DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://m35.ygqcbja.com/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://m35.ygqcbja.com/
- Submitted IP / ASN
23.82.16.56 AS7203 · Leaseweb USA, Inc.
- Final URL
- http://ww547.ygqcbja.com/?tkn=19vnMT3S
- Final IP / ASN
- 34.160.121.137 AS396982 · GOOGLE-CLOUD-PLATFORM
Final page
- Page title
- ygqcbja.com
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 41.1 KB (42058 bytes)
Detections
Activity
- HTTP requests
- 17
- Observed hosts
- 7
- Script records
- 2
Estimated HTTP data
- Sent
- ~11.0 KB
- Received
- ~130.9 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| m35.ygqcbja.com 1 alerts | N/A | 2025-09-24 | 2025-10-11 | 2026-07-05 | 484 B | 370 B |  78.157.209.171 | Cowboy Web servers Cowboy is a small, fast, modular HTTP server written in Erlang. Erlang Programming languages Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system. |
| appreports.net | 566099 | 2022-02-08 | 2022-02-17 | 2026-10-11 | 1.4 KB | 1.6 KB |  104.21.24.58 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |
| search.yahoo.com | 1221 | 1995-01-18 | 2012-05-22 | 2026-10-09 | 866 B | 0 B | Not recorded | |
| xmlp.search.yahoo.com | 208467 | 1995-01-18 | 2019-09-24 | 2026-10-10 | 871 B | 0 B | Not recorded | |
| ww547.ygqcbja.com 10 alerts | N/A | 2025-09-24 | 2026-10-13 | 2026-10-13 | 5.4 KB | 95.8 KB | 34.160.121.137 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. |
| s.appreports.net | N/A | 2022-02-08 | 2023-03-07 | 2026-10-11 | 472 B | 7.2 KB | 34.149.1.127 | Google Cloud Storage Miscellaneous Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. Google Cloud IaaS Google Cloud is a suite of cloud computing services. Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. |
| s.yimg.com | 4553 | 1997-05-14 | 2012-05-20 | 2026-10-12 | 473 B | 25.9 KB |  188.125.94.204 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Apache Traffic Server Web servers Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features. Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |