Report Overview
Visitedpublic
2025-12-30 18:31:13
Tags
Submit Tags
URL
t-mobile.zuslv.icu/cdn-cgi/phish-bypass?atok=km3WDS5m26L6eXSfnKMjdtXRZVP.exJ7RlzQOvmEvZ8-1767052974.1953712-0.0.1.1-/qay?qr=uy1t7c&original_path=/pay?qr=uy1t7c&cf-turnstile-response=
Finishing URL
t-mobile.zuslv.icu/cdn-cgi/phish-bypass?atok=km3WDS5m26L6eXSfnKMjdtXRZVP.exJ7RlzQOvmEvZ8-1767052974.1953712-0.0.1.1-/qay?qr=uy1t7c&original_path=/pay?qr=uy1t7c&cf-turnstile-response=
IP / ASN
104.21.45.22
Title
t-mobile.zuslv.icu/cdn-cgi/phish-bypass?atok=km3WDS5m26L6eXSfnKMjdtXRZVP.exJ7RlzQOvmEvZ8-1767052974.1953712-0.0.1.1-/qay?qr=uy1t7c&original_path=/pay?qr=uy1t7c&cf-turnstile-response=
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
t-mobile.zuslv.icu 12 alert(s) on this Host | unknown | 2025-12-14 | 2025-12-15 | 2025-12-15 | 2.1 kB | 2.4 kB | 188.114.96.1 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 172.18.0.24 | 188.114.96.1 | ET INFO Suspicious Domain (*.icu) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | t-mobile.zuslv.icu | malicious | Sinkholed |
| OpenDNS | t-mobile.zuslv.icu | phishing | Phishing Block |
| Quad9 DNS | t-mobile.zuslv.icu | malicious | Sinkholed |
JavaScript (0)
No JavaScripts
HTTP Transactions (4)
| URL | IP | Response | Size |
|---|