DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://downloadnow.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://downloadnow.com
- Submitted IP / ASN
35.240.39.231 AS396982 · Google LLC
- Final URL
- https://download.cnet.com/
- Final IP / ASN
151.101.1.91 AS54113 · FASTLY
Final page
- Page title
- Free Software Downloads and Reviews for Windows, Android, Mac, and iOS - CNET Download
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 585.9 KB (599982 bytes)
Detections
Activity
- HTTP requests
- 59
- Observed hosts
- 14
- Script records
- 25
Estimated HTTP data
- Sent
- ~44.3 KB
- Received
- ~4.89 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| push-sdk.com | 36212 | 2022-10-25 | 2022-12-23 | 2026-10-17 | 1.5 KB | 77.1 KB |  157.90.33.121 | Angie Web servers Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version. C Programming languages C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system. Perl Programming languages Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages. |
| cdn.cookielaw.org | 2972 | 2011-06-20 | 2013-12-28 | 2026-10-19 | 490 B | 706.3 KB |  104.18.87.42 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| ep1.adtrafficquality.google | 3093 | 2023-11-17 | 2024-07-24 | 2026-10-20 | 545 B | 11.4 KB | 142.250.178.98 | |
| geolocation.onetrust.com | 4022 | 2004-01-12 | 2018-02-07 | 2026-10-19 | 501 B | 436 B | 104.18.32.137 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.google.no | 92680 | 2001-02-26 | 2012-06-26 | 2026-10-19 | 900 B | 578 B | 142.250.178.99 | |
| assets.dwncdn.net 8 alerts | 2992801 | 2024-01-08 | 2024-04-02 | 2026-08-16 | 4.0 KB | 164.8 KB | 151.101.1.91 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Varnish Caching Varnish is a reverse caching proxy. |
| www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-10-18 | 975 B | 895.8 KB | 142.250.178.72 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| download.cnet.com 20 alerts | 13572 | 1994-03-05 | 2012-05-21 | 2026-08-16 | 21.2 KB | 2.83 MB | 151.101.1.91 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Google Analytics Analytics Google Analytics is a free web analytics service that tracks and reports website traffic. OneTrust Cookie compliance OneTrust is a cloud-based data privacy management compliance platform. Google Tag Manager Tag managers Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app. |
| www.cnet.com | 24760 | 1994-03-05 | 2012-05-21 | 2026-10-20 | 670 B | 379 B | 192.0.66.145 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| ep2.adtrafficquality.google | 3229 | 2023-11-17 | 2024-08-13 | 2026-10-20 | 1.0 KB | 36.7 KB | 142.250.178.33 | |
| uidsync.net | 36249 | 2021-07-23 | 2021-07-23 | 2026-10-22 | 1.1 KB | 1.7 KB | 157.90.33.72 | Angie Web servers Angie is a drop-in replacement for the Nginx web server aiming to extend the functionality of the original version. C Programming languages C is a general-purpose, procedural computer programming language supporting structured programming, lexical variable scope, and recursion, with a static type system. Perl Programming languages Perl is a family of two high-level, general-purpose, interpreted, dynamic programming languages. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-10-18 | 468 B | 121.1 KB | 142.251.153.119 | |
| images.dwncdn.net 15 alerts | 2814588 | 2024-01-08 | 2024-01-11 | 2026-10-14 | 9.2 KB | 86.5 KB | 151.101.1.91 | Varnish Caching Varnish is a reverse caching proxy. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| downloadnow.com | 909341 | 1996-02-23 | 2025-12-01 | 2025-12-01 | 484 B | 242 B | 35.240.39.231 | PHP:8.3.36 Programming languages PHP is a general-purpose scripting language used for web development. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |