WEBSITE ANALYSIS REPORT

http://pub4077.zbuef.online/

27 Jun 2026 · 09:55:26.000 UTCpublic

Report tags
Submit tags

Request review

Domain graph

Hostnames and connections captured in this scan

Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds

Timestamp (UTC) Method Status Host / path Type Size Duration Signals

09:55:03.261 GET 302 document 0 B 346 ms 2 alerts

09:55:03.618 GET 301 document 0 B 204 ms 1 alerts

09:55:03.827 GET 200 document 10.0 KB 289 ms 2 alerts

Transaction #03

Request / response

URL

GET HTTPS

https://security.atonads.me/

IP / ASN

104.21.43.224

AS13335 · CLOUDFLARENET

Requested by: Not recorded

Resource information

File type: HTML document, Unicode text, UTF-8 text, with CRLF line terminators
MIME type: text/html; charset=UTF-8
First seen (UTC): 27 Jun 2026 · 09:55:28.377 UTC
Last seen (UTC): 27 Jun 2026 · 09:55:28.377 UTC
Times seen: 1

Size: 10.0 KB (10267 bytes)
MD5: 7a6bdd5f5d7b8e117f715bfd5453c17b
SHA1: bf62c62e2ed56980846cf89e788d3a41fbfa45b7
SHA256: f8e68c96ae66e54b186a8b3bfbae4a840c305ab14c5837b470d498ba87190fa9

Certificate information

Issuer: Google Trust Services · WE1
Subject: atonads.me
Protocol / cipher: TLSv1.3 · TLS_AES_128_GCM_SHA256
SHA1 fingerprint: 55:14:09:D3:0D:6A:0D:F6:99:B3:D7:1C:65:94:79:6D:80:C9:50:41
Valid from: Sun, 24 May 2026 21:22:56 GMT
Valid until: Sat, 22 Aug 2026 22:22:48 GMT

Technology fingerprints

HSTS (Security)
PHP (Programming languages)
Cloudflare (CDN)
Engintron (Web server extensions)

Detections

Detection observations attached to this HTTP transaction.
Detection	Severity	Verdict
Cloudflare DNS Sinkholed	medium	Malicious
DNS4EU Sinkholed	medium	Malicious

HTTP headers

Request headers

GET / HTTP/1.1
Host: security.atonads.me
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/3 200 
server: cloudflare
date: Sat, 27 Jun 2026 09:55:04 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
set-cookie: PHPSESSID=366f9a84b1f952b46e60ec24ceae66f4; path=/
x-content-type-options: nosniff, nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block, 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains
referrer-policy: same-origin
x-permitted-cross-domain-policies: none
permissions-policy: geolocation=(), microphone=(), camera=()
x-nginx-upstream-cache-status: EXPIRED
x-server-powered-by: Engintron
priority: u=0,i
cf-cache-status: DYNAMIC
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=UCcZdKbtmFXw7D6KwlvGNHvhRlxnv9d0%2BKcy7p5N8y%2FtIxJyG6t9tfb%2BSMHFw1lfz09W39XjD1UbO6kXAQX8I6%2FkTUmlcoBHLQU%2BWFHmP3fAJtj%2FHEtn7begGpDc9wWBDC5ggglO"}]}
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
content-encoding: zstd
cf-ray: a12392ed89bb569d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

09:55:04.479 GET 404 img 355 B 12 ms 2 alerts

http://pub4077.zbuef.online/

Domain graph

Hostnames

Connections