DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://eyes.lervs.ro
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://eyes.lervs.ro
- Submitted IP / ASN
15.204.247.166 AS16276 · OVH SAS
- Final URL
- https://eyes.lervs.ro/
- Final IP / ASN
- 15.204.247.166 AS16276 · OVH SAS
Final page
- Page title
- space
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 11.5 KB (11744 bytes)
Detections
Activity
- HTTP requests
- 56
- Observed hosts
- 10
- Script records
- 26
Estimated HTTP data
- Sent
- ~33.2 KB
- Received
- ~2.54 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| cdn.tailwindcss.com | 117330 | 2017-07-20 | 2018-07-09 | 2026-10-05 | 866 B | 399.1 KB |  104.26.3.143 | Vercel PaaS Vercel is a cloud platform for static frontends and serverless functions. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-10-04 | 2.8 KB | 216.4 KB | 142.250.178.99 | |
| cdn.holdbitter.com | N/A | 2026-09-28 | 2026-09-28 | 2026-10-05 | 2.8 KB | 254.1 KB | 104.21.89.77 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| eyes.lervs.ro | N/A | 2013-07-29 | 2026-10-08 | 2026-10-08 | 7.7 KB | 904.6 KB | 15.204.247.166 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Google Analytics Analytics Google Analytics is a free web analytics service that tracks and reports website traffic. Tailwind CSS UI frameworks Tailwind is a utility-first CSS framework. |
| static.nresystems.com | N/A | 2001-02-22 | 2026-05-13 | 2026-10-03 | 1.2 KB | 2.2 KB | 104.18.18.137 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| cdn.show-creative1.com 1 alerts | 392451 | 2024-08-20 | 2024-08-27 | 2026-10-05 | 469 B | 1.6 KB | 104.21.15.229 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. jQuery:3.2.1 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-10-04 | 1.0 KB | 20.5 KB | 142.250.178.42 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-10-04 | 5.1 KB | 526.5 KB | 142.250.178.40 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| bauval.org | N/A | 2026-09-02 | 2026-09-17 | 2026-10-05 | 9.5 KB | 145.0 KB | 104.21.56.28 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. |
| abscloud.org | N/A | 2026-09-03 | 2026-09-17 | 2026-10-02 | 1.4 KB | 128.2 KB | 104.21.58.237 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. |