WEBSITE ANALYSIS REPORT

http://gstream24.fun/?stream_id=60515

17 Jul 2026 · 22:32:48.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acscdn.com3 captured requests
adexchangerapid.com6 captured requests
cdn.jsdelivr.net3 captured requests
cdnjs.cloudflare.com1 captured requests
embedstreams.top7 captured requests
fonts.googleapis.com1 captured requests
gstream24.fun4 captured requests
l.locopar.com4 captured requests
lb14.strmd.st1 captured requests
lookalike.trafficmediaserver.com1 captured requests
ndcertainlywhen.com12 captured requests
rirki.com7 captured requests
s.allureanews.com1 captured requests
s58.chatango.com1 captured requests
st.chatango.com3 captured requests
tanktds.com7 captured requests
ts.twerpuveitic.com1 captured requests
usrpubtrk.com2 captured requests
ust.chatango.com14 captured requests
www.googletagmanager.com1 captured requests
www.playerhit.co4 captured requests

Connections

embedstreams.top → adexchangerapid.comCalls1 captured connections
embedstreams.top → cdn.jsdelivr.netLoads from3 captured connections
embedstreams.top → l.locopar.comEmbeds4 captured connections
embedstreams.top → lb14.strmd.stCalls1 captured connections
embedstreams.top → lookalike.trafficmediaserver.comEmbeds1 captured connections
embedstreams.top → ndcertainlywhen.comEmbeds12 captured connections
embedstreams.top → rirki.comEmbeds7 captured connections
embedstreams.top → s.allureanews.comEmbeds1 captured connections
embedstreams.top → tanktds.comEmbeds7 captured connections
embedstreams.top → usrpubtrk.comCalls1 captured connections
embedstreams.top → www.playerhit.coEmbeds4 captured connections
gstream24.fun → acscdn.comLoads from3 captured connections
gstream24.fun → adexchangerapid.comCalls5 captured connections
gstream24.fun → cdnjs.cloudflare.comLoads from1 captured connections
gstream24.fun → embedstreams.topEmbeds1 captured connections
gstream24.fun → fonts.googleapis.comLoads from1 captured connections
gstream24.fun → st.chatango.comCalls1 captured connections
gstream24.fun → st.chatango.comEmbeds1 captured connections
gstream24.fun → st.chatango.comLoads from1 captured connections
gstream24.fun → ts.twerpuveitic.comLoads from1 captured connections
gstream24.fun → usrpubtrk.comCalls1 captured connections
gstream24.fun → www.googletagmanager.comLoads from1 captured connections
s.allureanews.com → lookalike.trafficmediaserver.comRedirects to1 captured connections
st.chatango.com → s58.chatango.comCalls1 captured connections
st.chatango.com → ust.chatango.comCalls1 captured connections
st.chatango.com → ust.chatango.comLoads from13 captured connections
www.playerhit.co → l.locopar.comRedirects to4 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

22:32:06.294 GET 302 document 0 B 229 ms —

22:32:06.535 GET 200 document 637.0 KB 169 ms —

22:32:07.035 GET 200 script 475.6 KB 179 ms —

22:32:07.038 GET 200 stylesheet 17.4 KB 107 ms —

22:32:07.040 GET 200 stylesheet 99.6 KB 64 ms —

22:32:07.041 GET 200 script 5 B 215 ms —

22:32:07.043 GET 200 script 164.0 KB 61 ms 2 alerts

22:32:07.044 GET 200 script 67.9 KB 1565 ms —

22:32:07.049 GET 200 subdocument 611.2 KB 398 ms 1 alerts

22:32:07.224 GET 200 fetch 638 B 174 ms 3 alerts

22:32:07.455 GET 200 script 203.3 KB 6388 ms —

22:32:07.458 GET 200 script 512.8 KB 6657 ms —

22:32:07.461 GET 200 script 24.9 KB 27 ms —

22:32:07.463 GET 200 script 498.1 KB 70 ms 1 alerts

22:32:07.513 GET 200 script 74.4 KB 12 ms 2 alerts

22:32:07.588 GET 200 script 46.0 KB 9 ms 2 alerts

22:32:07.701 GET 200 img 9.4 KB 74 ms —

22:32:07.702 GET 200 img 9.4 KB 73 ms —

22:32:07.806 GET 200 fetch 935 B 213 ms 3 alerts

22:32:07.950 POST 204 beacon 0 B 165 ms 3 alerts

22:32:07.952 GET 200 fetch 1016 B 213 ms 3 alerts

Transaction #65

Request / response

URL

GET HTTPS

https://adexchangerapid.com/script/suurl5.php?r=10669930&atag=1&cbur=0.8927207954294467&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Chicago%20White%20Sox%20at%20Toronto%20Blue%20Jays%20%E2%80%93%20Main%20%E2%80%93%20Gstream24&cbpage=https%3A%2F%2Fgstream24.fun%2Fgames%2Fchicago-white-sox-at-toronto-blue-jays-main%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ts=1784327527587&atv=85.0&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&srs=91923b521e0bb440b8eb51f22e15bc4a&btp=0.01&aggr=3&czid=oabvglspbk

