DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://ferocitycandour.com/api/users?token=L2JoeG56Nmp4OG0_ZnN0dT0wMTllZjk4ZC1lYWQ0LTczNmQtODYyMS1lZWMxMmQzMjJlNDMma2V5PTcxNDA0NTUwN2M3NzZiODNjOTUwNGZmZGY5N2M0MTE3JnBzMT1iMDYxMGQ3NzdkOWYwMjE3ZTc0ZGVhMGMxZWRhNzQ2ZSZybXRjPXQmc2h0PXZsZnd6Z096amo2dzFyc0xIbHhwQXlEbmJmYUZvRUlIQU5BcUJnTDBtOEkmc2h2PTImc3QxPTE3ODIzMDMyODgwMTk1NDQzMjkmcGlpPSZpbj0mdXVpZD0
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://ferocitycandour.com/api/users?token=L2JoeG56Nmp4OG0_ZnN0dT0wMTllZjk4ZC1lYWQ0LTczNmQtODYyMS1lZWMxMmQzMjJlNDMma2V5PTcxNDA0NTUwN2M3NzZiODNjOTUwNGZmZGY5N2M0MTE3JnBzMT1iMDYxMGQ3NzdkOWYwMjE3ZTc0ZGVhMGMxZWRhNzQ2ZSZybXRjPXQmc2h0PXZsZnd6Z096amo2dzFyc0xIbHhwQXlEbmJmYUZvRUlIQU5BcUJnTDBtOEkmc2h2PTImc3QxPTE3ODIzMDMyODgwMTk1NDQzMjkmcGlpPSZpbj0mdXVpZD0
- Submitted IP / ASN
172.240.127.234 AS7979 · SERVERS-COM
- Final URL
- https://example.com/
- Final IP / ASN
104.20.23.154 AS13335 · CLOUDFLARENET
Final page
- Page title
- Example Domain
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 544 B (544 bytes)
Detections
Activity
- HTTP requests
- 4
- Observed hosts
- 3
- Script records
- 0
Estimated HTTP data
- Sent
- ~2.6 KB
- Received
- ~4.0 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| example.com | 235 | 1995-08-14 | 2013-07-30 | 2026-06-19 | 515 B | 826 B | 104.20.23.154 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| ferocitycandour.com 2 alerts | N/A | 2026-04-14 | 2026-05-19 | 2026-06-14 | 1.4 KB | 2.8 KB | 172.240.127.242 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| fhvfd.com | 122504 | 2016-04-25 | 2025-05-26 | 2026-06-23 | 719 B | 425 B |  139.45.195.5 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |