WEBSITE ANALYSIS REPORT

http://ntunhs.net/GetIPInfo/all.ip/HPLang_FR/LV_2/IP_135.175.0.0.htm

14 Jan 2026 · 08:57:56.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

08:57:32.909 GET 301 document 31.3 KB 887 ms —

08:57:33.770 GET 200 document 31.3 KB 9885 ms —

08:57:35.463 GET 200 script 3.7 KB 874 ms —

08:57:35.464 GET 200 script 167.1 KB 113 ms 1 alerts

08:57:35.466 GET 200 stylesheet 5.6 KB 1295 ms —

08:57:35.467 GET 200 img 105.3 KB 908 ms —

08:57:35.468 GET 200 script 928 B 878 ms —

08:57:35.470 GET 503 img 299 B 864 ms —

08:57:36.763 GET 200 img 174 B 1183 ms —

08:57:36.766 GET 200 img 7.0 KB 2249 ms —

08:57:36.768 GET 200 img 52 B 894 ms —

08:57:36.771 GET 200 img 1.9 KB 2224 ms —

08:57:36.774 GET 200 script 26.2 KB 9 ms 1 alerts

08:57:36.776 GET 503 img 299 B 1166 ms —

08:57:36.778 GET 200 img 23.8 KB 7063 ms —

08:57:36.780 GET 503 img 299 B 2204 ms —

08:57:36.863 GET 200 fetch 1.9 KB 301 ms 1 alerts

08:57:36.882 GET 200 fetch 1.9 KB 278 ms 1 alerts

08:57:36.884 GET 200 fetch 1.9 KB 257 ms 1 alerts

Transaction #20

Request / response

URL

GET HTTPS

https://adexchangeclear.com/script/banner.php?r=1079261&cbpage=https%3A%2F%2Fwww.ntunhs.net%2FGetIPInfo%2Fall.ip%2FHPLang_FR%2FLV_2%2FIP_135.175.0.0.htm&cbref=&cbdescription=Une%20base%20de%20donn%C3%A9es%20compl%C3%A8te%20pour%20IP%2FDN%2FWhois%20recherche.&cbkeywords=%20Ce%20nom%20de%20domaine%20de%20recherche%2C%20recherche%20d%27adresse%20IP%2C%20Whois%2C%20DNS%2C%20Ce%20nom%20de%20domaine%2C%20adresse%20IP%2C%20IP%2C%20nom%20de%20domaine%20de%20recherche%2C%20la%20recherche%20globale%20nom%20de%20domaine%2C%20nom%20de%20domaine%20IP%2C%20whois%20IP%2C%20IP%20%2F%20domaine%2C%20nom%20de%20domaine%20tracker%2C%20tracker%20ip%2C%20domaine%20piste&cbtitle=Information%20de%20l%27adresse%20IP%20(135.175.0.0%20-%20135.175.255.255)&srs=faf3037bf8168a49afc8e05534673688&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&atv=75.0

IP / ASN

172.67.223.87

AS13335 · CLOUDFLARENET

Requested by: https://www.ntunhs.net/GetIPInfo/all.ip/HPLang_FR/LV_2/IP_135.175.0.0.htm

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 14 Jan 2026 · 08:58:19.976 UTC
Last seen (UTC): 14 Jan 2026 · 08:58:19.976 UTC
Times seen: 1

Size: 1.9 KB (1971 bytes)
MD5: 6191f3f937bddf2e258485b520031cba
SHA1: ee9905708203d725f9c7a061c079d8cd6ebb4de2
SHA256: fb67d72e85f811ed338be90e6d3bed204ad495880a8783c11340435017b8495b

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: D5:B9:71:11:A1:C5:BD:EA:60:68:49:87:01:4B:0B:CB:81:8B:FA:6C
Valid from: Sat, 06 Dec 2025 23:08:46 GMT
Valid until: Sat, 07 Mar 2026 00:07:30 GMT

Technology fingerprints

Google Cloud (IaaS)
Cloudflare (CDN)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/banner.php?r=1079261&cbpage=https%3A%2F%2Fwww.ntunhs.net%2FGetIPInfo%2Fall.ip%2FHPLang_FR%2FLV_2%2FIP_135.175.0.0.htm&cbref=&cbdescription=Une%20base%20de%20donn%C3%A9es%20compl%C3%A8te%20pour%20IP%2FDN%2FWhois%20recherche.&cbkeywords=%20Ce%20nom%20de%20domaine%20de%20recherche%2C%20recherche%20d%27adresse%20IP%2C%20Whois%2C%20DNS%2C%20Ce%20nom%20de%20domaine%2C%20adresse%20IP%2C%20IP%2C%20nom%20de%20domaine%20de%20recherche%2C%20la%20recherche%20globale%20nom%20de%20domaine%2C%20nom%20de%20domaine%20IP%2C%20whois%20IP%2C%20IP%20%2F%20domaine%2C%20nom%20de%20domaine%20tracker%2C%20tracker%20ip%2C%20domaine%20piste&cbtitle=Information%20de%20l%27adresse%20IP%20(135.175.0.0%20-%20135.175.255.255)&srs=faf3037bf8168a49afc8e05534673688&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&atv=75.0 HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.ntunhs.net/
Origin: https://www.ntunhs.net
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Wed, 14 Jan 2026 08:57:37 GMT
content-type: application/json; charset=utf-8
server: cloudflare
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=tIcL47fMRD6Sq3gIGbwh6ZkbQ9tMFJ%2FsyPTaehEdRSFZwT3qzEDclBngPkpKJifs9wyTE6iBXVKKKMXyt3R3b8QPaNLWhWUhr3McpUiL7aDOD64%3D"}]}
cf-ray: 9bdbed45c90d120a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

08:57:37.180 GET 200 script 55.2 KB 13 ms 1 alerts

08:57:37.183 GET 204 img 0 B 145 ms 1 alerts

08:57:37.185 GET 204 img 0 B 146 ms 1 alerts

08:57:37.186 GET 204 img 0 B 146 ms 1 alerts

08:57:37.344 GET 200 script 945 B 1625 ms —

08:57:37.439 GET 200 fetch 1.1 KB 187 ms 1 alerts

08:57:39.411 GET 200 script 945 B 1815 ms —

08:57:41.237 GET 503 img 299 B 842 ms —

08:57:42.453 GET 200 script 945 B 830 ms —

08:57:43.675 GET 200 script 752.2 KB 976 ms —

08:57:43.679 GET 200 script 945 B 931 ms —

08:57:44.633 GET 200 img 96 B 914 ms —

08:57:44.795 GET 200 img 0 B 900 ms —

08:57:44.842 POST 204 beacon 0 B 202 ms 5 alerts

08:57:45.093 GET 200 img 894 B 906 ms —

http://ntunhs.net/GetIPInfo/all.ip/HPLang_FR/LV_2/IP_135.175.0.0.htm

Domain graph

Hostnames

Connections