Report Overview
Visitedpublic
2025-12-27 08:32:24
Tags
Submit Tags
URL
us2.froxysite.com/
Finishing URL
ww9.froxysite.com/
IP / ASN
173.239.8.164
Title
froxysite.com
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
9
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
obseu.youstarsbuilding.com | 1721811 | 2022-08-01 | 2023-11-07 | 2025-12-26 | 5.5 kB | 5.6 kB |  34.251.101.162 | |
l.cdn-fileserver.com 9 alert(s) on this Host | 962880 | 2025-04-08 | 2025-04-11 | 2025-12-22 | 8.5 kB | 2.6 kB |  188.114.97.1 |    |
us2.froxysite.com | unknown | 2017-01-09 | 2025-12-27 | 2025-12-27 | 1.2 kB | 886 B | 0.0.0.0 |  |
s.cdn-fileserver.com 9 alert(s) on this Host | 1473336 | 2025-04-08 | 2025-04-11 | 2025-12-22 | 1.5 kB | 45 kB | 188.114.97.1 | |
yfdnzf.com | 2024004 | 2025-07-22 | 2025-07-30 | 2025-12-23 | 544 B | 10 kB |  208.91.196.46 | |
ww9.froxysite.com 4 alert(s) on this Host | unknown | 2017-01-09 | 2025-12-27 | 2025-12-27 | 2.1 kB | 17 kB |  185.53.179.200 | |
searchnowexpert.com 1 alert(s) on this Host | 388819 | 2025-02-14 | 2025-05-24 | 2025-12-24 | 1.3 kB | 68 kB | 199.191.50.135 | |
msadsscale.microsoft.com | 241518 | 1991-05-02 | 2025-01-13 | 2025-12-22 | 455 B | 73 kB | 13.107.213.53 |  |
s.yimg.com | 4553 | 1997-05-14 | 2012-05-20 | 2025-12-22 | 450 B | 14 kB |  87.248.119.252 |   |
froxysite.com 1 alert(s) on this Host | unknown | 2017-01-09 | 2025-12-27 | 2025-12-27 | 889 B | 712 B | 74.206.228.78 | |
euob.youstarsbuilding.com 1 alert(s) on this Host | 2095641 | 2022-08-01 | 2023-10-25 | 2025-12-26 | 456 B | 120 kB | 54.240.174.44 |   |
Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx:1.20.1 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Nginx:1.28.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Apache Traffic Server (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Nginx:1.18.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Caddy (Web servers)
Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 172.18.0.21 | 74.206.228.78 | ET ADWARE_PUP Win32/Zonebac Traffic Redirect | |
| low | 34.251.101.162 | 172.18.0.21 | ET INFO Observed ZeroSSL SSL/TLS Certificate |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | ww9.froxysite.com | malicious | Sinkholed |
| DigiCert UltraDNS | l.cdn-fileserver.com | malicious | Sinkholed |
| Quad9 DNS | l.cdn-fileserver.com | malicious | Sinkholed |
| DNS0 Zero | l.cdn-fileserver.com | malicious | Sinkholed |
| Hagezi Threat Feed | searchnowexpert.com | malicious | Sinkholed |
| Quad9 DNS | s.cdn-fileserver.com | malicious | Sinkholed |
| DigiCert UltraDNS | s.cdn-fileserver.com | malicious | Sinkholed |
| DNS0 Zero | s.cdn-fileserver.com | malicious | Sinkholed |
| ThreatFox | euob.youstarsbuilding.com/sxp/i/636f8b858f681acb7bfa6f583a96630a.js | malicious | FAKEUPDATES |
JavaScript (15)
No JavaScripts
HTTP Transactions (27)
| URL | IP | Response | Size |
|---|