DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://xeno.rest/
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://xeno.rest/
- Submitted IP / ASN
104.21.39.116 AS13335 · Cloudflare, Inc.
- Final URL
- https://xeno.rest/
- Final IP / ASN
- 172.67.145.43 AS13335 · CLOUDFLARENET
Final page
- Page title
- Xeno • Download
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 42.0 KB (42988 bytes)
Detections
Activity
- HTTP requests
- 21
- Observed hosts
- 6
- Script records
- 74
Estimated HTTP data
- Sent
- ~283.2 KB
- Received
- ~2.59 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-09-27 | 12.0 KB | 2.33 MB | 104.18.95.41 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-09-27 | 518 B | 100.6 KB | 104.17.24.14 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| brunhild.challenges.cloudflare.com | N/A | 2009-02-17 | 2026-06-24 | 2026-09-23 | 628 B | 0 B | Not recorded | |
| fonts.googleapis.com | 313 | 2005-01-25 | 2012-05-23 | 2026-09-27 | 584 B | 28.8 KB |  142.250.178.106 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| xeno.rest 6 alerts | N/A | 2026-01-28 | 2026-05-23 | 2026-08-28 | 2.9 KB | 88.4 KB | 172.67.145.43 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-09-27 | 568 B | 48.2 KB | 142.250.178.35 |