DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://ycbjqxfoivrf.men/rt5rv0ey4hpbwrtaq/u5cyzg/lz/wq0623
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://ycbjqxfoivrf.men/rt5rv0ey4hpbwrtaq/u5cyzg/lz/wq0623
- Submitted IP / ASN
172.67.152.253 AS13335 · CLOUDFLARENET
- Final URL
- https://example.com/
- Final IP / ASN
- 104.20.23.154 AS13335 · CLOUDFLARENET
Final page
- Page title
- Example Domain
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 544 B (544 bytes)
Detections
Activity
- HTTP requests
- 5
- Observed hosts
- 4
- Script records
- 0
Estimated HTTP data
- Sent
- ~2.8 KB
- Received
- ~4.0 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| shypublishedeternity.com 1 alerts | N/A | 2026-05-07 | 2026-06-17 | 2026-07-04 | 550 B | 1.8 KB |  172.240.127.234 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| fhvfd.com | 122504 | 2016-04-25 | 2025-05-26 | 2026-06-30 | 1.2 KB | 610 B |  139.45.195.5 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| example.com | 235 | 1995-08-14 | 2013-07-30 | 2026-07-03 | 515 B | 825 B | 104.20.23.154 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| ycbjqxfoivrf.men 1 alerts | N/A | 2026-07-01 | 2026-07-04 | 2026-07-04 | 519 B | 840 B | 172.67.152.253 | PHP:8.4.11 Programming languages PHP is a general-purpose scripting language used for web development. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |