DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://mxcheckunder.shop/visit/935575e2-9868-42ad-8c52-ac4a90499d75
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://mxcheckunder.shop/visit/935575e2-9868-42ad-8c52-ac4a90499d75
- Submitted IP / ASN
15.197.197.46 AS16509 · Amazon.com, Inc.
- Final URL
- https://cdntechone.com/r.html?axadvid=1053995&axcamid=3117&axcid=e7ddf874-40d2-43d7-b8fd-56541bff0853&axcusid1=15585&axcusid2=Smartlink&axtsid=4413680&clid=%7Bymid%7D&expires=1789919283&ip=195.64.118.152&md5Ip=xM6np5WJPeur26-zNQ6EeA&r=http%3A%2F%2Fnya5.com%2Flink%3Fz%3D4413680%26var%3D15585%26ymid%3Dmu9zdb54595o7e2sxe04kk04o%2C19218412%2C5%2C15585%26acb%3Dproxy-smart-link&sg=CXwvWzMQF4kIBj0VLZfxXw&sgi=0kxhiuu4lFWph7IUKcuAhg&sgp=EBmaqbiK0N6l_f6xMe3zuw&sgr=cpXmTsNBzVDwBp4sFPVktw&sgt=1789918683&sgu=rDndH1b_o8iRurir8cAJDQ&zdekrIp=oZBFQx8VJaDkmhJrOgrn-g
- Final IP / ASN
172.67.195.28 AS13335 · CLOUDFLARENET
Final page
- Page title
- Checking you browser...
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 19.6 KB (20065 bytes)
Detections
Activity
- HTTP requests
- 6
- Observed hosts
- 5
- Script records
- 1
Estimated HTTP data
- Sent
- ~4.2 KB
- Received
- ~24.6 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| cdntechone.com | 31929 | 2021-12-24 | 2021-12-24 | 2026-09-16 | 1014 B | 20.3 KB | 172.67.195.28 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| datatechone.com | 36334 | 2021-12-24 | 2015-06-17 | 2026-08-25 | 594 B | 0 B |  185.49.145.45 | |
| mxcheckunder.shop 1 alerts | N/A | N/A | 2026-09-20 | 2026-09-20 | 528 B | 918 B | 15.197.197.46 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| 126d5636131e.crisp-foam.com | N/A | 2026-07-14 | 2026-09-12 | 2026-09-12 | 562 B | 662 B |  94.237.100.210 | |
| nya5.com 2 alerts | 500457 | 2018-02-24 | 2025-06-27 | 2026-09-19 | 1.6 KB | 2.7 KB | 104.18.33.160 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |