DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://pub4021.zbuef.online/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://pub4021.zbuef.online/
- Submitted IP / ASN
104.21.55.201 AS13335 · CLOUDFLARENET
- Final URL
- https://atonads.me/
- Final IP / ASN
- 172.67.186.184 AS13335 · CLOUDFLARENET
Final page
- Page title
- اتون ادس - حلول التسويق الرقمي الاحترافية
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 27.3 KB (27999 bytes)
Detections
Activity
- HTTP requests
- 7
- Observed hosts
- 4
- Script records
- 3
Estimated HTTP data
- Sent
- ~3.3 KB
- Received
- ~48.5 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| atonads.me 3 alerts | N/A | 2025-05-29 | 2025-11-12 | 2026-02-01 | 1.4 KB | 32.1 KB | 172.67.186.184 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| pub4021.zbuef.online | N/A | 2025-09-02 | 2026-02-02 | 2026-02-02 | 489 B | 911 B | 172.67.172.165 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Engintron Web server extensions Engintron is a plugin that integrates Nginx to cPanel/WHM server. |
| s.nogoum15may.com 1 alerts | N/A | 2025-07-20 | 2025-08-24 | 2026-02-01 | 486 B | 6.8 KB | 172.67.152.126 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| security.atonads.me 2 alerts | N/A | 2025-05-29 | 2025-08-24 | 2026-02-01 | 985 B | 8.7 KB | 172.67.186.184 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. PHP Programming languages PHP is a general-purpose scripting language used for web development. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |