Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://4to.pics/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://4to.pics/
- Submitted IP / ASN
15.235.24.61 AS16276 · OVH SAS
- Final URL
- https://www.tiktok.com/
- Final IP / ASN
23.214.96.75 AS35994 · AKAMAI-AS
Final page
- Page title
- TikTok - Make Your Day
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 491.2 KB (502991 bytes)
Detections
Activity
- HTTP requests
- 318
- Observed hosts
- 22
- Script records
- 235
Estimated HTTP data
- Sent
- ~246.5 KB
- Received
- ~23.23 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-10-04 | 471 B | 586.5 KB | 142.250.178.40 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| mon16-normal-no1a.tiktokv.eu | 49029 | N/A | 2024-09-11 | 2026-10-03 | 2.4 KB | 18.7 KB | 23.214.96.82 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| t0.gstatic.com | N/A | 2008-02-11 | 2013-05-06 | 2026-10-05 | 584 B | 1.4 KB | 142.250.178.36 | |
| starling-ttp2.tiktokv.eu | 498887 | N/A | 2024-09-16 | 2026-10-08 | 534 B | 18.2 KB | 23.214.96.79 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| sf16-website-login.neutral.tiktokcdn-eu.com | 367553 | 2023-06-11 | 2024-05-24 | 2026-10-03 | 123.2 KB | 18.44 MB | 23.214.96.154 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| mcs-ie2.tiktokw.eu | 296137 | N/A | 2023-12-03 | 2026-10-08 | 3.2 KB | 3.9 KB | Not recorded | |
| www.tiktok.com | 1556 | 1996-07-21 | 2017-11-01 | 2026-10-08 | 29.6 KB | 525.6 KB | 23.214.96.75 | hCaptcha Security hCaptcha is an anti-bot solution that protects user privacy and rewards websites. PayPal Payment processors PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders. Amazon S3 CDN Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Arkose Labs Security Arkose Labs is a toolkit for fraud prevention that provides solutions to detect and mitigate malicious activity across digital platforms. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-10-04 | 1.1 KB | 917 B | 142.251.153.119 | |
| webmssdk16-normal-no1a.tiktokw.eu | 364490 | N/A | 2024-11-26 | 2026-10-02 | 591 B | 0 B | Not recorded | |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-10-04 | 1.1 KB | 75.3 KB | 142.250.178.35 | |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-10-04 | 1.1 KB | 12.2 KB | Not recorded | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| a.magsrv.com 1 alerts | 51490 | 2023-08-01 | 2023-08-04 | 2026-10-03 | 450 B | 220.0 KB |  95.173.205.14 | CDN77 CDN CDN77 is a content delivery network (CDN). |
| 4to.pics | N/A | 2026-10-02 | 2026-10-08 | 2026-10-08 | 20.7 KB | 2.68 MB | 15.235.24.61 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. Express Web frameworks, Web servers Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs. Node.js Programming languages Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Google Analytics Analytics Google Analytics is a free web analytics service that tracks and reports website traffic. |
| mon-i18n.tiktokv.com | 233771 | 2017-09-20 | 2022-04-20 | 2026-10-02 | 1.2 KB | 5.6 KB | 71.18.240.1 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| libraweb-ttp2.tiktokw.eu | 354331 | N/A | 2024-11-25 | 2026-10-07 | 1.1 KB | 8.7 KB | 23.214.96.83 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| mon.tiktokv.com | 39035 | 2017-09-20 | 2019-03-20 | 2026-10-08 | 632 B | 684 B | 71.18.222.1 | |
| t2.gstatic.com | N/A | 2008-02-11 | 2013-05-07 | 2026-10-05 | 592 B | 1.3 KB | 142.250.178.100 | |
| www.google.no | 92680 | 2001-02-26 | 2012-06-26 | 2026-10-05 | 845 B | 578 B | 142.250.178.67 | |
| sf16-website-login.neutral.ttwstatic.com | 29420 | 2021-11-05 | 2022-12-12 | 2026-10-01 | 4.2 KB | 670.3 KB |  2.22.55.82 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| mcs16-normal-no1a.tiktokw.eu | 293889 | N/A | 2024-09-16 | 2026-10-03 | 4.5 KB | 10.1 KB | 23.214.96.83 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| im-ws.tiktok.com | 189686 | 1996-07-21 | 2025-09-05 | 2026-10-07 | 972 B | 832 B | 23.214.96.84 | WebSocket Miscellaneous WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| webcast.tiktok.com | 88553 | 1996-07-21 | 2021-01-15 | 2026-10-08 | 2.2 KB | 1.5 KB | 2.22.225.129 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |