DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://login.scgss-cn.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://login.scgss-cn.com
- Submitted IP / ASN
104.21.24.80 AS13335 · Cloudflare, Inc.
- Final URL
- https://foundr.com/
- Final IP / ASN
141.193.213.21 AS209242 · Cloudflare London, LLC
Final page
- Page title
- Build Your Business with Foundr
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 308.4 KB (315765 bytes)
Detections
Activity
- HTTP requests
- 130
- Observed hosts
- 16
- Script records
- 76
Estimated HTTP data
- Sent
- ~98.6 KB
- Received
- ~5.46 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| foundr.com | 188359 | 2006-02-09 | 2017-05-12 | 2026-10-06 | 65.4 KB | 2.58 MB | 141.193.213.21 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Yoast SEO Premium:27.3 SEO Yoast SEO Premium is a search engine optimisation plugin for WordPress and other platforms. Lodash JavaScript libraries Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm. Google Tag Manager Tag managers Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app. Yoast SEO:27.3 SEO, WordPress plugins Yoast SEO is a search engine optimisation plugin for WordPress and other platforms. WordPress CMS, Blogs WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system. EWWW Image Optimizer WordPress plugins, Performance EWWW Image Optimizer is an image optimisation WordPress plugin designed to improve the performance of your website. PHP Programming languages PHP is a general-purpose scripting language used for web development. cdnjs CDN cdnjs is a free distributed JS library delivery service. jQuery:3.3.1 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. jQuery Migrate:3.4.1 JavaScript libraries Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9. jQuery CDN CDN jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder. MySQL Databases MySQL is an open-source relational database management system. WP Rocket Caching, WordPress plugins WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites. WP Engine PaaS, Hosting WP Engine is a website hosting provider. Slick JavaScript libraries Not recorded Genesis theme WordPress themes Genesis theme is a WordPress theme that has been developed using the Genesis Framework from Studiopress. jsDelivr CDN JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration. |
| fbcapi.foundr.com | N/A | 2006-02-09 | 2022-07-01 | 2026-10-08 | 2.1 KB | 4.1 KB | 104.26.12.32 | Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| js.hs-scripts.com | 18499 | 2016-07-11 | 2016-08-09 | 2026-10-05 | 454 B | 4.1 KB | 104.16.140.209 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-10-11 | 482 B | 85.9 KB | 104.17.25.14 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2026-10-11 | 2.6 KB | 55.8 KB | 151.101.129.229 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| lg.hyr.so | 214656 | 2021-04-12 | 2024-08-12 | 2026-10-08 | 1.2 KB | 1.2 KB | 44.205.238.47 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| consentcdn.cookiebot.com | 35798 | 2010-01-21 | 2018-05-23 | 2026-10-05 | 1.1 KB | 2.3 KB |  2.20.163.160 | Akamai CDN Akamai is global content delivery network (CDN) services provider for media and software delivery, and cloud security solutions. |
| consent.cookiebot.com | 29038 | 2010-01-21 | 2014-02-26 | 2026-10-05 | 1.1 KB | 119.4 KB | 95.101.11.168 | |
| www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-10-11 | 1.9 KB | 1.93 MB | 142.250.178.40 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| maxcdn.bootstrapcdn.com | 6807 | 2012-05-25 | 2014-06-18 | 2026-10-05 | 521 B | 31.2 KB | 104.18.11.207 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| foundrstaging.wpengine.com | N/A | 2010-03-10 | 2025-11-05 | 2026-10-02 | 587 B | 734 B | 130.211.29.77 | Google Cloud Storage Miscellaneous Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-10-11 | 1.2 KB | 26.2 KB | 142.250.178.42 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| login.scgss-cn.com 1 alerts | N/A | 2026-03-27 | 2026-10-12 | 2026-10-12 | 487 B | 560 B | 172.67.218.15 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-10-11 | 3.7 KB | 206.4 KB | 142.250.178.35 | |
| hyros-t.foundr.com | N/A | 2006-02-09 | 2022-01-02 | 2026-10-08 | 15.0 KB | 350.6 KB | 52.205.62.94 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2026-10-12 | 453 B | 88.5 KB | 151.101.65.155 | Varnish Caching Varnish is a reverse caching proxy. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |