Report Overview
Visitedpublic
2025-12-29 14:47:42
Tags
Submit Tags
URL
ajasiw.com/YtIRcyo
Finishing URL
vodflick.com/warning.php
IP / ASN
172.67.216.159
Title
Suspected phishing site | Cloudflare
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
afrdtech.com | 19742 | 2024-04-19 | 2024-05-10 | 2025-12-23 | 428 B | 51 kB |  31.220.27.154 |  |
to.tr4go.com | unknown | 2025-04-06 | 2025-04-08 | 2025-10-17 | 715 B | 1.8 kB |  18.66.122.117 |   |
sigate-stract.icu | unknown | 2020-01-24 | 2020-02-24 | 2025-12-12 | 683 B | 972 B | 65.9.46.19 | |
avdiuplt.com | unknown | 2019-04-03 | 2020-03-15 | 2025-04-16 | 537 B | 5.3 kB | 104.21.96.150 |   |
challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2025-12-28 | 7.2 kB | 568 kB | 104.18.95.41 | |
vodflick.com 4 alert(s) on this Host | 6631046 | 2024-07-25 | 2025-04-18 | 2025-11-24 | 1.9 kB | 32 kB | 104.21.7.149 | |
ajasiw.com | unknown | 2025-01-26 | 2025-12-29 | 2025-12-29 | 486 B | 1.6 kB | 172.67.216.159 | |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 172.18.0.3 | 65.9.46.19 | ET INFO Suspicious Domain (*.icu) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | vodflick.com | malicious | Sinkholed |
JavaScript (98)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 086707e4369f60afedcafb16050a7618 | DocumentWrite | 39 B | 2023-03-07 | 2025-12-29 | |
Introduced by DocumentWrite First Seen 2023-03-07 Last Seen 2025-12-29 Times Seen 417738 Size 39 B (39 bytes) MD5 086707e4369f60afedcafb16050a7618 SHA1 8216b0cc6876cbd44f01c158e7dff3833ceccd41 Loading... | |||||
HTTP Transactions (18)
| URL | IP | Response | Size |
|---|