DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://quasimorph.wiki/walkthrough/realware/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://quasimorph.wiki/walkthrough/realware/
- Submitted IP / ASN
104.21.68.79 AS13335 · CLOUDFLARENET
- Final URL
- https://quasimorph.wiki/walkthrough/realware/
- Final IP / ASN
- 172.67.191.244 AS13335 · CLOUDFLARENET
Final page
- Page title
- Quasimorph RealWare Walkthrough | Quasimorph (Aug 2026)
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 90.1 KB (92305 bytes)
Detections
Activity
- HTTP requests
- 42
- Observed hosts
- 9
- Script records
- 3
Estimated HTTP data
- Sent
- ~40.5 KB
- Received
- ~845.1 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-07-26 | 576 B | 15.4 KB |  142.250.178.106 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| protrafficinspector.com | 614186 | 2025-06-18 | 2025-07-25 | 2026-07-30 | 488 B | 518 B |  3.122.93.162 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| mamshirt.com | N/A | 2023-04-14 | 2026-07-24 | 2026-07-31 | 478 B | 6.5 KB | 104.21.21.108 | Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| thedirecthor.com | 3259150 | 2023-03-26 | 2025-12-09 | 2026-07-30 | 1.2 KB | 12.2 KB | 172.67.168.24 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |
| furiousexpansion.com 18 alerts | N/A | 2026-02-25 | 2026-03-13 | 2026-07-30 | 27.2 KB | 42.6 KB | 172.240.108.76 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| cdn.storageimagedisplay.com | 170153 | 2024-09-13 | 2024-09-13 | 2026-07-31 | 4.7 KB | 449.8 KB | 45.133.44.2 | Nginx:1.21.6 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| quasimorph.wiki | N/A | N/A | N/A | N/A | 2.5 KB | 176.2 KB | 172.67.191.244 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Astro:6.4.8 Static site generator, JavaScript frameworks Astro is a new JavaScript-based static site builder. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-07-26 | 2.8 KB | 107.7 KB | 142.250.178.99 | |
| pl30625716.effectivecpmnetwork.com 1 alerts | N/A | 2026-05-14 | 2026-08-02 | 2026-08-02 | 507 B | 34.3 KB | 172.240.108.76 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. Nginx:1.28.2 Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |