidoomy.comLoads from2 captured connections
zpaste.net → www.cdn4ads.comLoads from1 captured connections
zpaste.net → www.google.comEmbeds2 captured connections
zpaste.net → www.google.comLoads from1 captured connections
zpaste.net → www.googletagmanager.comLoads from2 captured connections
zpaste.net → www.gstatic.comLoads from1 captured connections
zpaste.net → xa.workcahoots.comLoads from1 captured connections
zpaste.net → zshorte.netLoads from1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

17:35:54.064 GET 200 document 23.7 KB 374 ms —

17:35:54.586 GET 200 stylesheet 187.2 KB 28 ms —

17:35:54.588 GET 200 stylesheet 32.4 KB 19 ms —

17:35:54.589 GET 200 stylesheet 12.5 KB 19 ms —

17:35:54.591 GET 200 script 131.9 KB 27 ms —

17:35:54.593 GET 200 script 59.7 KB 21 ms —

17:35:54.594 GET 200 script 84.9 KB 21 ms —

17:35:54.596 GET 200 script 10.5 KB 13 ms —

17:35:54.597 GET 200 script 1.3 KB 9 ms —

17:35:54.598 GET 200 script 306.9 KB 330 ms —

17:35:54.599 GET 200 script 4.5 KB 496 ms —

17:35:54.600 GET 200 script 57.5 KB 75 ms 1 alerts

17:35:54.601 GET 200 img 22.2 KB 16 ms —

17:35:54.604 GET 200 script 1017 B 380 ms —

17:35:54.605 GET 200 script 5 B 227 ms 5 alerts

17:35:54.605 GET 200 script 2.4 KB 67 ms —

17:35:54.930 GET 200 script 40.9 KB 80 ms —

17:35:54.933 GET 200 img 23.0 KB 24 ms —

17:35:54.954 GET 200 script 125.0 KB 14 ms 1 alerts

17:35:55.000 POST 204 beacon 0 B 218 ms 3 alerts

17:35:55.003 GET 200 script 368.3 KB 90 ms —

17:35:55.041 GET 200 fetch 90 B 226 ms 1 alerts

Transaction #48

Request / response

URL

GET HTTPS

https://adexchangeclear.com/video/slider.php?r=9919634&atv=70.0

IP / ASN

104.21.78.155

AS13335 · CLOUDFLARENET

Requested by: https://zpaste.net/p/vcd0a

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 08 May 2025 · 10:15:15.625 UTC
Last seen (UTC): 28 Jan 2026 · 02:27:55.923 UTC
Times seen: 319

Size: 90 B (90 bytes)
MD5: 8325b264a2ddb06e96163197b8d952c3
SHA1: 39dfa9af99618d3a20bae340f125b61c364cfaec
SHA256: 0834ef48aa487045ac9a45ffa4bb545bac47c4dc033fc52df48d96cc69ef9d00

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 7C:B6:62:0F:43:12:2D:86:DD:92:D1:44:95:36:24:C7:2F:BA:B0:B6
Valid from: Wed, 08 Oct 2025 20:14:35 GMT
Valid until: Tue, 06 Jan 2026 21:12:18 GMT

Technology fingerprints

Google Cloud (IaaS)
Cloudflare (CDN)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /video/slider.php?r=9919634&atv=70.0 HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://zpaste.net/
Origin: https://zpaste.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Fri, 24 Oct 2025 17:35:55 GMT
content-type: application/json; charset=utf-8
server: cloudflare
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=iXAcfFLmUwC2vh9mC%2BSSyEfUEJg67%2BrybUeJGlWNb2EopjCHp6cH0f9OL%2BS7NfvIO2uz0%2FPzG2PXUT84ZHYrVOQJQV%2BiHOWQT0f9gnqzVzXmi38%3D"}]}
cf-ray: 993b3bc13a9a1525-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

17:35:55.250 GET 200 script 806.2 KB 191 ms —

17:35:55.254 GET 200 img 15.1 KB 112 ms —

17:35:55.256 GET 200 img 244.5 KB 11 ms —

17:35:56.153 GET 200 xhr 45 B 669 ms —

17:35:56.155 GET 200 xhr 45 B 673 ms —

17:35:56.157 GET 200 xhr 45 B 77 ms —

17:35:56.158 GET 200 xhr 45 B 79 ms —

17:35:56.159 GET 200 xhr 0 B 283 ms —

17:35:56.160 GET 200 xhr 0 B 851 ms —

17:35:56.161 GET No response xhr 0 B 347 ms —

17:35:56.261 GET 200 subdocument 77.0 KB 69 ms —

17:35:56.294 GET 200 subdocument 77.1 KB 14 ms —

17:35:56.532 GET 200 stylesheet 81.0 KB 59 ms —

17:35:56.534 GET 200 script 806.2 KB 111 ms —

17:35:56.755 POST 200 xhr 1.2 KB 699 ms —

17:35:56.943 GET 200 font 15.0 KB 195 ms —

17:35:56.965 GET 200 script 102 B 34 ms —

17:35:57.030 GET 200 script 806.2 KB 51 ms —

17:35:57.098 GET 200 img 2.2 KB 23 ms —

17:35:57.282 GET 200 script 44 B 712 ms —

17:35:57.832 GET 200 subdocument 7.4 KB 34 ms —

17:35:57.886 GET 200 stylesheet 81.0 KB 23 ms —

17:35:57.888 GET 200 script 806.2 KB 39 ms —

17:35:57.931 GET 200 script 515.2 KB 158 ms —

17:35:58.448 GET 200 script 557.1 KB 8 ms —

17:35:58.477 OPTIONS 200 xhr 0 B 396 ms —

17:35:58.710 GET 200 xhr 7.3 KB 806 ms —

17:36:00.041 GET 204 fetch 0 B 695 ms —

http://zpaste.net/p/vcd0a

Domain graph

Hostnames

Connections

Network requests

Transaction #48

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://zpaste.net/p/vcd0a

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #48

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://zpaste.net/p/vcd0a

Domain graph

Network requests