Report Overview
Visitedpublic
2025-08-05 13:00:41
Tags
Submit Tags
URL
ultraplus889.org/
Finishing URL
ultraplus889.org/
IP / ASN
104.21.16.1
Title
ULTRAPLUS889 – Ultra Access, Unlimited Jackpot Rush
Detections
urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
wyz14.tdum.alibaba.com | unknown | 1999-04-15 | 2025-08-05 | 2025-08-05 | 406 B | 407 B |  47.246.146.54 |  |
retcode.taobao.com | 29654 | 2003-04-21 | 2015-07-07 | 2025-07-30 | 7.9 kB | 2.3 kB |  59.82.122.61 | |
img.alicdn.com | 8663 | 2008-06-25 | 2015-03-04 | 2025-08-04 | 927 B | 19 kB |  47.246.44.177 | |
g.alicdn.com | 6787 | 2008-06-25 | 2014-10-06 | 2025-08-02 | 7.0 kB | 1.4 MB |  23.36.77.80 |  |
acs-m.lazada.co.id | 32126 | 2012-02-24 | 2017-12-21 | 2025-07-30 | 847 B | 234 B |  47.246.173.247 | |
pagead2.googlesyndication.com | 101 | 2003-01-21 | 2012-05-21 | 2025-07-31 | 461 B | 160 kB | 142.250.74.2 | |
lab-js-abtest.lazada.com | unknown | 2009-08-25 | 2023-01-23 | 2025-08-04 | 1.0 kB | 1.9 kB |  38.54.123.61 |   |
ynuf.aliapp.org | 8486 | 2008-01-04 | 2017-01-30 | 2025-08-01 | 402 B | 969 B | 124.239.14.253 |   |
lzd-img-global.slatic.net | 25020 | 2013-09-24 | 2021-12-16 | 2025-07-31 | 944 B | 112 kB |  163.53.19.13 | |
fourier.taobao.com | 12218 | 2003-04-21 | 2019-10-09 | 2025-08-02 | 2.1 kB | 2.3 kB | 124.239.14.250 | |
arms-retcode-sg.aliyuncs.com 9 alert(s) on this Domain | 27962 | 2012-04-01 | 2017-12-29 | 2025-07-31 | 12 kB | 2.4 kB | 8.222.203.130 | |
g.lazcdn.com | unknown | 2021-11-05 | 2022-09-16 | 2025-07-31 | 3.4 kB | 1.9 MB | 90.84.160.25 | |
ase.aliexpress.com | unknown | 2006-04-16 | 2024-08-02 | 2025-07-31 | 1.0 kB | 1.1 kB | 47.246.146.79 | |
fourier.alibaba.com | 245815 | 1999-04-15 | 2017-12-29 | 2025-07-31 | 2.5 kB | 786 B | 47.246.165.65 | |
gm.mmstat.com | 14331 | 2007-12-25 | 2013-09-16 | 2025-07-31 | 442 B | 426 B | 140.205.151.5 | |
ultraplus889.org | unknown | unknown | No data | No data | 31 kB | 6.6 MB | 104.21.80.1 |          |
member.lazada.co.id | 46666 | 2012-02-24 | 2018-02-10 | 2025-08-01 | 3.4 kB | 6.6 kB | 47.246.165.189 | |
laz-g-cdn.alicdn.com | 16513 | 2008-06-25 | 2017-09-28 | 2025-08-01 | 1.6 kB | 74 kB | 90.84.161.25 | |
Tengine (Web servers)
Tengine is a web server which is based on the Nginx HTTP server.Alibaba Cloud Object Storage Service (IaaS)
Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Java (Programming languages)
Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.Spring (Web frameworks)
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Litespeed Cache (Caching, WordPress plugins)
LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.LiteSpeed Cache (Caching, WordPress plugins)
LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.LiteSpeed (Web servers)
LiteSpeed is a high-scalability web server.React (JavaScript frameworks)
React is an open-source JavaScript library for building user interfaces or UI components.MySQL (Databases)
MySQL is an open-source relational database management system.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.WordPress (CMS, Blogs)
WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.AMP (JavaScript frameworks)
AMP, originally created by Google, is an open-source HTML framework developed by the AMP open-source Project. AMP is designed to help webpages load faster.Yoast SEO:25.6 (SEO, WordPress plugins)
Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 8.222.203.130 | ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI) | |
| low | Client IP | 8.222.203.130 | ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI) | |
| low | Client IP | 8.222.203.130 | ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI) | |
| low | Client IP | 8.222.203.130 | ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI) | |
| low | Client IP | 8.222.203.130 | ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI) | |
| low | Client IP | 8.222.203.130 | ET INFO Observed Alibaba Cloud CDN Domain (aliyuncs .com in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Quad9 DNS | arms-retcode-sg.aliyuncs.com | malicious | Sinkholed |
JavaScript (50)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 38472d3a93ac4e8ae51e6117e7d87736 | DocumentWrite | 161 B | 2025-03-21 | 2025-09-16 | |
Introduced by DocumentWrite First Seen 2025-03-21 Last Seen 2025-09-16 Times Seen 1379 Size 161 B (161 bytes) MD5 38472d3a93ac4e8ae51e6117e7d87736 SHA1 25cc2e741bc7cbd01eaf9f3a106c9d75e1e604bd Loading... | |||||
HTTP Transactions (125)
| URL | IP | Response | Size |
|---|