IP / ASN

104.21.35.134

AS13335 · CLOUDFLARENET

Requested by: https://gstream24.fun/games/chicago-white-sox-at-toronto-blue-jays-main/

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 17 Jul 2026 · 22:33:05.056 UTC
Last seen (UTC): 17 Jul 2026 · 22:33:05.056 UTC
Times seen: 1

Size: 1016 B (1016 bytes)
MD5: 3aa770d76fe33a2f602ddf42912783e1
SHA1: e94dc220c4a9a5ccf4fa41861a1fe0b85ab101e0
SHA256: 2f4fd5e004ed07c1a0459fca745e7d0ca3c6553d8357e97d5490b289af8f2129

Certificate information

Issuer: Let's Encrypt · YE1
Subject: adexchangerapid.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 05:FA:95:2D:66:AE:32:6A:6D:E8:85:EA:35:1A:3A:15:CE:0E:B1:7D
Valid from: Fri, 26 Jun 2026 15:52:58 GMT
Valid until: Thu, 24 Sep 2026 15:52:57 GMT

Technology fingerprints

Google Cloud CDN (CDN)
Google Cloud (IaaS)
Cloudflare (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DigiCert UltraDNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/suurl5.php?r=10669930&atag=1&cbur=0.8927207954294467&cbiframe=0&cbWidth=1280&cbHeight=1024&cbtitle=Chicago%20White%20Sox%20at%20Toronto%20Blue%20Jays%20%E2%80%93%20Main%20%E2%80%93%20Gstream24&cbpage=https%3A%2F%2Fgstream24.fun%2Fgames%2Fchicago-white-sox-at-toronto-blue-jays-main%2F&cbref=&cbdescription=&cbkeywords=&cbcdn=acscdn.com&ts=1784327527587&atv=85.0&ufp=Linux%20x86_64%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown824%20bits&srs=91923b521e0bb440b8eb51f22e15bc4a&btp=0.01&aggr=3&czid=oabvglspbk HTTP/1.1
Host: adexchangerapid.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Referer: https://gstream24.fun/
Origin: https://gstream24.fun
Sec-GPC: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Priority: u=4
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Fri, 17 Jul 2026 22:32:08 GMT
content-type: application/json; charset=utf-8
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, POST, OPTIONS
content-encoding: gzip
via: 1.1 google
priority: u=4,i=?0
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=hhlTZFETQHFxRSbMM0kKodSusOUm1YkYXQWc6B6II4RvlCqwWnjym3ha8byyvQwyj%2BagJ2kybX7WxopXB82M%2FagKe8A7rsXLkqr4tNeiPvoiIvTRCQqqmrA9esbjtZlq6JKifkJA"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
vary: accept-encoding
cf-ray: a1ccb369a8f2569f-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

22:32:08.002 GET 204 fetch 0 B 163 ms 3 alerts

22:32:08.651 GET 200 subdocument 681.1 KB 514 ms —

22:32:08.653 GET 200 xhr 20 B 644 ms —

22:32:09.374 GET 200 xhr 55 B 1132 ms —

22:32:09.504 GET 101 websocket 0 B 1126 ms —

22:32:11.002 GET 200 img 1.3 KB 813 ms —

22:32:11.026 GET 200 img 1.5 KB 812 ms —

22:32:11.124 GET 200 img 1.8 KB 841 ms —

22:32:11.161 GET 200 img 1.5 KB 813 ms —

22:32:11.166 GET 200 img 1.4 KB 816 ms —

22:32:11.175 GET 200 img 1.0 KB 816 ms —

22:32:11.181 GET 200 img 640 B 797 ms —

22:32:11.188 GET 200 img 1.7 KB 817 ms —

22:32:11.195 GET 200 img 1.4 KB 938 ms —

22:32:11.204 GET 200 img 640 B 933 ms —

22:32:11.207 GET 200 img 2.0 KB 934 ms —

22:32:11.210 GET 200 img 1.2 KB 935 ms —

22:32:11.213 GET 200 img 1.4 KB 941 ms —

22:32:13.933 POST 202 xhr 2 B 108 ms 1 alerts

22:32:13.950 GET 200 script 339.1 KB 245 ms 1 alerts

22:32:13.955 GET 200 subdocument 2.2 KB 140 ms 1 alerts

22:32:14.151 GET 200 subdocument 580 B 188 ms —

22:32:14.156 GET 200 subdocument 580 B 376 ms —

22:32:14.161 GET 200 subdocument 580 B 164 ms —

22:32:14.169 GET 200 subdocument 579 B 168 ms —

22:32:14.175 GET 200 subdocument 580 B 162 ms —

22:32:14.180 GET 200 subdocument 579 B 145 ms —

22:32:14.185 GET 200 subdocument 2.1 KB 315 ms —

22:32:14.193 GET 200 subdocument 578 B 312 ms —

http://gstream24.fun/?stream_id=60515

Domain graph

Hostnames

Connections

Network requests

Transaction #65

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://gstream24.fun/?stream_id=60515

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #65

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://gstream24.fun/?stream_id=60515

Domain graph

Network requests