WEBSITE ANALYSIS REPORT

http://fapello-official.com

01 Feb 2026 · 09:58:35.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Hostnames

acscdn.com3 captured requests
adexchangeclear.com3 captured requests
cdn.show-creative1.com1 captured requests
cdn.storageimagedisplay.com9 captured requests
creative-sb1.com17 captured requests
erome-official.com19 captured requests
fapello-official.com1 captured requests
flushpersist.com2 captured requests
fonts.googleapis.com2 captured requests
fonts.gstatic.com2 captured requests
inadsexchange.com1 captured requests
kettledroopingcontinuation.com2 captured requests
preferencenail.com2 captured requests
protrafficinspector.com3 captured requests
s.w.org1 captured requests
skinnycrawlinglax.com8 captured requests
surpasswest.com27 captured requests
topicpenholder.com3 captured requests
usrpubtrk.com1 captured requests
weirdopt.com1 captured requests

Connections

erome-official.com → acscdn.comLoads from3 captured connections
erome-official.com → adexchangeclear.comCalls3 captured connections
erome-official.com → cdn.show-creative1.comCalls1 captured connections
erome-official.com → cdn.storageimagedisplay.comLoads from9 captured connections
erome-official.com → creative-sb1.comCalls2 captured connections
erome-official.com → creative-sb1.comLoads from15 captured connections
erome-official.com → flushpersist.comLoads from2 captured connections
erome-official.com → fonts.googleapis.comLoads from2 captured connections
erome-official.com → fonts.gstatic.comLoads from2 captured connections
erome-official.com → inadsexchange.comLoads from1 captured connections
erome-official.com → kettledroopingcontinuation.comLoads from2 captured connections
erome-official.com → preferencenail.comLoads from2 captured connections
erome-official.com → protrafficinspector.comCalls3 captured connections
erome-official.com → s.w.orgLoads from1 captured connections
erome-official.com → skinnycrawlinglax.comCalls1 captured connections
erome-official.com → skinnycrawlinglax.comLoads from7 captured connections
erome-official.com → surpasswest.comCalls3 captured connections
erome-official.com → surpasswest.comLoads from24 captured connections
erome-official.com → topicpenholder.comLoads from3 captured connections
erome-official.com → usrpubtrk.comCalls1 captured connections
erome-official.com → weirdopt.comLoads from1 captured connections
fapello-official.com → erome-official.comRedirects to1 captured connections

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:58:11.648 GET 301 document 307.7 KB 851 ms —

