DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
https://adventureland-moonseeker.blogspot.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://adventureland-moonseeker.blogspot.com
- Submitted IP / ASN
216.58.207.225 AS15169 · GOOGLE
- Final URL
- https://www.google.com/
- Final IP / ASN
- 142.251.152.119 AS15169 · GOOGLE
Final page
- Page title
- Final DOM MIME
- text/plain; charset=utf-8
- Final DOM size
- 0 B (0 bytes)
Detections
Activity
- HTTP requests
- 41
- Observed hosts
- 10
- Script records
- 24
Estimated HTTP data
- Sent
- ~50.7 KB
- Received
- ~2.17 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
2DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
IDS
1Suricata IDS ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI)
VerdictVerdict not recorded
Severitylow
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2026-03-15 | 1.1 KB | 225.6 KB | 172.217.20.163 | |
| www.blogger.com | 9514 | 1999-06-22 | 2012-05-22 | 2026-03-16 | 1011 B | 181.8 KB | 192.178.25.9 | |
| adventureland-moonseeker.blogspot.com 3 alerts | N/A | 2000-07-31 | 2026-03-16 | 2026-03-16 | 1.5 KB | 15.9 KB |  0.0.0.0 | Blogger Blogs Blogger is a blog-publishing service that allows multi-user blogs with time-stamped entries. Python Programming languages Python is an interpreted and general-purpose programming language. OpenGSE Web servers OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine. Java Programming languages Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible. |
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-03-15 | 567 B | 39.4 KB | 142.251.38.99 | |
| ogads-pa.clients6.google.com | 508 | 1997-09-15 | 2025-03-25 | 2026-03-16 | 1.8 KB | 1.3 KB | 142.251.38.106 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| csp.withgoogle.com | 4614 | 2008-11-17 | 2015-10-29 | 2026-03-16 | 511 B | 1.7 KB | 172.217.20.177 | |
| thundertracker.serv00.net | N/A | 2019-06-03 | 2026-03-16 | 2026-03-16 | 556 B | 678 B |  128.204.223.115 | PHP:8.3.26 Programming languages PHP is a general-purpose scripting language used for web development. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| href.li 1 alerts | 30988 | N/A | 2012-05-22 | 2026-03-12 | 575 B | 774 B | 192.0.78.26 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-03-15 | 40.2 KB | 1.71 MB | 142.251.152.119 | Google Web Server Web servers Not recorded HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| play.google.com | 48 | 1997-09-15 | 2013-05-30 | 2026-03-16 | 1.0 KB | 597 B | 142.251.143.142 |