DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://dedirectnewhose4.cloudaccess.host/?email=dues.zion@hotmail.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://dedirectnewhose4.cloudaccess.host/?email=dues.zion@hotmail.com
- Submitted IP / ASN
185.187.254.203 AS29024 · Hostek AB
- Final URL
- https://ipfs.io/ipfs/bafybeibie6jum3aze7lgzc5j2v3qsjneiaagwpeqgyqblzweabkmea4uoq/?cms=dues.zion@hotmail.com
- Final IP / ASN
209.94.90.1 AS40680 · PROTOCOL
Final page
- Page title
- Webmail Login
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 179.2 KB (183518 bytes)
Detections
Activity
- HTTP requests
- 32
- Observed hosts
- 6
- Script records
- 4
Estimated HTTP data
- Sent
- ~18.0 KB
- Received
- ~600.3 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
2DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
IDS
1Suricata IDS ET INFO Observed Peer-to-Peer File Sharing Service Domain (ipfs .io in TLS SNI)
VerdictVerdict not recorded
Severitymedium
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| code.jquery.com | 4915 | 2005-12-10 | 2012-05-21 | 2025-11-09 | 437 B | 88.0 KB | 151.101.130.137 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Varnish Caching Varnish is a reverse caching proxy. |
| sh001.webhostbox.net 15 alerts | N/A | 2010-02-11 | 2020-01-26 | 2025-11-07 | 8.5 KB | 317.5 KB | 162.241.27.10 | |
| ipfs.io 14 alerts | 19271 | 2014-05-16 | 2015-09-09 | 2025-11-12 | 4.3 KB | 184.5 KB | 209.94.90.1 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. IPFS Network storage IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web. jQuery:3.6.0 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. jQuery CDN CDN jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder. |
| ipfs.tech 6 alerts | 57535 | 2020-05-28 | 2021-02-03 | 2025-11-07 | 3.3 KB | 9.4 KB |  84.17.46.54 | Bunny CDN Not recorded IPFS Network storage IPFS is a peer-to-peer hypermedia protocol that provides a distributed hypermedia web. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| huvpharma.com | N/A | 2022-12-05 | 2022-12-05 | 2025-11-11 | 913 B | 0 B |  0.0.0.0 | |
| dedirectnewhose4.cloudaccess.host | N/A | 2014-12-22 | 2025-11-11 | 2025-11-11 | 530 B | 843 B | 185.187.254.203 | PHP:8.1.33 Programming languages PHP is a general-purpose scripting language used for web development. Apache HTTP Server Web servers Apache is a free and open-source cross-platform web server software. |