Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://grouchynewspaper.com/bn3-Vp0qP.2rlsj_PuXvBwzxJ-mz9A0BPCU_NEnFSGkHd-VJaKELlMK_WOWP5QKRd-lTlUXVUWm_lYZZVazbV-rdSe2flgB_eiEj1kElY-znNoPpRqG_Ns4tWumvp-WxayEz1Aq_TCTDREZFe-kHJIqJWKk_RMsNbOEP1-XRWSTTNUP_RWGXhYqZT-0bRcFdMe0_5gEhRiTjV-NlamknNot_bq0r1s2tT-UvJwqxayW_EAxBQCUD0-tFJGnHJIy_aKWLQM9NY-jPcQzRMSj_kU3VOWGXI-3ZMazbVck_MeWfEg2hM-mjFkjlMmD_RojpOqDrZ-ktYuTvEwz_OyTzRAkBM-zDYEmFdGn_QI9JMKTLc-3NMOTPIQy_OSTTIUyVM-iX1YkZZaW_Uc3dYejfE-0hZijjMkz_NmTnlohpN-jrks4tZuG_IwxxMyGzM-2BMCDDgE2_NGmHUI0JZ-jLEMzNMOC_ZQ6RbS2T5-lVaWWXQY9_Najbcc1dM-TfAg0hNiS_0k2lNmznU-xpMqDrQs2_?dseq=1&rsrc=popscript_popunder&sseq=1
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://grouchynewspaper.com/bn3-Vp0qP.2rlsj_PuXvBwzxJ-mz9A0BPCU_NEnFSGkHd-VJaKELlMK_WOWP5QKRd-lTlUXVUWm_lYZZVazbV-rdSe2flgB_eiEj1kElY-znNoPpRqG_Ns4tWumvp-WxayEz1Aq_TCTDREZFe-kHJIqJWKk_RMsNbOEP1-XRWSTTNUP_RWGXhYqZT-0bRcFdMe0_5gEhRiTjV-NlamknNot_bq0r1s2tT-UvJwqxayW_EAxBQCUD0-tFJGnHJIy_aKWLQM9NY-jPcQzRMSj_kU3VOWGXI-3ZMazbVck_MeWfEg2hM-mjFkjlMmD_RojpOqDrZ-ktYuTvEwz_OyTzRAkBM-zDYEmFdGn_QI9JMKTLc-3NMOTPIQy_OSTTIUyVM-iX1YkZZaW_Uc3dYejfE-0hZijjMkz_NmTnlohpN-jrks4tZuG_IwxxMyGzM-2BMCDDgE2_NGmHUI0JZ-jLEMzNMOC_ZQ6RbS2T5-lVaWWXQY9_Najbcc1dM-TfAg0hNiS_0k2lNmznU-xpMqDrQs2_?dseq=1&rsrc=popscript_popunder&sseq=1
- Submitted IP / ASN
88.85.69.212 AS35415 · Webzilla B.V.
- Final URL
- https://example.com/
- Final IP / ASN
104.18.27.120 AS13335 · CLOUDFLARENET
Final page
- Page title
- Example Domain
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 513 B (513 bytes)
Detections
Activity
- HTTP requests
- 10
- Observed hosts
- 4
- Script records
- 4
Estimated HTTP data
- Sent
- ~14.0 KB
- Received
- ~56.7 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| rcdn-web.com 1 alerts | 6313 | 2024-07-15 | 2024-07-25 | 2026-02-13 | 619 B | 3.3 KB |  184.51.252.142 | |
| fhvfd.com | 122504 | 2016-04-25 | 2025-05-26 | 2026-02-12 | 2.8 KB | 41.5 KB |  139.45.195.5 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| example.com | 235 | 1995-08-14 | 2013-07-30 | 2026-02-11 | 938 B | 1.5 KB | 104.18.27.120 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| grouchynewspaper.com | N/A | N/A | N/A | N/A | 2.4 KB | 10.3 KB | 88.85.69.212 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |