Report Overview
URL
productionmaza.cyou/
Finishing URL
productionmaza.cyou/
IP / ASN
172.67.148.28
Title
Just a moment...
Malicious - Copy/Paste Social Engineering (ClickFix)
Detections
urlquery
2
Network Intrusion Detection
3
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
gateway.tenderly.co | 1960624 | 2020-05-11 | 2022-05-12 | 2026-03-27 | 507 B | 541 B |  35.227.193.242 |    |
polygon.lava.build | 7157037 | 2023-09-14 | 2025-08-27 | 2026-03-27 | 492 B | 1.4 kB | 104.18.24.75 |  |
polygon-public.nodies.app | unknown | 2023-05-12 | 2025-08-27 | 2026-03-27 | 499 B | 755 B | 104.26.4.88 | |
productionmaza.cyou 30 alert(s) on this Host | unknown | 2026-03-23 | 2026-03-27 | 2026-03-27 | 3.3 kB | 443 kB | 104.21.55.125 | |
polygon-bor-rpc.publicnode.com | 2163006 | 2016-08-16 | 2024-04-26 | 2026-03-27 | 504 B | 741 B | 104.20.24.117 | |
1rpc.io | 47066 | 2022-08-02 | 2022-08-18 | 2026-03-21 | 486 B | 309 B |  20.105.41.175 | |
polygon.drpc.org | unknown | 2005-01-09 | 2023-12-16 | 2026-03-27 | 490 B | 750 B | 104.18.10.59 | |
polygon.rpc.subquery.network | unknown | 2020-10-07 | 2025-08-27 | 2026-03-28 | 508 B | 350 B |  51.254.59.59 | |
polygon-pokt.nodies.app | unknown | 2023-05-12 | 2025-08-27 | 2026-03-27 | 497 B | 741 B | 104.26.5.88 | |
polygon.gateway.tenderly.co | unknown | 2020-05-11 | 2025-08-03 | 2026-03-27 | 501 B | 541 B | 35.227.193.242 | |
api.zan.top | 1528343 | 2023-03-24 | 2023-08-02 | 2026-03-27 | 500 B | 707 B |  47.245.119.150 | |
upload.wikimedia.org | 4329 | 2003-03-16 | 2012-05-21 | 2026-03-23 | 476 B | 65 kB | 185.15.59.240 |  |
Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Apache Traffic Server:9.2.11 (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 20.105.41.175 | ET INFO Observed Smart Chain Domain in TLS SNI (1rpc .io) | |
| low | Client IP | 47.245.119.150 | ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top) | |
| low | Client IP | 8.219.97.231 | ET INFO Observed Smart Chain Domain in TLS SNI (api .zan .top) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | productionmaza.cyou | malicious | Sinkholed |
| DigiCert UltraDNS | productionmaza.cyou | malicious | Sinkholed |
| Hagezi Threat Feed | productionmaza.cyou | malicious | Sinkholed |
| Quad9 DNS | productionmaza.cyou | malicious | Sinkholed |
JavaScript (3)
No JavaScripts
HTTP Transactions (18)
| URL | IP | Response | Size |
|---|