Domain > amb-snippet.rexla.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-10-02	104.26.3.175 (ClassC)

HTTP/1.1 403 ForbiddenDate: Thu, 02 Oct 2025 08:59:47 GMTContent-Type: text/html; charsetUTF-8Content-Length: 6432Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer(),autoplay(),browsing-topics(),camera(),clipboard-read(),clipboard-write(),geolocation(),gyroscope(),hid(),interest-cohort(),magnetometer(),microphone(),payment(),publickey-credentials-get(),screen-wake-lock(),serial(),sync-xhr(),usb()referrer-policy: same-originserver-timing: chlray;desc98830177aa49ef90x-content-type-options: nosniffx-frame-options: SAMEORIGINCache-Control: private, max-age0, no-store, no-cache, must-revalidate, post-check0, pre-check0Expires: Thu, 01 Jan 1970 00:00:01 GMTReport-To: {endpoints:{url:https:\/\/a.nel.cloudflare.com\/report\/v4?sTPrlEyNyrC3ckTNjfur5HEnD4I5VgV2WrbkiYLDNwC%2FwuZ94ZgnTwrp4ElWJpud3IDq%2BBUB9eFv814TPwYGrdq89OGsbXbfv5SojiZ2EXddLXek6WcMiVEAo0Wy2SDqGWmslSp%2B%2F3w%3D%3D},group:cf-nel,max_age:604800}NEL: {success_fraction:0,report_to:cf-nel,max_age:604800}Access-Control-Allow-Methods: GET,OPTIONS,POSTServer: cloudflareCF-RAY: 98830177aa49ef90-PDXserver-timing: cfL4;desc?protoTCP&rtt5949&min_rtt5375&rtt_var1865&sent4&recv6&lost0&retrans0&sent_bytes2854&recv_bytes732&delivery_rate481863&cwnd252&unsent_bytes0&cid1001ec67282267b0&ts35&x0

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>style>*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131;font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;padding-left:1.5rem;max-width:60rem}@media (width  720px){.main-content{margin-top:4rem}}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}@media (width  720px){.h2{line-height:1.5rem;font-size:1.25rem}}#challenge-error-text{background-image:url(data:image/svg+xml;base64,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);background-repeat:no-repeat;background-size:contain;padding-left:34px}@media (prefers-color-scheme: dark){body{background-color:#222;color:#d9d9d9}}/style>meta http-equivrefresh content360>/head>body>div classmain-wrapper rolemain>div classmain-content>noscript>div classh2>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt  {cvId: 3,cZone: amb-snippet.rexla.com,cType: managed,cRay: 98830177aa49ef90,cH: YIm3RntfHQj7cXTskz.n3kYUXcBENPhVArX35EK3wOI-1759395587-1.2.1.1-_kuiKzWBmWbnfSS7Un5NzMRB9DG3PNB3WCcB7C.BtmlOBZtsB5Y_44pv9QyJhryi,cUPMDTk:\/?__cf_chl_tkIsCfdhf3ZLPZBZilS8Hzo2F79EGEkqYIyFcvNsDJKeg-1759395587-1.0.1.1-vhBXRwOLtsxZ5fOory5TfvSHPUd_3bM8kXFKs1TCzkQ,cFPWv: g,cITimeS: 1759395587,cTplC:0,cTplV:5,cTplB: cf,fa:\/?__cf_chl_f_tkIsCfdhf3ZLPZBZilS8Hzo2F79EGEkqYIyFcvNsDJKeg-1759395587-1.0.1.1-vhBXRwOLtsxZ5fOory5TfvSHPUd_3bM8kXFKs1TCzkQ,md: R0hGOHcltSTmgsnGjTuin.bSs1c.YEJFIaGZkT.CaSk-1759395587-1.2.1.1-SUk9J06dn9iJEBULinxSjGrxc97d.BFvARL8XIFNC_gS2mfZkXmAizlq2gVeL9LcO14mm1vimLaM5MnOL7RFuiWZFl51gE9cLSY5nuib1LkJQivdl5F2fY80oWpHbegwqGlld12bcMwaDkP6aCvds8h0dB6jx4goJqThNeZH96ejSbyCoXFxwjm3PDC_YAHMy85mp.fcVGN0it89RNwvAHFPsWAev_vzBgQn1Ygovfy28UPoNxomQ.JEAFIRRM_jrIUgavUOryen6Yrksg9KOo56ICkuY4JRG5f1e0kxkPAnhY7qUH3lLJ.54q7ISaXe0QCmD1RIn10zWMcq8VQgrj380ey5qCeD4q9we3tGji5d1ejWaGQieQhJoyEt0NcdNoliDfnu5xEI02W6mxMIeZoWwYah0vUAg7FMWTL2r5CKYrUq162_QqaG7rRam6IAqs.Op4eY9zHY5W7GaEdxfhij.SoTvsS0e2xkW1eBJuG1XNU1ZcQNSUPwCDDx6VCdis5mX2HyqSqQPONE4Sk9WnraCT_qGqPtrwyBfUE5cDTUJ19e68eBHu6_t4IwQhYm9Ung71GZD2yjXq6xFfHRoYAJqc5GMJhI15lH62QN6jb16Rd2TzKWdpfz31LR_tip0pELuTgRhgqkXL8704bJ2fvSPhUzBq0oVg_KbhWwbdY0.uxSebi1Opi71I5_qFicPxuhbrpPRDawzT.IBikEOhTekNwF2dwSbfTL1ARK0Xm4x.QdYbv8YSTvFd4kZilxao_J.9lcC1933g4VboUQqhxwzO_OhCPouQPxUw.oZ1Z3H8owAq2wK8UpkcA95tsaDa_MFOOmoNne.4QQqEPX4FyFYxk_o2mC49BSL32eyVyQsAZg4BTeBKOHv9kgv_bunvf62f_gf3jzr61jfXj_RA,mdrd: iOf161YVe5206T4ZmGKujR1C0pErk4CvT7BUpUt9xrY-1759395587-1.2.1.1-LE.WWRvn4q2IHo5da6lKivzI5JBZziN5Cl06TmgtBIy1toSgmjtKNeai3P68H0nBvsLqAPLiRGZHKWJFaYVWcRW6Wo46IOQsiJOKQ62Lwfi_8GOd01ChI4wkf7tgwYJ6DBv7ZY2FvQMus6.XoQ4zIJS6.TrOtVnOUt4ssMrYPaTOjAlyTPrxGZUPaM7k6kj8svhnBX33FvZ3rHXzbiB3wqyMVQzyyRZ7RBDg.mdguH7wcQlvGBxBuucJP7p6knWusnNeITA0vXbe6GFyeF_ljOxuc.Y.zQ9KNgjobfQOautArmope6vDsk_04ZuPEiP0mWQaT6468umav3ur.7NMgJv6B.kseFvI0dQYy7PxVe6kiuVlmaNXu3xj.PvaD2E27.rbYTLdYje3Un_ZcQAyftPSDppZEJR.aBvgtvGShdc2ZbnFphtjq8eUebMlmBKlwLPHphVxEzTk24awOoPFOO_H38U8ZNxbHKZJRqOS3UgiggNqYxeaXHhnGdABZlEowuhufUfiVcuGv1ywBu.Jxb0adKTbil.CECCD3iKBmwmj5k1M4svo1hCHyDmtsUtItVKMqZ6KRnaiNEWC92SqZnP.ezxJISixQVqVJSowZJ4EvY4z7BJ9wZQeWkTFjhtDBQPE1xe_vNlSLBetPa2cHxHtBXaixGkPSk4h544AqyoSNgohod1jTjFpvbpiDklyPMBTHDhsNKWIfq9kZH0_6v.rX_tO5eyw.gOPhBkYlUAIrZ6VAPZIq1YiGZsPbR3HdDPQxSiLBSxCeb4UjQw.3y0dlKcV3g_p05sX3Ogz8tukJW_dA6gZE.v1ajw0a_IXcbUVuzrC2n.dafgLqkcfnVJajyVg7be7ZhrQnq6V70ZKjzl0CLlcV0cdhxUJVqI0hcDrBhyYu4bNFLSNtAvIN4R8LsKMbJ8l6CT7_pF_mdCMmdsvjRGPvUUU2MaP_XQYqfUkQp_PizdST0XkEHd.6cbq9dG1jIVwakd3Jt2vdweepya14BOT_30xTN27s1sRCqGYruFQIG59.qLWuKclcSRvx7N6fR..Nqcvp7HS9EKxDflHnXW9eOcd9SbAsvnAsvFjnf34Ahx0PdGr2_elHIf1IL2PXFLsmeftsrJN5pxe2kpEy_oIZ1VoR7Kr_9BA151GRLANmVs7X9Wcqez2cAJmk1UQ2BYUahjYQKFd6uvsl5BmqoNUAaAFAF5u2zJfwsOd8h8gXiVL.2fvHyLBHBK3DV1Y.72YvIvln3sC5_sP1UdpeCH2CbyMUwCTkh8oM4rw5hoyw4exyYIpijDPgNEzS7OBEZ._6l41z7nqj3vI0GehQSJc96qshM9iKtxex8b3VqdPMKm0ni1hoIZtRu7Vm_x9RaI9iwFvx6fRB8IEFftUbIabGNx.RRgs_zOSlNU0x9x6fSmKICT.1QyQn6K15xD_fFlPxnW_TWMxHeGbLFAdRCs6GUuDZ6qS1T4oc5V54i3VV0UjFifCzkQEIooA8MDiRpNq9HtHDBDFMlWmfFPLsOQs1ZN5_kZ3CjaQh6a6MqPZq.VMHAY2kDco8AB5awUxTxdSCAvc0aWbCfKpVJ1t50JG.E4bGjy9pJF_XNQTHPk4lTvLz3hqNl4x5r_XSzuJ9OkIAJDMCC3YJa2ZeyvGgMWfP.aL.2gyJ0_eq5WXD9Qow2S13IDmXodklUqMih.pXp.MVYcvv5tZiP5rJSIpgqs83mHtS.VXyxdwCdHVX6WieQlU7bOI6RqKpJt9nB9IBo2T7_uiu7mxU2SD3ZxtJlQuAGSIy062WviP4vip_eyK0dJZqkEMfprTwdcsNw92gkn.Ru1.peOAgMZchl1Xa_zotpqyvkcZdrqDBWVmkdQsnjnSuqVncjw.sUcKB7KCgZtPSJKhNfUAk9A0MXegdEultY7FuGuNuXD6,};var a  document.createElement(script);a.src  /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray98830177aa49ef90;window._cf_chl_opt.cOgUHash  location.hash   && location.href.indexOf(#) ! -1 ? # : location.hash;window._cf_chl_opt.cOgUQuery  location.search   && location.href.slice(0, location.href.length - window._cf_chl_opt.cOgUHash.length).indexOf(?) ! -1 ? ? : location.search;if (window.history && window.history.replaceState) {var ogU  location.pathname + window._cf_chl_opt.cOgUQuery + window._cf_chl_opt.cOgUHash;history.replaceState(null, null,\/?__cf_chl_rt_tkIsCfdhf3ZLPZBZilS8Hzo2F79EGEkqYIyFcvNsDJKeg-1759395587-1.0.1.1-vhBXRwOLtsxZ5fOory5TfvSHPUd_3bM8kXFKs1TCzkQ+ window._cf_chl_opt.cOgUHash);a.onload  function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName(head)0.appendChild(a);}());/script>/body>/html>

Subdomains

Date	Domain	IP
affiliate.rexla.com	2025-10-01	172.67.70.30
amb-snippet.rexla.com	2025-10-02	104.26.3.175

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > amb-snippet.rexla.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains