Quad9 DNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://oafylxs.info/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://oafylxs.info/
- Submitted IP / ASN
104.21.89.184 AS13335 · CLOUDFLARENET
- Final URL
- https://www.google.com/webhp?sca_esv=7323de7827af4722&source=hp&ei=lGhPabbZEaGsxc8P_cPukAk&iflsig=AOw8s4IAAAAAaU92pMR7dNjiNTZXofW5LGtZgTlRmxtN
- Final IP / ASN
142.250.178.36 AS15169 · GOOGLE
Final page
- Page title
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 234.2 KB (239805 bytes)
Detections
Activity
- HTTP requests
- 238
- Observed hosts
- 7
- Script records
- 133
Estimated HTTP data
- Sent
- ~325.3 KB
- Received
- ~21.54 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2025-12-21 | 3.7 KB | 275.7 KB | 142.250.178.35 | |
| csp.withgoogle.com | 4614 | 2008-11-17 | 2015-10-29 | 2025-12-22 | 3.3 KB | 11.4 KB | 142.250.178.49 | |
| oafylxs.info 1 alerts | N/A | 2025-01-23 | 2025-12-27 | 2025-12-27 | 481 B | 164.7 KB | 188.114.96.1 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2025-12-21 | 276.7 KB | 19.56 MB | 142.250.178.36 | Google Web Server Web servers Not recorded HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2025-12-21 | 7.3 KB | 1.53 MB | 142.250.178.67 | |
| ogads-pa.clients6.google.com | 508 | 1997-09-15 | 2025-03-25 | 2025-12-21 | 12.1 KB | 8.6 KB | 142.250.178.106 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| play.google.com | 48 | 1997-09-15 | 2013-05-30 | 2025-12-21 | 6.9 KB | 4.0 KB | 142.250.178.78 |