WEBSITE ANALYSIS REPORT

https://bunkr.cr/f/iHXxsQbSSsLm9

29 Sep 2026 · 16:18:11.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

16:17:32.418 GET 200 document 51.3 KB 59 ms —

16:17:32.772 GET 200 stylesheet 51.9 KB 19 ms —

16:17:33.120 GET 200 script 2.4 KB 11 ms —

16:17:33.122 GET No response script 0 B 0 ms —

16:17:33.124 GET 200 script 164.9 KB 61 ms 1 alerts

16:17:33.126 GET No response script 0 B 0 ms 1 alerts

16:17:33.128 GET 200 stylesheet 33.5 KB 17 ms —

16:17:33.130 GET 200 script 108.5 KB 14 ms —

16:17:33.133 GET 200 script 8.3 KB 13 ms —

16:17:33.135 GET 200 script 6.2 KB 140 ms —

16:17:33.143 GET 200 img 2.8 KB 10 ms —

16:17:33.156 GET 200 img 1.1 KB 10 ms —

16:17:33.229 GET 200 font 23.1 KB 13 ms —

16:17:33.338 GET 200 script 29.8 KB 15 ms 1 alerts

16:17:33.353 POST 200 xhr 31 B 11 ms —

16:17:33.375 POST 202 fetch 0 B 93 ms —

16:17:33.404 GET 522 fetch 7.0 KB 19681 ms —

16:17:33.405 GET 200 fetch 69 B 662 ms —

16:17:33.408 GET No response lazy-img 0 B 0 ms —

16:17:33.410 GET No response lazy-img 0 B 0 ms —

16:17:33.411 GET No response lazy-img 0 B 0 ms —

16:17:33.413 GET No response lazy-img 0 B 0 ms —

16:17:33.415 GET No response lazy-img 0 B 0 ms —

16:17:33.417 OPTIONS 522 fetch 0 B 19665 ms —

16:17:33.421 GET 101 websocket 0 B 12805 ms —

16:17:33.425 GET 204 fetch 0 B 3333 ms 3 alerts

16:17:33.606 GET 204 fetch 0 B 199 ms 3 alerts

Transaction #05

Request / response

URL

GET HTTPS

https://adexchangerapid.com/script/banner.php?r=8003498&cbpage=https%3A%2F%2Fbunkr.cr%2Ff%2FiHXxsQbSSsLm9&cbref=&cbdescription=File%20hosted%20for%20free%20on%20Bunkr.&cbkeywords=&cbtitle=VID_20250730_042606_169.mp4.mov%20%7C%20Bunkr&srs=18d86023c9fbca498568ae44f47edf95&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&atv=87.0

IP / ASN

104.21.35.134

AS13335 · CLOUDFLARENET

Requested by: https://bunkr.cr/f/iHXxsQbSSsLm9

Resource information

File type: Not recorded
MIME type: text/plain
First seen (UTC): Not recorded
Last seen (UTC): 22 Oct 2026 · 15:40:42.472 UTC
Times seen: 19285211

Size: 0 B (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Certificate information

Issuer: Let's Encrypt · YE2
Subject: adexchangerapid.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 8F:18:8A:BF:69:17:0F:15:9D:8A:C2:35:9A:1E:D0:33:AE:61:C3:FA
Valid from: Mon, 24 Aug 2026 23:48:49 GMT
Valid until: Sun, 22 Nov 2026 23:48:48 GMT

Technology fingerprints

Google Cloud CDN (CDN)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
DigiCert UltraDNS Sinkholed	medium	Malicious
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/banner.php?r=8003498&cbpage=https%3A%2F%2Fbunkr.cr%2Ff%2FiHXxsQbSSsLm9&cbref=&cbdescription=File%20hosted%20for%20free%20on%20Bunkr.&cbkeywords=&cbtitle=VID_20250730_042606_169.mp4.mov%20%7C%20Bunkr&srs=18d86023c9fbca498568ae44f47edf95&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&atv=87.0 HTTP/1.1
Host: adexchangerapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://bunkr.cr/
Origin: https://bunkr.cr
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 204 
server: cloudflare
date: Tue, 29 Sep 2026 16:17:33 GMT
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
via: 1.1 google
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=o9tl8AxPG8cgfV2GxIW3ql3Pbk2j%2B%2BvTNOuKW4eV6pw7%2FEQ0PtXSAP%2FkHd7Ia%2BparIIuZ1ZTiA8NcnXXoCxEHlJvXERjX0kCHtaW7WNy7xzynQXvM%2BdzhoqpjtMGqM638i3uNtOY"}]}
priority: u=4,i=?0
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-ray: a42c4c79293f5697-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

16:17:33.782 POST 204 beacon 0 B 197 ms 3 alerts

16:17:34.166 GET 200 xhr 5.6 KB 84 ms —

16:17:34.182 GET 200 fetch 610 B 16 ms —

16:17:34.268 GET 200 img 565.4 KB 201 ms —

16:17:35.481 GET 200 img 4.2 KB 9 ms —

https://bunkr.cr/f/iHXxsQbSSsLm9

Domain graph

Hostnames

Connections