Report Overview
URL
search.app/H68U4HRNMLw8LQ6J9
Finishing URL
gmkcb-bdxh-03l9.c-cmd509g3.workers.dev/l/xxey0ynPx6g
IP / ASN
199.36.158.100
Title
Enter code
Phishing - Kali365 Phishing Kit
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
api.kali365.xyz 7 alert(s) on this Host | unknown | 2026-04-18 | 2026-04-20 | 2026-04-20 | 3.1 kB | 6.3 kB |  172.67.191.56 |  |
search.app | 58476 | 2023-09-11 | 2016-04-17 | 2026-04-22 | 496 B | 20 kB | 199.36.158.100 |  |
gmkcb-bdxh-03l9.c-cmd509g3.workers.dev 2 alert(s) on this Host | unknown | unknown | 2026-04-20 | 2026-04-20 | 945 B | 22 kB | 172.67.192.208 | |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Firebase (Databases, Development)
Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 172.67.192.208 | ET INFO Observed Cloudflare workers.dev Domain in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | api.kali365.xyz | malicious | Sinkholed |
JavaScript (3)
No JavaScripts
HTTP Transactions (10)
| URL | IP | Response | Size |
|---|