WEBSITE ANALYSIS REPORT

http://ams.re3r.com/impcs/BQ_PgLYRvNBwBXDIFNWSVuoGAnpgFFMEyye0QybZPqTgUl5iUWf1dTV3Dx3FcIKP1KmBltepeDfB0rc7WY5DcK3H2LEP0XVebQ2yH_CaycJvyYG2VLOHVUi3_lmAoOuNbGMNd7x9tXtGcXaEmRT9y5jSqkgGItk0OFRFJb9XyCXPY5U7sUcFwp1XGmtYcCBX2uuBb2oLVZrglpLRo28B0A2ZravbT7wKgIGVgANK0YymYzFt0NNcpR3BtclozQr35EcpSUWLfvVv--0tcO_n21C2V3276phFfGoW-QvPWaFs7tQi27wUmW6EQLAv4tN7qz7QhV2esTigR7BIj3WDb2yw3lYYVcGdjvGgalPN35uiWXaUIagMlyJtwLnQC31tLXSfF9UYko8eU5PJUKfR1OyG_M1YXKtrrjThLFG4OlRtPp-V9cVap_r4CT6fhlU7ku7Ca0eU6yFURoWA-CWWJvRf_TCmiafB

14 Jul 2026 · 16:47:08.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

1osb.com2 captured requests
99997.ase.aidcgroup.net1 captured requests
acs.aliexpress.com5 captured requests
ae-pic-a1.aliexpress-media.com5 captured requests
ams.re3r.com1 captured requests
aplus.aliexpress.com14 captured requests
ase.aidcgroup.net2 captured requests
assets.alicdn.com6 captured requests
assets.aliexpress-media.com21 captured requests
dida-bottom.aliexpress-media.com1 captured requests
epss.alibaba-inc.com3 captured requests
fourier.aliexpress.com2 captured requests
o.alicdn.com2 captured requests
rcdn-web.com1 captured requests
recom-acs.aliexpress.com2 captured requests
s.click.aliexpress.com3 captured requests
umdc-global.aliexpress.com1 captured requests
www.aliexpress.com2 captured requests

Connections

1osb.com → s.click.aliexpress.comRedirects to1 captured connections
ams.re3r.com → rcdn-web.comRedirects to1 captured connections
s.click.aliexpress.com → www.aliexpress.comRedirects to1 captured connections
www.aliexpress.com → 99997.ase.aidcgroup.netCalls1 captured connections
www.aliexpress.com → acs.aliexpress.comLoads from5 captured connections
www.aliexpress.com → ae-pic-a1.aliexpress-media.comLoads from5 captured connections
www.aliexpress.com → aplus.aliexpress.comCalls12 captured connections
www.aliexpress.com → aplus.aliexpress.comLoads from2 captured connections
www.aliexpress.com → ase.aidcgroup.netCalls2 captured connections
www.aliexpress.com → assets.alicdn.comCalls1 captured connections
www.aliexpress.com → assets.alicdn.comLoads from5 captured connections
www.aliexpress.com → assets.aliexpress-media.comLoads from21 captured connections
www.aliexpress.com → dida-bottom.aliexpress-media.comCalls1 captured connections
www.aliexpress.com → epss.alibaba-inc.comLoads from3 captured connections
www.aliexpress.com → fourier.aliexpress.comLoads from2 captured connections
www.aliexpress.com → o.alicdn.comCalls1 captured connections
www.aliexpress.com → o.alicdn.comLoads from1 captured connections
www.aliexpress.com → recom-acs.aliexpress.comCalls2 captured connections
www.aliexpress.com → s.click.aliexpress.comLoads from2 captured connections
www.aliexpress.com → umdc-global.aliexpress.comCalls1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:46:39.340 GET 302 document 0 B 0 ms —

16:46:39.416 GET 200 document 0 B 0 ms 1 alerts

Transaction #60

Request / response

URL

GET HTTPS

https://rcdn-web.com/t/r.html?t=https%3A%2F%2F1osb.com%2Fsmart.php%3Flink%3D11038474%26var%3Dremoby3_14096577_600352%26ymid%3DBYIKGId2PLKIBpd9ajBnRafFphdShNnmoTkxXZcGhQCrFtARSO2yIkOhONFesWLUAhC%26var_3%3Dglks%3A54862750ceeb7d8869df22ade5da49fa%26fa%3D1

IP / ASN

45.133.44.1

AS39572 · DataWeb Global Group B.V.

Requested by: Not recorded

Resource information

File type: Not recorded
MIME type: Not recorded
First seen (UTC): Not recorded
Last seen (UTC): 23 Oct 2026 · 17:29:49.637 UTC
Times seen: 19312417

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Certificate and TLS information not recorded.

Technology fingerprints

Nginx (Web servers, Reverse proxies)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /t/r.html?t=https%3A%2F%2F1osb.com%2Fsmart.php%3Flink%3D11038474%26var%3Dremoby3_14096577_600352%26ymid%3DBYIKGId2PLKIBpd9ajBnRafFphdShNnmoTkxXZcGhQCrFtARSO2yIkOhONFesWLUAhC%26var_3%3Dglks%3A54862750ceeb7d8869df22ade5da49fa%26fa%3D1 HTTP/1.1
Host: rcdn-web.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
date: Tue, 14 Jul 2026 16:46:39 GMT
content-type: text/html; charset=utf-8
content-length: 3401
server: nginx
last-modified: Mon, 16 Mar 2026 16:13:54 GMT
etag: "b826ec78b04b2e78fcd53fc22478c7e7"
expires: Thu, 13 Aug 2026 16:46:39 GMT
cache-control: max-age=2592000
vary: Accept-Encoding
x-cdn-host-id: AH0543
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2

16:46:39.753 GET 200 document 40.3 KB 160 ms —

16:46:40.412 POST 302 document 0 B 42 ms —

16:46:40.459 GET 200 document 244 B 106 ms —

16:46:40.703 GET 200 document 34.4 KB 21 ms —

16:46:40.761 GET 200 stylesheet 14.2 KB 37 ms —

16:46:40.762 GET 200 script 190.1 KB 219 ms —

16:46:40.764 GET 200 stylesheet 133.7 KB 22 ms —

16:46:40.765 GET 200 script 354.9 KB 40 ms —

16:46:40.766 GET 200 script 10.0 KB 32 ms —

16:46:40.768 GET 200 stylesheet 14.7 KB 19 ms —

16:46:40.770 GET 200 script 153.6 KB 26 ms —

16:46:40.771 GET 200 script 106.3 KB 27 ms —

16:46:40.773 GET 200 script 15.0 KB 13 ms —

16:46:40.893 GET 200 font 85.8 KB 12 ms —

16:46:40.896 GET 200 font 85.8 KB 12 ms —

16:46:40.900 GET 200 script 7.0 KB 8 ms —

16:46:40.901 GET 200 script 6.1 KB 16 ms —

16:46:40.907 GET 200 script 37.5 KB 3 ms —

16:46:40.911 GET 200 script 355.5 KB 6 ms —

16:46:40.931 GET 200 script 313.0 KB 26 ms —

16:46:40.932 POST 200 xhr 122 B 117 ms —

16:46:40.933 GET 200 script 36.5 KB 7 ms —

16:46:41.042 GET 200 img 41.9 KB 52 ms —

16:46:41.045 GET 200 img 0 B 0 ms —

16:46:41.128 GET 200 fetch 0 B 141 ms —

16:46:41.174 GET 200 img 0 B 1052 ms —

16:46:41.393 GET No response fetch 0 B 0 ms —

16:46:41.411 GET 200 img 0 B 0 ms —

16:46:41.413 GET 200 img 1.3 KB 22 ms —

16:46:41.414 GET 200 img 8.2 KB 22 ms —

16:46:41.416 GET 200 img 626 B 23 ms —

16:46:41.417 GET 200 img 75.6 KB 43 ms —

16:46:41.469 GET 200 font 86.7 KB 22 ms —

16:46:41.528 GET 200 script 174 B 121 ms —

16:46:41.558 GET 200 script 15.5 KB 3 ms —

16:46:41.560 GET 200 script 61.6 KB 4 ms —

16:46:41.593 GET 200 script 132.6 KB 4 ms —

16:46:41.602 GET 200 script 23.5 KB 4 ms —

16:46:41.613 GET No response xhr 0 B 0 ms —

16:46:41.615 GET 200 script 1.2 KB 3 ms —

16:46:41.654 GET 200 font 85.8 KB 7 ms —

16:46:41.656 GET 200 font 86.7 KB 7 ms —

16:46:41.730 GET 200 script 40.1 KB 29 ms —

16:46:41.754 GET 200 fetch 117.8 KB 8 ms —

16:46:41.777 GET 200 font 85.8 KB 9 ms —

16:46:41.814 GET 200 script 91 B 1052 ms —

16:46:41.864 GET 200 script 163 B 25 ms —

16:46:41.912 POST 200 xhr 1.1 KB 34 ms —

Domain graph

Hostnames

Connections

Network requests

Transaction #60

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #60

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Domain graph

Network requests