Report Overview
Visitedpublic
2025-12-08 00:59:21
Tags
Submit Tags
URL
pahe.mewcdn.online/UBFaK
Finishing URL
kwik.mewcdn.online/f/7HUhhvFhV7eN
IP / ASN
172.67.147.101
Title
AnimePahe_One_Piece_-_1152_1080p_SubsPlease.mp4 :: Kwik
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
20
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| 16376 | 2025-01-23 | 2025-01-25 | 2025-11-30 | 459 B | 0 B | 0.0.0.0 | ||
| 4073 | 2019-08-30 | 2019-09-24 | 2025-12-07 | 514 B | 20 kB | 104.16.80.73 |  | |
| unknown | unknown | No data | No data | 492 B | 17 kB | 172.67.147.101 |  | |
recordedthereby.com 4 alert(s) on this Host | 58199 | 2024-05-08 | 2024-05-08 | 2025-11-29 | 417 B | 86 kB |  185.196.197.72 |  |
cr.fretumlimpsey.com 3 alert(s) on this Host | unknown | 2025-06-23 | 2025-07-20 | 2025-08-25 | 435 B | 1.4 kB |  188.42.241.189 | |
| unknown | unknown | No data | No data | 469 B | 0 B | 0.0.0.0 | ||
flushpersist.com 3 alert(s) on this Host | 23810 | 2025-07-01 | 2025-07-08 | 2025-12-03 | 769 B | 530 B |  172.240.108.76 |  |
voraciousinfosag.com 8 alert(s) on this Host | 4823768 | 2024-10-21 | 2025-12-02 | 2025-12-02 | 1.0 kB | 1.1 kB | 172.240.108.84 | |
| 1678 | 2012-05-16 | 2012-09-30 | 2025-12-07 | 918 B | 257 kB | 151.101.1.229 | ||
| unknown | unknown | 2025-07-24 | 2025-07-24 | 435 B | 0 B | 0.0.0.0 | ||
| unknown | unknown | No data | No data | 13 kB | 776 kB | 172.67.147.101 |   | |
pahe.win 5 alert(s) on this Host | 93392 | 2020-04-16 | 2020-04-16 | 2025-11-22 | 2.2 kB | 509 kB | 172.67.202.143 | |
| 8565 | 2018-12-30 | 2019-02-01 | 2025-12-01 | 909 B | 4.4 kB |  194.242.11.186 |  | |
| 614186 | 2025-06-18 | 2025-07-25 | 2025-12-02 | 452 B | 427 B |  18.198.241.35 | ||
capaciousdrewreligion.com 5 alert(s) on this Host | 81073 | 2023-11-07 | 2023-11-27 | 2025-11-30 | 431 B | 377 B | 185.196.197.72 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.Nginx:1.21.6 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.jQuery (JavaScript libraries)
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.jsDelivr (CDN)
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.Cloudflare Browser Insights (Analytics, RUM)
Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.Bunny (CDN)
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | 172.18.0.16 | 13.216.152.137 | ET INFO Observed Commonly Actor Abused Domain (image .thum .io in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | cr.fretumlimpsey.com | malicious | Sinkholed |
| DNS0 Zero | cr.fretumlimpsey.com | malicious | Sinkholed |
| Quad9 DNS | cr.fretumlimpsey.com | malicious | Sinkholed |
| DNS0 Zero | pahe.win | malicious | Sinkholed |
| Hagezi Threat Feed | flushpersist.com | malicious | Sinkholed |
| Cloudflare DNS | flushpersist.com | malicious | Sinkholed |
| DNS0 Zero | flushpersist.com | malicious | Sinkholed |
| Cloudflare DNS | capaciousdrewreligion.com | malicious | Sinkholed |
| Hagezi Threat Feed | capaciousdrewreligion.com | malicious | Sinkholed |
| Quad9 DNS | capaciousdrewreligion.com | malicious | Sinkholed |
| DNS0 Zero | capaciousdrewreligion.com | malicious | Sinkholed |
| DNS4EU | capaciousdrewreligion.com | malicious | Sinkholed |
| Hagezi Threat Feed | voraciousinfosag.com | malicious | Sinkholed |
| Quad9 DNS | voraciousinfosag.com | malicious | Sinkholed |
| DNS0 Zero | voraciousinfosag.com | malicious | Sinkholed |
| DNS4EU | voraciousinfosag.com | malicious | Sinkholed |
| Cloudflare DNS | recordedthereby.com | malicious | Sinkholed |
| Hagezi Threat Feed | recordedthereby.com | malicious | Sinkholed |
| Quad9 DNS | recordedthereby.com | malicious | Sinkholed |
| DNS0 Zero | recordedthereby.com | malicious | Sinkholed |
JavaScript (19)
No JavaScripts
HTTP Transactions (35)
| URL | IP | Response | Size |
|---|