Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://ams.re3r.com/impcs/Snydk8QMUb22qd_QKEvqoEDUXmOmvqtuSx_v84RYNmqAUPGW6bQ2indvXQi_bxWbA1teW805TzQz0cLiJlg9N6FRbOcssHOrkCv1j5x-FqZsQ_c2XdU5uiGUF7_ui1NGVJG6ackJHMOXUJ8D9MQGvtecnYqJRkjitx1goji_G6u9_8-_MTkPdN6xD36u49W5hGuLWiumLEb9laPb4EbFqG1cmVXyPo-AMGLvMqw8LehIGIfskGinPaoPnbMEUk8DzlbrecE9J6JTPK6NVRI1w6E-Jik7tH7sxWoN_T6IJUuIVr5OB7jIUAUYi2ha_oF_BUUNXw8YvDLpTpJf
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://ams.re3r.com/impcs/Snydk8QMUb22qd_QKEvqoEDUXmOmvqtuSx_v84RYNmqAUPGW6bQ2indvXQi_bxWbA1teW805TzQz0cLiJlg9N6FRbOcssHOrkCv1j5x-FqZsQ_c2XdU5uiGUF7_ui1NGVJG6ackJHMOXUJ8D9MQGvtecnYqJRkjitx1goji_G6u9_8-_MTkPdN6xD36u49W5hGuLWiumLEb9laPb4EbFqG1cmVXyPo-AMGLvMqw8LehIGIfskGinPaoPnbMEUk8DzlbrecE9J6JTPK6NVRI1w6E-Jik7tH7sxWoN_T6IJUuIVr5OB7jIUAUYi2ha_oF_BUUNXw8YvDLpTpJf
- Submitted IP / ASN
172.67.154.71 AS13335 · CLOUDFLARENET
- Final URL
- https://fhvfd.com/api/submit_form_request?p=dc1d354b-043b-4745-86aa-acf91b08dd5d&ts=1783457152&z=10940941
- Final IP / ASN
139.45.195.5 AS9002 · RETN Limited
Final page
- Page title
- Redirect
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 44.9 KB (46021 bytes)
Detections
Activity
- HTTP requests
- 9
- Observed hosts
- 6
- Script records
- 2
Estimated HTTP data
- Sent
- ~9.5 KB
- Received
- ~44.6 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| fhvfd.com | 122504 | 2016-04-25 | 2025-05-26 | 2026-07-07 | 2.4 KB | 41.1 KB | 139.45.195.5 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| guce.yahoo.com | 23222 | 1995-01-18 | 2018-03-16 | 2026-07-04 | 626 B | 0 B | Not recorded | |
| rcdn-web.com 1 alerts | 6313 | 2024-07-15 | 2024-07-25 | 2026-06-23 | 619 B | 397 B |  45.133.44.2 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| m1rs.com | N/A | 2024-03-05 | 2025-11-27 | 2026-07-05 | 560 B | 827 B | 172.67.187.131 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.yahoo.com | 1472 | 1995-01-18 | 2012-05-20 | 2026-07-03 | 517 B | 1.5 KB |  188.125.94.204 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Apache Traffic Server Web servers Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features. |
| ams.re3r.com | N/A | N/A | N/A | N/A | 823 B | 945 B | 172.67.154.71 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |