WEBSITE ANALYSIS REPORT

http://xyzyacineweb-org.panel001.com/?lang=ar&m=30705

04 Jul 2026 · 20:52:50.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:52:26.478 GET 200 document 0 B 0 ms —

20:52:27.023 GET No response document 0 B 0 ms —

20:52:27.032 GET 200 document 68.3 KB 219 ms —

20:52:27.592 GET 200 stylesheet 227.6 KB 43 ms —

20:52:27.596 GET 200 stylesheet 100.2 KB 30 ms —

20:52:27.598 GET 200 stylesheet 20.9 KB 88 ms —

20:52:27.601 GET 200 script 78.8 KB 42 ms —

20:52:27.736 GET 200 fetch 5.5 KB 1636 ms —

20:52:27.786 GET 200 font 33.0 KB 81 ms —

20:52:27.787 GET 200 font 33.0 KB 75 ms —

20:52:27.789 GET 200 font 33.0 KB 72 ms —

20:52:27.792 GET 200 font 152.8 KB 22 ms —

20:52:27.981 GET 403 img 239 B 49 ms —

20:52:28.843 GET 200 font 30.2 KB 18 ms —

20:52:28.847 GET 200 subdocument 5.0 KB 114 ms —

20:52:29.044 GET 200 script 721.9 KB 32 ms —

20:52:29.045 GET 200 script 29.7 KB 31 ms —

20:52:29.047 GET 200 script 203.3 KB 30 ms —

20:52:29.048 GET 200 script 163.5 KB 42 ms 2 alerts

20:52:29.050 GET 200 script 6 B 123 ms 2 alerts

20:52:29.388 GET 200 script 96.5 KB 29 ms 1 alerts

20:52:29.395 GET 200 script 67.5 KB 10 ms 2 alerts

20:52:29.413 GET 200 xhr 545 B 67 ms —

20:52:29.552 GET 200 xhr 399.9 KB 116 ms —

20:52:29.719 GET 200 xhr 381.3 KB 33 ms —

20:52:29.761 POST No response xhr 0 B 0 ms 1 alerts

20:52:29.777 GET 200 xhr 367.4 KB 32 ms —

20:52:29.922 POST 204 beacon 0 B 173 ms 3 alerts

20:52:29.923 GET 200 fetch 936 B 264 ms 3 alerts

Transaction #11

Request / response

URL

GET HTTPS

https://adexchangerapid.com/script/suurl5.php?r=11408834&cbur=0.8599581649605663&cbiframe=1&cbWidth=831&cbHeight=500&cbtitle=&cbpage=https%3A%2F%2Fblog.riyadahnews.com%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&ts=1783198349444&srs=476a3afdf3fedd4fa988c403a79b0575&atv=83.1-pa&btp=0.01

IP / ASN

104.21.35.134

AS13335 · CLOUDFLARENET

Requested by: https://a13.kora-plus.app/frame.php?ch=max2&p=12&token=bfb1cb74-1cbf-4491-b60b-e946deaa6736&kt=1783198348

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 04 Jul 2026 · 20:52:59.477 UTC
Last seen (UTC): 04 Jul 2026 · 20:52:59.477 UTC
Times seen: 1

Size: 936 B (936 bytes)
MD5: 6315fe5c7654bc780b9c5a4e888538e0
SHA1: e15f8431aba4f0fe9cfe3625f7ec80853ba770a8
SHA256: f62caf79204509b1e516efb796581c6188869f66bc38df8d98bdfc52ee6b130d

Certificate information

Issuer: Let's Encrypt · YE1
Subject: adexchangerapid.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 05:FA:95:2D:66:AE:32:6A:6D:E8:85:EA:35:1A:3A:15:CE:0E:B1:7D
Valid from: Fri, 26 Jun 2026 15:52:58 GMT
Valid until: Thu, 24 Sep 2026 15:52:57 GMT

Technology fingerprints

Google Cloud CDN (CDN)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/suurl5.php?r=11408834&cbur=0.8599581649605663&cbiframe=1&cbWidth=831&cbHeight=500&cbtitle=&cbpage=https%3A%2F%2Fblog.riyadahnews.com%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&ts=1783198349444&srs=476a3afdf3fedd4fa988c403a79b0575&atv=83.1-pa&btp=0.01 HTTP/1.1
Host: adexchangerapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://a13.kora-plus.app/
Origin: https://a13.kora-plus.app
Sec-GPC: 1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Connection: keep-alive
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Sat, 04 Jul 2026 20:52:30 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
content-encoding: gzip
via: 1.1 google
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=0bVZ0VZYUXCIjEagP0bbIRlYCAEX%2Fz9Wm%2BtPYpWkSgVmN9PlWasc3Ph2EJGz8XkJbPR5TBLUUwBViPIaNqjSZ9ws3W5TsKhS0lDLXf8P2dLyB%2Bdd9vCVRBm%2FLiCpsg%2B5Q9Aebqq%2F"}]}
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=4,i=?0
vary: accept-encoding
cf-ray: a16103972b967131-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

20:52:37.497 GET 200 xhr 406.5 KB 31 ms —

20:52:37.552 POST 200 fetch 331 B 6506 ms —

20:52:37.559 GET 200 fetch 524.0 KB 38 ms —

20:52:41.496 GET 200 fetch 559.4 KB 28 ms —

20:52:44.095 GET 101 websocket 0 B 626 ms —

20:52:44.997 GET 101 websocket 0 B 87 ms —

http://xyzyacineweb-org.panel001.com/?lang=ar&m=30705

Domain graph

Hostnames

Connections