Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://www.google.com/share.google?q=T291UHDHL5xM9Fb3T
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://www.google.com/share.google?q=T291UHDHL5xM9Fb3T
- Submitted IP / ASN
142.251.154.119 AS15169 · Google LLC
- Final URL
- https://sites.google.com/ar-invoice.com/primexsync/
- Final IP / ASN
- 142.250.178.110 AS15169 · GOOGLE
Final page
- Page title
- Primex Sync
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 110.0 KB (112679 bytes)
Detections
Activity
- HTTP requests
- 47
- Observed hosts
- 12
- Script records
- 18
Estimated HTTP data
- Sent
- ~66.7 KB
- Received
- ~5.31 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| apis.google.com | 1075 | 1997-09-15 | 2013-05-06 | 2026-10-05 | 5.0 KB | 476.6 KB | 142.250.178.78 | |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-10-04 | 515 B | 798 B | 142.251.157.119 | Google Web Server Web servers Not recorded |
| c3b29691-7d11-a6d8-d27f-adobe3.jeff-13d.workers.dev | N/A | N/A | 2026-10-06 | 2026-10-06 | 662 B | 4.5 KB |  104.21.52.171 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| 555881872-atari-embeds.googleusercontent.com | N/A | 2008-11-17 | 2026-10-06 | 2026-10-06 | 787 B | 11.3 KB | 142.250.178.33 | Bootstrap UI frameworks Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. |
| spx.mayco-build.com 3 alerts | N/A | 2026-06-18 | 2026-07-13 | 2026-09-18 | 1.9 KB | 56.9 KB | 172.67.205.210 | Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| sites.google.com | 421 | 1997-09-15 | 2012-05-21 | 2026-09-30 | 4.5 KB | 137.1 KB | 142.250.178.110 | |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-10-04 | 1.6 KB | 65.2 KB | 142.250.178.42 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-10-04 | 4.5 KB | 260.7 KB | 142.250.178.35 | |
| play.google.com | 48 | 1997-09-15 | 2013-05-30 | 2026-10-05 | 4.6 KB | 3.8 KB | 142.250.178.110 | |
| 1.1.1.1 | N/A | N/A | 2012-05-30 | 2019-03-28 | 535 B | 536 B | 1.1.1.1 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| drive.google.com | 108 | 1997-09-15 | 2012-10-03 | 2026-10-02 | 896 B | 1.6 KB | 142.250.178.46 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2026-10-04 | 7.8 KB | 4.31 MB | 142.250.178.99 |