WEBSITE ANALYSIS REPORT

http://magas.rest/Pbe3P4VY3lX6

03 Apr 2026 · 21:21:17.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

21:20:55.141 GET 200 document 22.7 KB 688 ms —

21:20:55.976 GET 200 stylesheet 158.9 KB 12 ms —

21:20:55.978 GET 200 stylesheet 98.4 KB 13 ms —

21:20:55.980 GET 200 stylesheet 7.0 KB 13 ms —

21:20:55.982 GET 200 stylesheet 310 B 12 ms —

21:20:55.983 GET 200 stylesheet 116.7 KB 11 ms —

21:20:55.984 GET 200 stylesheet 0 B 11 ms —

21:20:55.985 GET 200 script 457.2 KB 319 ms —

21:20:55.986 GET 200 script 163.1 KB 85 ms 2 alerts

21:20:55.987 GET 200 img 54.1 KB 8 ms —

21:20:55.989 GET 200 script 85.4 KB 12 ms —

21:20:55.991 GET 200 script 76.6 KB 12 ms —

21:20:55.993 GET 200 script 2.7 KB 12 ms —

21:20:55.997 GET 200 script 28.8 KB 8 ms —

21:20:56.079 GET 200 stylesheet 16.9 KB 230 ms —

21:20:56.080 GET 200 stylesheet 33.6 KB 334 ms —

21:20:56.338 GET 200 script 26.2 KB 7 ms 2 alerts

21:20:56.371 GET 200 font 150.6 KB 14 ms —

21:20:56.386 GET 200 font 26.6 KB 246 ms —

21:20:56.390 GET 200 font 26.6 KB 264 ms —

21:20:56.394 GET 200 font 103.1 KB 11 ms —

21:20:56.493 GET 302 script 29.0 KB 3 ms —

21:20:56.499 GET 200 fetch 1.9 KB 273 ms 1 alerts

21:20:56.506 GET 200 script 29.0 KB 6 ms —

21:20:56.672 GET 200 img 30.1 KB 10 ms —

21:20:56.815 POST 200 xhr 0 B 5 ms —

21:20:56.945 POST 204 beacon 0 B 214 ms 3 alerts

21:20:56.947 GET 200 script 55.3 KB 15 ms 2 alerts

21:20:56.949 GET 204 img 0 B 142 ms 1 alerts

21:20:56.991 GET 200 fetch 967 B 192 ms 1 alerts

Transaction #02

Request / response

URL

GET HTTPS

https://adexchangeclear.com/script/suurl5.php?r=11149066&cbur=0.8986419019542327&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=DownFile&cbpage=https%3A%2F%2Fmagas.rest%2FPbe3P4VY3lX6&cbref=&cbdescription=DownFile&cbkeywords=DownFile&cbcdn=acscdn.com&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1775251256987&srs=a9ba6e9b745dd14ee2ca02725692e035&atv=79.0&btp=0.01&pblcz=11149062

IP / ASN

172.67.223.87

AS13335 · CLOUDFLARENET

Requested by: https://magas.rest/Pbe3P4VY3lX6

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 03 Apr 2026 · 21:21:23.395 UTC
Last seen (UTC): 03 Apr 2026 · 21:21:23.395 UTC
Times seen: 1

Size: 967 B (967 bytes)
MD5: 5bcc02345741fb7bfa736ed70de25977
SHA1: a0aa18ad244cd39957610e23152a355c5757959c
SHA256: f5e3e19dd2efc1c2175f0a6a3411f5352f6534327e33b3dfa332a6b5f297e297

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AA:3C:D9:16:46:E3:FE:84:C5:73:1D:FB:D5:DA:00:22:92:46:A9:73
Valid from: Wed, 04 Feb 2026 02:59:45 GMT
Valid until: Tue, 05 May 2026 03:56:04 GMT

Technology fingerprints

Google Cloud CDN (CDN)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/suurl5.php?r=11149066&cbur=0.8986419019542327&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=DownFile&cbpage=https%3A%2F%2Fmagas.rest%2FPbe3P4VY3lX6&cbref=&cbdescription=DownFile&cbkeywords=DownFile&cbcdn=acscdn.com&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&ts=1775251256987&srs=a9ba6e9b745dd14ee2ca02725692e035&atv=79.0&btp=0.01&pblcz=11149062 HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://magas.rest/
Origin: https://magas.rest
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 OK
server: cloudflare
date: Fri, 03 Apr 2026 21:20:57 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
via: 1.1 google
priority: u=4,i=?0
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=KRzUAMcjbh9bSjzHDKj8hkjUJxzBR1mCF2wCaeHP8vA4QBmJf%2B06NqKntDSJOs628FYyXwNFJHyUBAH12aW4%2BQOPCS%2BHH5Gy04Zd8r1gc3X%2FFSs1kHtcHnHPvzdv83N2dgcd85Ln"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
cf-ray: 9e6b1ec43a200883-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

http://magas.rest/Pbe3P4VY3lX6

Domain graph

Hostnames

Connections