DNS0 Zero Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://www.lustspark.xyz/SE/se-0019-rotating-images-sv-deals-v2/?campaign_id=WW+-+IFreechat+-+Splash+Page+-+50$/day+-+5.367+clicks+daily&cep=PJkZfD7wP5Qm5CUamn-V8dmKs3h4llolb5MwxAV497lA4uPILKFfZaXLU82WU_lMiI1hGRJ2Qn2bYhqh4_LUDkXx1C92n7I0QOMAEQIxhc4uoEiO_clTNeWYW1mUkdqBp9YjfAlbhHl9ZrOeHSOl7pOaaWdnMBbtHYT1kjkyUy6TqEhomm0SfNHx9Hfj4tOhJH1WYleQjMEaFZ7NgdgY3wdDsP_vHIMcijl_Z-Mzk5j8qOYLvWw2vsjrG50doPOlX5tjiGGQCIzmPu1YYmdFQvNkmT3q7bQQ7whbL_ZO2W1UyD6XBc3oPruHX5UCX8yC2_CwtPPTE9Ir5ySZv0ZWWGvAL_uF6UDOzh4KTN9WOh4DxR_3-wxxw0vsxsD8ez7JAtkO6XFyGEwBXvndWKuODw&city=Stockholm&lander_name=SE-0019+-+ROTATING+IMAGES+-+SV+-+"DEALS+V2"+-+(RAWFLIRT/PATHTRKX)&lptoken=17f461727659956e552e&sub1=2e3a38c1-7600-4338-a6bd-9dfaae1c07b4&trd=www.zodertracker.com&zone={zone}
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://www.lustspark.xyz/SE/se-0019-rotating-images-sv-deals-v2/?campaign_id=WW+-+IFreechat+-+Splash+Page+-+50$/day+-+5.367+clicks+daily&cep=PJkZfD7wP5Qm5CUamn-V8dmKs3h4llolb5MwxAV497lA4uPILKFfZaXLU82WU_lMiI1hGRJ2Qn2bYhqh4_LUDkXx1C92n7I0QOMAEQIxhc4uoEiO_clTNeWYW1mUkdqBp9YjfAlbhHl9ZrOeHSOl7pOaaWdnMBbtHYT1kjkyUy6TqEhomm0SfNHx9Hfj4tOhJH1WYleQjMEaFZ7NgdgY3wdDsP_vHIMcijl_Z-Mzk5j8qOYLvWw2vsjrG50doPOlX5tjiGGQCIzmPu1YYmdFQvNkmT3q7bQQ7whbL_ZO2W1UyD6XBc3oPruHX5UCX8yC2_CwtPPTE9Ir5ySZv0ZWWGvAL_uF6UDOzh4KTN9WOh4DxR_3-wxxw0vsxsD8ez7JAtkO6XFyGEwBXvndWKuODw&city=Stockholm&lander_name=SE-0019+-+ROTATING+IMAGES+-+SV+-+"DEALS+V2"+-+(RAWFLIRT/PATHTRKX)&lptoken=17f461727659956e552e&sub1=2e3a38c1-7600-4338-a6bd-9dfaae1c07b4&trd=www.zodertracker.com&zone={zone}
- Submitted IP / ASN
172.67.189.166 AS13335 · CLOUDFLARENET
- Final URL
- https://www.lustspark.xyz/SE/se-0019-rotating-images-sv-deals-v2/?campaign_id=WW+-+IFreechat+-+Splash+Page+-+50$/day+-+5.367+clicks+daily&cep=PJkZfD7wP5Qm5CUamn-V8dmKs3h4llolb5MwxAV497lA4uPILKFfZaXLU82WU_lMiI1hGRJ2Qn2bYhqh4_LUDkXx1C92n7I0QOMAEQIxhc4uoEiO_clTNeWYW1mUkdqBp9YjfAlbhHl9ZrOeHSOl7pOaaWdnMBbtHYT1kjkyUy6TqEhomm0SfNHx9Hfj4tOhJH1WYleQjMEaFZ7NgdgY3wdDsP_vHIMcijl_Z-Mzk5j8qOYLvWw2vsjrG50doPOlX5tjiGGQCIzmPu1YYmdFQvNkmT3q7bQQ7whbL_ZO2W1UyD6XBc3oPruHX5UCX8yC2_CwtPPTE9Ir5ySZv0ZWWGvAL_uF6UDOzh4KTN9WOh4DxR_3-wxxw0vsxsD8ez7JAtkO6XFyGEwBXvndWKuODw&city=Stockholm&lander_name=SE-0019+-+ROTATING+IMAGES+-+SV+-+%22DEALS+V2%22+-+(RAWFLIRT/PATHTRKX)&lptoken=17f461727659956e552e&sub1=2e3a38c1-7600-4338-a6bd-9dfaae1c07b4&trd=www.zodertracker.com&zone={zone}
- Final IP / ASN
- 172.67.189.166 AS13335 · CLOUDFLARENET
Final page
- Page title
- Svenska Milfs
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 5.1 KB (5268 bytes)
Detections
Activity
- HTTP requests
- 10
- Observed hosts
- 2
- Script records
- 2
Estimated HTTP data
- Sent
- ~10.9 KB
- Received
- ~1.16 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.lustspark.xyz 9 alerts | N/A | 2025-10-24 | 2025-10-29 | 2025-10-29 | 10.5 KB | 1.16 MB | 172.67.189.166 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |
| notix.io | 50484 | 2020-08-20 | 2020-08-20 | 2025-10-28 | 422 B | 0 B | 0.0.0.0 |