DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://18168nll.com/webapp/html/aozxy5/index.html
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://18168nll.com/webapp/html/aozxy5/index.html
- Submitted IP / ASN
34.92.134.216 AS396982 · GOOGLE-CLOUD-PLATFORM
- Final URL
- https://18168nll.com/webapp/html/aozxy5/index.html
- Final IP / ASN
- 34.92.134.216 AS396982 · GOOGLE-CLOUD-PLATFORM
Final page
- Page title
- 澳洲幸运5-中国体育、福利彩票、高频彩开奖结果查询调用接口API - 168彩票开奖网
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 40
- Observed hosts
- 2
- Script records
- 11
Estimated HTTP data
- Sent
- ~18.4 KB
- Received
- ~937.7 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 18168nll.com | N/A | 2026-03-18 | 2026-03-19 | 2026-03-19 | 10.9 KB | 715.7 KB | 34.92.134.216 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. jQuery:1.9.1 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| api.api168168.com 16 alerts | N/A | 2020-10-09 | 2020-10-09 | 2026-03-16 | 7.5 KB | 222.0 KB |  20.89.184.226 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |