DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://bysesayeveum.com/download/wlriwe54nkro/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://bysesayeveum.com/download/wlriwe54nkro/
- Submitted IP / ASN
104.21.79.112 AS13335 · CLOUDFLARENET
- Final URL
- https://bysesayeveum.com/download/wlriwe54nkro/
- Final IP / ASN
- 172.67.170.136 AS13335 · CLOUDFLARENET
Final page
- Page title
- id 566 ep 1 Warau Kangofu The Animation | Byse
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 16.6 KB (16965 bytes)
Detections
Activity
- HTTP requests
- 40
- Observed hosts
- 8
- Script records
- 23
Estimated HTTP data
- Sent
- ~24.5 KB
- Received
- ~5.96 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| bysesayeveum.com | N/A | 2025-11-07 | 2025-12-21 | 2026-04-04 | 10.0 KB | 2.24 MB | 172.67.170.136 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| e7cod.com 1 alerts | N/A | 2021-09-07 | 2025-12-09 | 2026-04-11 | 408 B | 111.5 KB |  139.45.197.233 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-04-05 | 2.5 KB | 74.4 KB |  142.251.152.119 | |
| my.rtmark.net | 43911 | 2014-10-29 | 2015-02-04 | 2026-04-08 | 479 B | 839 B | 172.64.146.234 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2026-04-05 | 3.3 KB | 3.49 MB | 172.217.20.163 | |
| rkv1.com 2 alerts | N/A | 2022-04-12 | 2025-08-07 | 2026-04-09 | 1.9 KB | 1.6 KB | 139.45.197.115 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| vmulkkomywekhcp.com | N/A | N/A | N/A | N/A | 979 B | 1.3 KB | 139.45.197.163 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-04-05 | 543 B | 40.0 KB | 172.217.19.227 |