DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://bestheima.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://bestheima.com
- Submitted IP / ASN
172.120.146.43 AS18779 · EGIHosting
- Final URL
- http://www.bestheima.com/
- Final IP / ASN
- 172.120.146.43 AS18779 · EGIHOSTING
Final page
- Page title
- 太阳成集团·TYC33455CC(中国)有限公司-搜狗百科
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 2.6 KB (2637 bytes)
Detections
Activity
- HTTP requests
- 51
- Observed hosts
- 11
- Script records
- 23
Estimated HTTP data
- Sent
- ~23.6 KB
- Received
- ~1.20 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.bestheima.com | N/A | 2024-10-18 | 2025-12-18 | 2025-12-18 | 4.4 KB | 133.7 KB | 172.120.146.43 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. PHP:5.4.41 Programming languages PHP is a general-purpose scripting language used for web development. jQuery JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. Bootstrap UI frameworks Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components. |
| static202.yun300.cn 5 alerts | N/A | 2015-10-23 | 2021-06-18 | 2026-10-03 | 2.2 KB | 626 B | Not recorded | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Tengine Web servers Tengine is a web server which is based on the Nginx HTTP server. |
| p1.qhimg.com | 2264339 | 2011-02-17 | 2012-10-16 | 2026-10-16 | 429 B | 0 B | Not recorded | |
| js.users.51.la | 746636 | 2005-01-17 | 2012-05-30 | 2026-10-18 | 929 B | 0 B | Not recorded | |
| www.sogou.com | 93150 | 2001-12-19 | 2012-05-22 | 2026-10-16 | 565 B | 0 B | Not recorded | |
| img202.yun300.cn 16 alerts | N/A | 2015-10-23 | 2021-06-18 | 2026-10-03 | 7.4 KB | 0 B | Not recorded | |
| bestheima.com | N/A | 2024-10-18 | 2025-12-18 | 2025-12-18 | 880 B | 193 B | 172.120.146.43 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| dfs.yun300.cn | 3762091 | 2015-10-23 | 2017-08-21 | 2026-10-11 | 1.2 KB | 0 B | Not recorded | |
| www.zhu2021.cc | N/A | 2021-10-25 | 2021-10-30 | 2026-10-22 | 4.7 KB | 1.01 MB |  43.243.30.13 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. PHP:5.4.41 Programming languages PHP is a general-purpose scripting language used for web development. |
| www.zhong2021.cc | N/A | 2021-10-25 | 2021-10-30 | 2026-10-22 | 463 B | 53.7 KB | 43.243.30.15 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| kxlogo.knet.cn | 2843313 | 2003-03-17 | 2012-08-21 | 2026-10-15 | 503 B | 1.1 KB |  47.104.255.184 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Java Programming languages Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible. |