DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://bforex.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://bforex.com
- Submitted IP / ASN
52.20.84.62 AS14618 · Amazon.com, Inc.
- Final URL
- https://www.atom.com/name/BForex
- Final IP / ASN
104.18.17.52 AS13335 · CLOUDFLARENET
Final page
- Page title
- BForex.com — Premium Domain For Sale | Atom
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 471.3 KB (482655 bytes)
Detections
Activity
- HTTP requests
- 65
- Observed hosts
- 10
- Script records
- 66
Estimated HTTP data
- Sent
- ~277.9 KB
- Received
- ~4.03 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.atom.com | 108646 | 1995-06-22 | 2012-06-21 | 2026-10-17 | 50.8 KB | 1.31 MB | 104.18.17.52 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. Google Tag Manager Tag managers Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app. Google Sign-in Authentication Google Sign-In is a secure authentication system that reduces the burden of login for users, by enabling them to sign in with their Google account. PHP Programming languages PHP is a general-purpose scripting language used for web development. |
| img.atom.com | 1931851 | 1995-06-22 | 2024-04-08 | 2026-10-20 | 8.0 KB | 12.6 KB |  195.181.166.158 | Bunny CDN Not recorded |
| brunhild.challenges.cloudflare.com | N/A | 2009-02-17 | 2026-06-24 | 2026-10-21 | 628 B | 0 B | Not recorded | |
| accounts.google.com | 103 | 1997-09-15 | 2012-05-23 | 2026-10-19 | 457 B | 269.9 KB | 172.253.148.84 | |
| analytics.atom.com | N/A | 1995-06-22 | 2025-08-17 | 2026-10-18 | 1005 B | 1.4 KB | 104.18.16.52 | Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bforex.com 1 alerts | N/A | 2001-11-25 | 2025-12-27 | 2026-02-05 | 479 B | 326 B | 52.20.84.62 | OpenResty Web servers OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| app.termly.io | 65677 | 2016-07-26 | 2017-12-19 | 2026-10-17 | 5.3 KB | 528.1 KB | 104.18.15.11 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-10-18 | 7.2 KB | 1.25 MB | 104.18.95.41 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-10-18 | 555 B | 2.4 KB | 142.250.178.106 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-10-18 | 472 B | 686.5 KB | 142.250.178.104 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |