DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://flowcraft.work/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://flowcraft.work/
- Submitted IP / ASN
172.67.181.151 AS13335 · Cloudflare, Inc.
- Final URL
- https://flowcraft.work/
- Final IP / ASN
- Not recorded
Final page
- Page title
- Cloudflare Tunnel error | flowcraft.work | Cloudflare
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 8.6 KB (8798 bytes)
Detections
Activity
- HTTP requests
- 21
- Observed hosts
- 16
- Script records
- 4
Estimated HTTP data
- Sent
- ~10.4 KB
- Received
- ~1.31 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| benchmarks.cdn.compute-pipe.com | 707939 | 2021-12-02 | 2024-06-19 | 2026-10-04 | 534 B | 100.3 KB | 172.64.148.194 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| kgnvry-ns1p.b-cdn.net | 412935 | 2016-04-25 | 2025-12-09 | 2026-10-01 | 521 B | 127.7 KB |  194.242.11.186 | Bunny CDN Not recorded |
| benchmarks.cdn-b.compute-pipe.com | N/A | 2021-12-02 | 2025-12-02 | 2026-10-01 | 536 B | 100.3 KB | 162.159.140.104 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| benchmark.1e100cdn.net | 69376 | 2016-01-26 | 2016-02-04 | 2026-10-02 | 525 B | 100.3 KB |  35.190.26.57 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |
| ns1p-aws-backed.global.ssl.fastly.net | 422107 | 2011-04-18 | 2025-10-09 | 2026-09-30 | 537 B | 127.6 KB | 151.101.1.194 | Varnish Caching Varnish is a reverse caching proxy. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| flowcraft.work 5 alerts | N/A | N/A | N/A | N/A | 2.3 KB | 32.6 KB | 104.21.18.105 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| performance.radar.cloudflare.com | 418040 | 2009-02-17 | 2022-06-29 | 2026-09-29 | 1016 B | 10.2 KB | 104.18.31.78 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. |
| 1lmnv6z-m.ns1pcdn.net | 411760 | 2020-06-30 | 2026-02-23 | 2026-09-29 | 521 B | 127.5 KB |  2.22.225.91 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| invalid.rpki.cloudflare.com | 1629364 | 2009-02-17 | 2020-04-04 | 2026-10-04 | 445 B | 286 B | 103.21.244.8 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| 1xtsor1-m.ns1pcdn.net | 415171 | 2020-06-30 | 2020-11-20 | 2026-09-28 | 521 B | 127.6 KB | 143.204.238.4 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Amazon CloudFront CDN Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds. |
| 9y49n2-m.ns1pcdn.net | 419464 | 2020-06-30 | 2020-07-17 | 2026-09-29 | 520 B | 127.6 KB |  80.240.113.62 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Gcore CDN Gcore is a public cloud and content delivery network (CDN) company. |
| 1xtvhvx-m.ns1pcdn.net | 413558 | 2020-06-30 | 2026-02-23 | 2026-09-29 | 521 B | 127.4 KB | 104.18.26.232 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| benchmarks.cdn-c.compute-pipe.com | N/A | 2021-12-02 | 2025-12-07 | 2026-09-30 | 536 B | 100.3 KB | 104.18.29.178 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| 5bav82-m.ns1pcdn.net | 411288 | 2020-06-30 | 2025-08-12 | 2026-09-28 | 520 B | 127.8 KB | 34.111.241.208 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. Google Cloud Storage Miscellaneous Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. |
| 1a4s4dv-m.ns1pcdn.net | 419136 | 2020-06-30 | 2020-07-20 | 2026-10-01 | 521 B | 0 B | Not recorded | |
| cedexis-test.akamaized.net | 740410 | 2014-03-18 | 2020-08-26 | 2026-10-02 | 533 B | 438 B | 23.214.96.155 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |