WEBSITE ANALYSIS REPORT

http://cloudfam.io/855ee2bee2b7

16 Mar 2026 · 09:46:19.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:45:54.131 GET 302 document 652.0 KB 267 ms —

09:45:54.291 GET 200 document 652.0 KB 43 ms —

09:45:54.513 GET 200 stylesheet 11.5 KB 300 ms —

09:45:54.514 GET 302 script 397.7 KB 166 ms —

09:45:54.516 GET 302 script 388.7 KB 211 ms —

09:45:54.518 GET 200 script 163.1 KB 150 ms 2 alerts

09:45:54.555 GET 200 script 377.9 KB 572 ms —

09:45:54.654 GET 200 script 397.7 KB 12 ms —

09:45:54.661 GET 200 script 15.8 KB 42 ms —

09:45:54.695 GET 200 script 388.7 KB 75 ms —

09:45:55.172 GET 200 font 31.4 KB 190 ms —

09:45:55.177 GET 200 font 47.4 KB 158 ms —

09:45:55.179 GET 200 font 47.4 KB 166 ms —

09:45:55.220 GET 200 script 26.2 KB 10 ms 2 alerts

09:45:55.335 GET 200 fetch 2.1 KB 334 ms 1 alerts

Transaction #37

Request / response

URL

GET HTTPS

https://adexchangeclear.com/script/banner.php?r=10829170&cbpage=https%3A%2F%2Fcloudfam.io%2Fredirection0.php%3Fslug%3D855ee2bee2b7%26token%3Ddcc2936f76c8badf4346ae4aff1bf111&cbref=&cbdescription=&cbkeywords=&cbtitle=CloudFam%20-%20Download%20Kingdom-Two-Crowns-v2-3-2-mod.apk&srs=090653edb088fa468a68dcbe24d0c16a&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&atv=79.0

IP / ASN

104.21.78.155

AS13335 · CLOUDFLARENET

Requested by: https://cloudfam.io/redirection0.php?slug=855ee2bee2b7&token=dcc2936f76c8badf4346ae4aff1bf111

Resource information

File type: JSON text data
MIME type: application/json; charset=utf-8
First seen (UTC): 16 Mar 2026 · 09:46:29.219 UTC
Last seen (UTC): 16 Mar 2026 · 09:46:29.219 UTC
Times seen: 1

Size: 2.1 KB (2104 bytes)
MD5: 774ea65c616737997b4aa4b038d06f22
SHA1: 65a1a073a7b8c2c951bc62782fad1fa4ac5f496a
SHA256: cfa0b927be08b418b072d134ef523645d302d4b1d2b375f2c217888922210c50

Certificate information

Issuer: Google Trust Services · WE1
Subject: adexchangeclear.com
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: AA:3C:D9:16:46:E3:FE:84:C5:73:1D:FB:D5:DA:00:22:92:46:A9:73
Valid from: Wed, 04 Feb 2026 02:59:45 GMT
Valid until: Tue, 05 May 2026 03:56:04 GMT

Technology fingerprints

Google Cloud (IaaS)
Cloudflare (CDN)
Google Cloud CDN (CDN)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious

HTTP headers

Request headers

GET /script/banner.php?r=10829170&cbpage=https%3A%2F%2Fcloudfam.io%2Fredirection0.php%3Fslug%3D855ee2bee2b7%26token%3Ddcc2936f76c8badf4346ae4aff1bf111&cbref=&cbdescription=&cbkeywords=&cbtitle=CloudFam%20-%20Download%20Kingdom-Two-Crowns-v2-3-2-mod.apk&srs=090653edb088fa468a68dcbe24d0c16a&ufp=Win32%2FMozilla%2FNetscape%2Ftrue%2Ffalse%2F1280x10240en-USunknown4824%20bits&atv=79.0 HTTP/1.1
Host: adexchangeclear.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cloudfam.io/
Origin: https://cloudfam.io
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 OK
date: Mon, 16 Mar 2026 09:45:55 GMT
content-type: application/json; charset=utf-8
server: cloudflare
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Content-Type
content-encoding: gzip
via: 1.1 google
cf-cache-status: DYNAMIC
vary: accept-encoding
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=Q1Cw6rWe9ztig7GWAQFsehz45oVkpa8GuI5s6LXLmhLlfOpAdwz1zwEio9F32SzCBzG2Vi2NQ%2FKuv6mGxkU0SUByjKFPGzW8p2lXLRkdU6Xwvio%3D"}]}
cf-ray: 9dd2d3e94d70f527-ARN
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

09:45:55.672 GET 200 script 345.0 KB 55 ms 2 alerts

09:45:55.718 HEAD 200 xhr 0 B 125 ms —

09:45:55.769 GET 200 subdocument 648.7 KB 448 ms —

09:45:55.919 GET 404 img 1.2 KB 42 ms —

09:45:55.928 GET 200 fetch 111 B 154 ms 1 alerts

09:45:56.205 GET 200 script 55.3 KB 15 ms 2 alerts

09:45:56.214 GET 204 img 0 B 145 ms 1 alerts

09:45:56.286 POST 204 beacon 0 B 295 ms 3 alerts

09:45:56.289 GET 200 script 377.9 KB 30 ms —

09:45:56.296 GET 200 fetch 1.3 KB 231 ms 1 alerts

09:45:56.404 HEAD 200 xhr 0 B 197 ms —

09:45:56.609 GET 200 script 90.2 KB 204 ms —

09:45:56.697 GET 302 script 25.8 KB 11 ms —

09:45:56.726 GET 200 script 25.8 KB 11 ms —

09:45:56.850 POST 200 xhr 0 B 24 ms —

09:45:56.910 OPTIONS 204 xhr 0 B 199 ms —

09:45:56.912 GET 200 xhr 65 B 70 ms —

09:45:56.917 POST 200 xhr 980 B 212 ms —

09:45:56.925 POST 200 beacon 978 B 246 ms —

09:45:57.097 POST 204 xhr 0 B 180 ms —

09:45:57.109 POST 200 xhr 969 B 220 ms —

09:46:01.311 GET 200 fetch 6.8 KB 182 ms 1 alerts

09:46:01.540 GET 206 media 2.90 MB 465 ms —

09:46:11.904 GET 200 fetch 6.8 KB 186 ms 1 alerts

09:46:12.116 GET 206 media 2.90 MB 203 ms —

http://cloudfam.io/855ee2bee2b7

Domain graph

Hostnames

Connections