09:58:12.174 GET 200 document 307.7 KB 1225 ms —

09:58:13.208 GET 200 script 163.9 KB 98 ms 1 alerts

09:58:13.210 GET 200 stylesheet 42.1 KB 151 ms —

09:58:13.212 GET 200 stylesheet 1.6 KB 179 ms —

09:58:13.214 GET 200 stylesheet 116.9 KB 150 ms —

09:58:13.215 GET 200 stylesheet 70.1 KB 149 ms —

09:58:13.216 GET 200 stylesheet 57.6 KB 147 ms —

09:58:13.217 GET 200 script 85.5 KB 259 ms —

09:58:13.219 GET 200 script 13.3 KB 259 ms —

09:58:13.220 GET 200 script 103.8 KB 829 ms 2 alerts

09:58:13.222 GET 200 script 42.5 KB 832 ms 2 alerts

09:58:13.223 GET 200 imageset 860 B 257 ms —

09:58:13.232 GET 200 script 85.4 KB 772 ms 2 alerts

09:58:13.233 GET 200 imageset 9.4 KB 263 ms —

09:58:13.234 GET 200 imageset 28.3 KB 261 ms —

09:58:13.235 GET 200 imageset 54.1 KB 263 ms —

09:58:13.356 GET 200 script 23.3 KB 149 ms —

09:58:13.359 GET 200 script 1.5 KB 148 ms —

09:58:13.365 GET 200 script 37.1 KB 148 ms —

09:58:13.374 GET 200 fetch 922 B 237 ms 1 alerts

09:58:13.595 GET 200 script 73.9 KB 14 ms 1 alerts

09:58:13.715 GET 200 script 40.8 KB 11 ms 1 alerts

09:58:13.868 GET 200 img 0 B 717 ms 4 alerts

09:58:13.871 GET 200 script 6.1 KB 746 ms 4 alerts

09:58:13.872 GET 200 script 83.4 KB 151 ms 3 alerts

09:58:13.873 GET 200 xhr 40 B 278 ms —

09:58:13.884 GET 200 script 83.4 KB 170 ms 3 alerts

09:58:13.886 GET 200 xhr 40 B 248 ms —

09:58:13.887 GET 200 script 6.1 KB 420 ms 3 alerts

09:58:13.893 GET 200 script 66.4 KB 153 ms —

09:58:13.926 GET 200 font 30.7 KB 253 ms —

09:58:14.124 GET 200 script 0 B 177 ms 3 alerts

09:58:14.131 GET 200 xhr 40 B 21 ms —

09:58:14.133 GET 200 xhr 13.7 KB 715 ms —

09:58:14.134 GET 200 fetch 1.2 KB 185 ms 1 alerts

09:58:14.137 POST 204 beacon 0 B 252 ms 3 alerts

09:58:14.140 POST 204 beacon 0 B 744 ms —

09:58:14.143 GET 200 script 22.2 KB 148 ms —

09:58:14.145 GET 200 fetch 2.0 KB 180 ms 1 alerts

Transaction #35

Request / response

URL

GET HTTPS

https://adexchangeclear.com/script/push.php?r=9459086&ipp=1&mads=2&position=top&czid=4tsrk2jzxw&atag=1&aggr=3&ppv=1&srs=e3ae417fb75a33429dc8565e74cacb43&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&cbpage=https%3A%2F%2Ferome-official.com%2F&atv=76.0&cbref=&btp=0.01

IP / ASN

172.67.223.87

AS13335 · CLOUDFLARENET

Requested by: https://erome-official.com/

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 01 Feb 2026 · 09:58:43.671 UTC
Last seen (UTC): 01 Feb 2026 · 09:58:43.671 UTC
Times seen: 1

Size: 2.0 KB (2082 bytes)
MD5: 5a90198b04cfa0b48b4a0d413cac8120
SHA1: 1d815517276744227d19d1fbcc53ea77d909785a
SHA256: ab16c42170661dcbdecdd11564e44d85f57fceb09cf8bce09d5b6532e3548318

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: D5:B9:71:11:A1:C5:BD:EA:60:68:49:87:01:4B:0B:CB:81:8B:FA:6C
Valid from: Sat, 06 Dec 2025 23:08:46 GMT
Valid until: Sat, 07 Mar 2026 00:07:30 GMT

Technology fingerprints

Cloudflare (CDN)
Google Cloud CDN (CDN)
Google Cloud (IaaS)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/push.php?r=9459086&ipp=1&mads=2&position=top&czid=4tsrk2jzxw&atag=1&aggr=3&ppv=1&srs=e3ae417fb75a33429dc8565e74cacb43&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&cbpage=https%3A%2F%2Ferome-official.com%2F&atv=76.0&cbref=&btp=0.01 HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://erome-official.com/
Origin: https://erome-official.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Sun, 01 Feb 2026 09:58:14 GMT
content-type: application/json; charset=utf-8
server: cloudflare
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=kw5rNF7EuIY5LLrb7VNsMpeGZ76pb7WCXIxpXu%2B0Av62Kn7GisO5Y1ikt6dOpejYYgAG7Zt1gq35xj8ghXFcfc6f7TxIqqspn6gXsXamOztDgt0%3D"}]}
cf-ray: 9c7096d2686f4e4c-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

09:58:14.345 GET 200 img 1.4 KB 75 ms —

09:58:14.347 GET 200 xhr 14.2 KB 673 ms —

09:58:14.349 GET 200 xhr 14.2 KB 695 ms —

09:58:14.378 GET 204 img 0 B 215 ms —

09:58:14.623 GET 200 xhr 5.3 KB 332 ms 3 alerts

09:58:14.641 GET 200 img 0 B 93 ms —

09:58:14.652 GET 200 img 0 B 181 ms —

09:58:14.656 GET 200 img 0 B 647 ms —

09:58:14.658 GET 200 img 0 B 173 ms —

09:58:14.667 GET 200 img 58.9 KB 310 ms —

http://fapello-official.com

Domain graph

Hostnames

Connections

Network requests

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://fapello-official.com

[Domain graph]

Hostnames

Connections

[Network requests]

Transaction #35

URL

IP / ASN

Resource information

Certificate information

Technology fingerprints

Detections

HTTP headers

Request headers

Response headers

http://fapello-official.com

Domain graph

Network requests