Report Overview
Visitedpublic
2025-10-13 12:26:00
Tags
Submit Tags
URL
s3.eu-north-1.amazonaws.com/maainrdimacuemalfaxmalridmalciuemalfaxmalrdimakviurlefjk/tws.html
Finishing URL
t-email.zapto.org/t-online2/
IP / ASN
16.12.10.25
Title
t-email.zapto.org/t-online2/
Suspicious - DynDNS domain
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
s3.eu-north-1.amazonaws.com | unknown | 2005-08-18 | 2018-12-12 | 2025-10-10 | 561 B | 544 B | 16.12.11.17 |   |
mailerdirecmails.icu | 5706025 | 2025-07-20 | 2025-10-13 | 2025-10-13 | 1.5 kB | 1.1 kB |  37.9.175.196 |   |
alainrdimalcoemalrdimlfaxmalrdimalcoeaki.s3.eu-north-1.amazonaws.com | unknown | 2005-08-18 | 2025-10-13 | 2025-10-13 | 1.2 kB | 779 B | 3.5.216.112 | |
t-email.zapto.org 6 alert(s) on this Host | unknown | 2001-08-10 | 2025-10-13 | 2025-10-13 | 1.5 kB | 4.7 kB |  18.192.212.190 |   |
Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Amazon S3 (CDN)
Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.PHP:8.3.26 (Programming languages)
PHP is a general-purpose scripting language used for web development.Plesk (Hosting panels)
Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 37.9.175.196 | ET INFO Suspicious Domain (*.icu) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | t-email.zapto.org | malicious | Sinkholed |
JavaScript (2)
No JavaScripts
HTTP Transactions (9)
| URL | IP | Response | Size |
|---|