Report Overview
URL
mycutebabyshopbd.com/hdghnc/e4214cf7d36a96c8d139cdd1e376f10e/ZGFuYS5tY2NsYXlAc2x1cnBtYWlsLm5ldA==
Finishing URL
ftp-east.nexoizaki.vip/cd34312b2a51b00aec-84c8a51e9d7a1-1c1f43bf59a1e628-6442c431df3ffbbf83-93c78ea5650a-4a76c3c37ff818-f3e602bd73672/#XZGFuYS5tY2NsYXlAc2x1cnBtYWlsLm5ldA==
IP / ASN
103.213.38.36
Title
Continue Your Work
Phishing - Rockstar2FA Phishing Kit
Detections
urlquery
2
Network Intrusion Detection
0
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2025-10-05 | 7.2 kB | 586 kB |  104.18.95.41 |  |
ftp-east.nexoizaki.vip 16 alert(s) on this Host | unknown | 2025-09-23 | 2025-10-06 | 2025-10-06 | 5.9 kB | 13 kB | 104.21.93.107 |    |
cdn.jsdelivr.net | 1678 | 2012-05-16 | 2012-09-30 | 2025-10-05 | 447 B | 88 kB |  151.101.193.229 | |
aurevoe.life 3 alert(s) on this Host | unknown | unknown | 2025-09-16 | 2025-10-06 | 1.0 kB | 214 kB | 104.21.4.151 | |
mycutebabyshopbd.com | unknown | 2024-02-17 | 2025-09-22 | 2025-10-06 | 565 B | 477 B | 103.213.38.36 |  |
nexoizaki.vip 2 alert(s) on this Host | unknown | 2025-09-23 | 2025-10-06 | 2025-10-06 | 492 B | 718 B | 104.21.93.107 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.PHP:7.4.33 (Programming languages)
PHP is a general-purpose scripting language used for web development.LiteSpeed Cache (Caching, WordPress plugins)
LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.LiteSpeed (Web servers)
LiteSpeed is a high-scalability web server.Litespeed Cache (Caching, WordPress plugins)
LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.PHP:8.1.28 (Programming languages)
PHP is a general-purpose scripting language used for web development.Related reports
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | ftp-east.nexoizaki.vip | malicious | Sinkholed |
| DNS0 Zero | aurevoe.life | malicious | Sinkholed |
| DNS0 Zero | nexoizaki.vip | malicious | Sinkholed |
JavaScript (55)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 086707e4369f60afedcafb16050a7618 | DocumentWrite | 39 B | 2023-03-07 | 2026-04-04 | |
Introduced by DocumentWrite First Seen 2023-03-07 Last Seen 2026-04-04 Times Seen 746543 Size 39 B (39 bytes) MD5 086707e4369f60afedcafb16050a7618 SHA1 8216b0cc6876cbd44f01c158e7dff3833ceccd41 Loading... | |||||
| d1a26f3351b52d2c6de14e7f0f043078 | DocumentWrite | 159 kB | 2025-10-06 | 2025-10-06 | |
Introduced by DocumentWrite First Seen 2025-10-06 Last Seen 2025-10-06 Times Seen 1 Size 159 kB (159069 bytes) MD5 d1a26f3351b52d2c6de14e7f0f043078 SHA1 54be0b5729f1d7ddd39152eb2ac2b303acea694b Loading... | |||||
HTTP Transactions (23)
| URL | IP | Response | Size |
|---|