DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://leakst.vip/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://leakst.vip/
- Submitted IP / ASN
104.21.46.207 AS13335 · CLOUDFLARENET
- Final URL
- https://leakst.vip/
- Final IP / ASN
- Not recorded
Final page
- Page title
- Unavailable For Legal Reasons
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 7.5 KB (7648 bytes)
Detections
Activity
- HTTP requests
- 18
- Observed hosts
- 15
- Script records
- 4
Estimated HTTP data
- Sent
- ~9.2 KB
- Received
- ~1.44 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 1xtvhvx-m.ns1pcdn.net | 413558 | 2020-06-30 | 2026-02-23 | 2026-07-26 | 521 B | 127.4 KB | 104.18.27.232 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| ns1p-aws-backed.global.ssl.fastly.net | 422107 | 2011-04-18 | 2025-10-09 | 2026-07-28 | 537 B | 127.6 KB |  151.101.65.194 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Varnish Caching Varnish is a reverse caching proxy. |
| 1xtsor1-m.ns1pcdn.net | 415171 | 2020-06-30 | 2020-11-20 | 2026-07-25 | 521 B | 127.6 KB | 52.84.50.40 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Amazon CloudFront CDN Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds. |
| testingcf.jsdelivr.net | 581907 | 2012-05-16 | 2021-07-08 | 2026-07-28 | 552 B | 101.1 KB | 104.17.208.5 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| benchmarks.cdn.compute-pipe.com | 707939 | 2021-12-02 | 2024-06-19 | 2026-07-25 | 534 B | 100.3 KB | 172.64.148.194 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| benchmarks.cdn-b.compute-pipe.com | N/A | 2021-12-02 | 2025-12-02 | 2026-07-28 | 536 B | 100.3 KB | 162.159.140.104 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| benchmark.1e100cdn.net | 69376 | 2016-01-26 | 2016-02-04 | 2026-07-22 | 525 B | 100.3 KB | 35.190.26.57 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |
| cedexis-test.akamaized.net | 740410 | 2014-03-18 | 2020-08-26 | 2026-07-21 | 533 B | 100.5 KB |  23.33.119.136 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| 1lmnv6z-m.ns1pcdn.net | 411760 | 2020-06-30 | 2026-02-23 | 2026-07-25 | 521 B | 127.5 KB |  23.0.161.88 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| leakst.vip 3 alerts | N/A | 2026-07-22 | 2026-07-26 | 2026-07-26 | 1.4 KB | 21.6 KB | 172.67.141.203 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| performance.radar.cloudflare.com | 418040 | 2009-02-17 | 2022-06-29 | 2026-07-27 | 1012 B | 9.9 KB | 104.18.30.78 | Cloudflare Bot Management Security Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| jsdelivr.b-cdn.net | 749085 | 2016-04-25 | 2021-09-09 | 2026-07-26 | 549 B | 100.9 KB | 194.242.11.186 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Bunny CDN Not recorded |
| benchmarks.cdn-c.compute-pipe.com | N/A | 2021-12-02 | 2025-12-07 | 2026-07-26 | 536 B | 100.3 KB | 104.18.29.178 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| 5bav82-m.ns1pcdn.net | 411288 | 2020-06-30 | 2025-08-12 | 2026-07-25 | 520 B | 127.8 KB | 34.111.241.208 | Google Cloud CDN CDN Cloud CDN uses Google's global edge network to serve content closer to users. Google Cloud Storage Miscellaneous Google Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. Google Cloud IaaS Google Cloud is a suite of cloud computing services. |
| fastly.jsdelivr.net | 208496 | 2012-05-16 | 2018-03-19 | 2026-07-25 | 550 B | 100.7 KB | 151.101.193.229 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |