Report Overview
Visitedpublic
2025-09-29 03:08:22
Tags
Submit Tags
URL
kosmha.com
Finishing URL
xenorawebnet.com/lander-1/?clickid=d3cvg76071bc73dtk8fg&domain=traffichubcontrol.com
IP / ASN
172.67.151.196
Title
...
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
15
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
wayfarerorthodox.com 2 alert(s) on this Host | unknown | 2024-09-03 | 2025-08-08 | 2025-09-29 | 524 B | 0 B | 0.0.0.0 | |
preferencenail.com 3 alert(s) on this Host | 20606 | 2025-07-01 | 2025-07-08 | 2025-09-24 | 408 B | 86 kB |  185.196.197.71 |  |
kettledroopingcontinuation.com 4 alert(s) on this Host | 196057 | 2024-09-01 | 2025-07-30 | 2025-09-28 | 2.6 kB | 10 kB |  172.240.108.76 |  |
traffichubcontrol.com | unknown | 2025-08-27 | 2025-09-10 | 2025-09-26 | 728 B | 31 kB |  168.119.149.123 | |
kosmha.com | 1132854 | 2025-06-05 | 2025-08-03 | 2025-09-06 | 479 B | 15 kB | 104.21.88.184 |  |
www.highperformanceformat.com 6 alert(s) on this Host | 366864 | 2024-10-15 | 2024-10-23 | 2025-09-22 | 910 B | 77 kB | 172.240.253.132 | |
professionaltrafficmonitor.com | 16376 | 2025-01-23 | 2025-01-25 | 2025-09-28 | 886 B | 838 B | 3.123.144.251 | |
ngonovideo.top 2 alert(s) on this Host | unknown | 2025-04-15 | 2025-05-19 | 2025-09-06 | 864 B | 2.7 kB | 104.21.87.222 | |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2025-09-28 | 574 B | 20 kB | 142.250.178.99 | |
www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2025-09-28 | 431 B | 420 kB | 142.250.178.104 | |
pl27560162.revenuecpmgate.com 4 alert(s) on this Host | unknown | 2025-08-29 | 2025-09-29 | 2025-09-29 | 457 B | 77 kB | 172.240.108.68 | |
fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2025-09-28 | 444 B | 6.7 kB | 142.250.178.106 | |
xenorawebnet.com | unknown | 2025-08-29 | 2025-09-26 | 2025-09-26 | 3.7 kB | 135 kB | 172.67.133.174 | |
Nginx:1.21.6 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | www.highperformanceformat.com | malicious | Sinkholed |
| Cloudflare DNS | www.highperformanceformat.com | malicious | Sinkholed |
| Hagezi Threat Feed | www.highperformanceformat.com | malicious | Sinkholed |
| Hagezi Threat Feed | wayfarerorthodox.com | malicious | Sinkholed |
| Quad9 DNS | wayfarerorthodox.com | malicious | Sinkholed |
| Cloudflare DNS | preferencenail.com | malicious | Sinkholed |
| Hagezi Threat Feed | preferencenail.com | malicious | Sinkholed |
| DNS4EU | preferencenail.com | malicious | Sinkholed |
| DNS0 Zero | ngonovideo.top | malicious | Sinkholed |
| Hagezi Threat Feed | kettledroopingcontinuation.com | malicious | Sinkholed |
| Quad9 DNS | kettledroopingcontinuation.com | malicious | Sinkholed |
| Cloudflare DNS | pl27560162.revenuecpmgate.com | malicious | Sinkholed |
| DNS0 Zero | pl27560162.revenuecpmgate.com | malicious | Sinkholed |
| Hagezi Threat Feed | pl27560162.revenuecpmgate.com | malicious | Sinkholed |
| Quad9 DNS | pl27560162.revenuecpmgate.com | malicious | Sinkholed |
JavaScript (11)
No JavaScripts
HTTP Transactions (23)
| URL | IP | Response | Size |
|---|