WEBSITE ANALYSIS REPORT

http://la18hd.su/vivo/canal.php?stream=max1

04 Sep 2026 · 20:11:44.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

20:11:14.549 GET 200 document 3.2 KB 196 ms —

20:11:15.126 GET 200 script 616.1 KB 278 ms —

20:11:15.128 GET 200 script 203.3 KB 47 ms —

20:11:15.130 GET 200 script 599.5 KB 239 ms —

20:11:15.631 GET 200 img 20.7 KB 91 ms —

20:11:15.771 GET 404 xhr 10 B 176 ms 2 alerts

20:11:15.867 POST 204 beacon 0 B 3279 ms 3 alerts

20:11:15.869 GET 200 fetch 1.0 KB 292 ms 1 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://adexchangeclear.com/script/suurl5.php?r=11410390&cbur=0.7517693698920092&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fla18hd.su%2Fvivo%2Fcanal.php%3Fstream%3Dmax1&cbref=&cbdescription=&cbkeywords=&cbcdn=ikikigxywqcrf.site&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&ts=1788552675544&srs=1990c65986605f4c8a6821dbbba49ca9&atv=79.0&btp=0.01&abtg=1&adbv=3-cdn-js

IP / ASN

104.21.78.155

AS13335 · CLOUDFLARENET

Requested by: https://la18hd.su/vivo/canal.php?stream=max1

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 04 Sep 2026 · 20:11:51.584 UTC
Last seen (UTC): 04 Sep 2026 · 20:11:51.584 UTC
Times seen: 1

Size: 1.0 KB (1031 bytes)
MD5: 83dc2dacd9f828efc9b94c9b8e5c29f3
SHA1: 10ffbc08dc7c4af47fffd359aaac222a22fccf88
SHA256: f725c94cfc3f852a411bfcaf599bf050cd0811f6f4e1275122c1e985e8737f83

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: BF:21:27:3F:7D:AE:87:31:B1:33:83:71:DB:A4:A5:FF:86:F6:CE:F4
Valid from: Fri, 31 Jul 2026 13:37:58 GMT
Valid until: Thu, 29 Oct 2026 14:29:49 GMT

Technology fingerprints

Google Cloud CDN (CDN)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/suurl5.php?r=11410390&cbur=0.7517693698920092&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=&cbpage=https%3A%2F%2Fla18hd.su%2Fvivo%2Fcanal.php%3Fstream%3Dmax1&cbref=&cbdescription=&cbkeywords=&cbcdn=ikikigxywqcrf.site&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&ts=1788552675544&srs=1990c65986605f4c8a6821dbbba49ca9&atv=79.0&btp=0.01&abtg=1&adbv=3-cdn-js HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://la18hd.su/
Origin: https://la18hd.su
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Fri, 04 Sep 2026 20:11:16 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
via: 1.1 google
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lHe3LG2m7ZgPPf5PvwcrA%2FLgdWUiXj10%2Fqu1ost683emIdEk2VEhPhGIy34HGEHnPLCm%2BpkmSGupARiayPeiwu8PQXSPNI0UwY599sQRMsWccLynP8oJn6fRJNWUQiYCQ6rquwCG"}]}
cf-cache-status: DYNAMIC
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
priority: u=4,i=?0
vary: accept-encoding
cf-ray: a35fa4704bb98deb-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

http://la18hd.su/vivo/canal.php?stream=max1

Domain graph

Hostnames

Connections