Report Overview
URL
fromtop.pages.dev/9876543210admin/phpinfo.php
Finishing URL
fromtop.pages.dev/9876543210admin/phpinfo.php
IP / ASN
172.66.44.71
Title
Zimbra Web Client Sign In
Phishing - Zimbra Web Client
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
fromtop.pages.dev 4 alert(s) on this Host | unknown | 2020-09-02 | 2025-05-17 | 2026-03-10 | 513 B | 7.3 kB | 172.66.44.71 |  |
mail.ibl.bas.bg | unknown | unknown | 2025-05-17 | 2026-03-10 | 1.5 kB | 65 kB |  195.96.242.68 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 172.66.44.71 | ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | fromtop.pages.dev | phishing | Phishing Block |
| Cloudflare DNS | fromtop.pages.dev | malicious | Sinkholed |
| DNS4EU | fromtop.pages.dev | malicious | Sinkholed |
JavaScript (3)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 3050ae2abb1cd3f35953b5103fa3954a | DocumentWrite | 136 B | 2023-03-07 | 2026-06-06 | |
Introduced by DocumentWrite First Seen 2023-03-07 Last Seen 2026-06-06 Times Seen 1159 Size 136 B (136 bytes) MD5 3050ae2abb1cd3f35953b5103fa3954a SHA1 1ed99d798e4fccce033962261830aa361a8e0c74 Loading... | |||||
HTTP Transactions (4)
| URL | IP | Response | Size |
|---|