DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://www.effectivecpmnetwork.com/bqr9di0w?key=2e461306783051972767bfe22c10dee0
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://www.effectivecpmnetwork.com/bqr9di0w?key=2e461306783051972767bfe22c10dee0
- Submitted IP / ASN
23.111.84.220 AS7979 · Servers.com, Inc.
- Final URL
- https://waldschrat.net/c881l7k.php?key=100gqh2v9pxy7j6rsali&PLACEMENT_ID=30839951&CAMPAIGN_ID=1440357&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0&REMOTE_LANGUAGE=11&BANNER_ID=3801849
- Final IP / ASN
- 5.45.95.54 AS58061 · Scalaxy B.V.
Final page
- Page title
- SeX
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 8.6 KB (8757 bytes)
Detections
Activity
- HTTP requests
- 14
- Observed hosts
- 2
- Script records
- 2
Estimated HTTP data
- Sent
- ~12.5 KB
- Received
- ~487.4 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| waldschrat.net | N/A | 2026-01-26 | 2026-05-20 | 2026-09-08 | 10.0 KB | 484.0 KB | 5.45.95.54 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| www.effectivecpmnetwork.com 2 alerts | N/A | 2026-05-14 | 2026-05-16 | 2026-09-06 | 2.4 KB | 3.4 KB |  172.240.127.242 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |