Quad9 DNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://s638.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://s638.com
- Submitted IP / ASN
43.133.59.253 AS132203 · Tencent Building, Kejizhongyi Avenue
- Final URL
- http://www.s638.com/?www
- Final IP / ASN
- 43.133.59.253 AS132203 · Tencent Building, Kejizhongyi Avenue
Final page
- Page title
- 林州人才网_林州招聘网_林州人才市场
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 749 B (749 bytes)
Detections
Activity
- HTTP requests
- 23
- Observed hosts
- 6
- Script records
- 0
Estimated HTTP data
- Sent
- ~9.7 KB
- Received
- ~385.6 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| static.haohuihua.com | N/A | 2019-11-18 | 2026-02-22 | 2026-10-04 | 6.6 KB | 210.8 KB | Not recorded | |
| s638.com | N/A | N/A | N/A | N/A | 870 B | 133 B | Not recorded | |
| www.s638.com | N/A | N/A | N/A | N/A | 886 B | 24.1 KB | Not recorded | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. Swiper JavaScript libraries Swiper is a JavaScript library that creates modern touch sliders with hardware-accelerated transitions. jQuery:1.9.1 JavaScript libraries jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax. cdnjs CDN cdnjs is a free distributed JS library delivery service. |
| at.alicdn.com | 96084 | 2008-06-25 | 2013-11-28 | 2026-10-03 | 388 B | 0 B | Not recorded | |
| cdn.bootcdn.net 1 alerts | 692530 | 2014-08-02 | 2019-03-12 | 2026-10-03 | 512 B | 14.4 KB |  128.14.165.153 | OpenResty Web servers OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| cdnjs.cloudflare.com | 1222 | 2009-02-17 | 2012-05-23 | 2026-10-04 | 501 B | 136.2 KB |  104.17.25.14 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |