Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://ams.re3r.com/impcs/huwJJkjAAJMNznGqWB_oyEE_-wMHswJQ6gWnOGsE7V90ra-nSqdnruji44sdoJOsBrbgKYbD6EG2sOzd-5WPnzdwNNyuOqfBPbPSSq42jeuZhLgCH2Bg_jBbLkdcbSFafbNBZ48Gcc90pLJJUmOh41EtLWK5CPX9zckZTJunVFgiTQTc-NawK7z5eMjpbmhhjSGKvlUtjkRGrs0fp1w3RnqpF9B6rBWLnaeaHB5g3FCEh9k-QsgDpp19y5Qpa5ZWYdSk9tjS3APhwPFJFRKrpWjfFvXrCD0xEvCK8dXwr8n_VYQSiaa6R8n1BtYVHyBrxOL6W0MvvGjjM_uL4vNlN5I2j1gfYjNqC174d_WtVrgi-pyYSWcyxqyztZVsw6BFxX3-zwMmKkzpMLaDaHSYq9ImogB_LaLo_PGdEGb9Piu-38Huh8bVjFlywB1FfNYjQ9PU72x74Sj_C8VCXP2qQKz3_3Ydpd4N
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://ams.re3r.com/impcs/huwJJkjAAJMNznGqWB_oyEE_-wMHswJQ6gWnOGsE7V90ra-nSqdnruji44sdoJOsBrbgKYbD6EG2sOzd-5WPnzdwNNyuOqfBPbPSSq42jeuZhLgCH2Bg_jBbLkdcbSFafbNBZ48Gcc90pLJJUmOh41EtLWK5CPX9zckZTJunVFgiTQTc-NawK7z5eMjpbmhhjSGKvlUtjkRGrs0fp1w3RnqpF9B6rBWLnaeaHB5g3FCEh9k-QsgDpp19y5Qpa5ZWYdSk9tjS3APhwPFJFRKrpWjfFvXrCD0xEvCK8dXwr8n_VYQSiaa6R8n1BtYVHyBrxOL6W0MvvGjjM_uL4vNlN5I2j1gfYjNqC174d_WtVrgi-pyYSWcyxqyztZVsw6BFxX3-zwMmKkzpMLaDaHSYq9ImogB_LaLo_PGdEGb9Piu-38Huh8bVjFlywB1FfNYjQ9PU72x74Sj_C8VCXP2qQKz3_3Ydpd4N
- Submitted IP / ASN
172.67.154.71 AS13335 · CLOUDFLARENET
- Final URL
- https://1osb.com/smart.php?link=10976610&var=remoby3_14321781_600352&ymid=BMKKGI97lOPIBF8pFih42PBeISUqC0bk0gQsyBegDhE4WIOCBjiIpaZKJg4zKvlJAhC&var_3=glks:d8220a78084c886cf67d280c50b95475&fa=1
- Final IP / ASN
- Not recorded
Final page
- Page title
- 1osb.com/smart.php?link=10976610&var=remoby3_14321781_600352&ymid=BMKKGI97lOPIBF8pFih42PBeISUqC0bk0gQsyBegDhE4WIOCBjiIpaZKJg4zKvlJAhC&var_3=glks:d8220a78084c886cf67d280c50b95475&fa=1
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 131 B (131 bytes)
Detections
Activity
- HTTP requests
- 4
- Observed hosts
- 3
- Script records
- 0
Estimated HTTP data
- Sent
- ~2.9 KB
- Received
- ~3.2 KB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 1osb.com | 38340 | 2016-05-06 | 2025-03-15 | 2026-07-14 | 1.3 KB | 1.8 KB | 104.21.61.211 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. |
| ams.re3r.com | N/A | 2008-05-19 | 2026-07-14 | 2026-07-14 | 967 B | 1.0 KB | 172.67.154.71 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |
| rcdn-web.com 1 alerts | 6313 | 2024-07-15 | 2024-07-25 | 2026-07-15 | 712 B | 397 B |  45.133.44.1 | Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |