Report Overview
Visitedpublic
2026-05-11 00:14:19
Tags
Submit Tags
URL
w66e.xyz
Finishing URL
w66e.xyz/home
IP / ASN
154.39.104.144
Title
welcome-BET365
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
w66e.xyz 180 alert(s) on this Host | unknown | 2026-03-10 | 2026-05-11 | 2026-05-11 | 20 kB | 4.3 MB | 154.39.104.130 |   |
static.geetest.com | 196356 | 2012-03-05 | 2015-01-16 | 2026-05-08 | 408 B | 22 kB |  104.17.5.193 |   |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.GeeTest (Security)
GeeTest is a CAPTCHA and bot management provider, protects websites, mobile apps, and APIs from automated bot-driven attacks, like ATO, credential stuffing, web scalping, etc.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Alibaba Cloud Object Storage Service (IaaS)
Alibaba Cloud Object Storage Service (OSS) is a cloud-based object storage service provided by Alibaba Cloud, which allows users to store and access large amounts of data in the cloud.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 154.39.104.130 | Client IP | ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz) | |
| medium | 154.39.104.132 | Client IP | ET HUNTING Observed Let's Encrypt Certificate for Suspicious TLD (.xyz) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | w66e.xyz | malicious | Sinkholed |
| OpenDNS | w66e.xyz | phishing | Phishing Block |
| DNS4EU | w66e.xyz | malicious | Sinkholed |
| Cloudflare DNS | w66e.xyz | malicious | Sinkholed |
JavaScript (90)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| c2e65e3e039daa8df7c9574de35d1f6a | DocumentWrite | 59 B | 2026-05-11 | 2026-05-11 | |
Introduced by DocumentWrite First Seen 2026-05-11 Last Seen 2026-05-11 Times Seen 1 Size 59 B (59 bytes) MD5 c2e65e3e039daa8df7c9574de35d1f6a SHA1 94f6313f2685d17b5bc86c285f38deb11f694280 Loading... | |||||
HTTP Transactions (46)
| URL | IP | Response | Size |
|---|