Report Overview
Visitedpublic
2025-09-18 18:47:29
Tags
Submit Tags
URL
castaewan.com/pmvfp/d91ec3fd01ec3224d20dd39ad47b2e82?exp=1758220228&ret=https://resjoydc.com/d91ec3fd01ec3224d20dd39ad47b2e82&sig=22fe729511c7d1a8490e99dbed15a77976b7c1b8edfbc614d3bf2525cf708464
Finishing URL
resjoydc.com/d91ec3fd01ec3224d20dd39ad47b2e82?_fpm_result=Y7iesr0PCl0=
IP / ASN
5.254.28.21
Title
Pay
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
cdn.jsdelivr.net | 1678 | unknown | No data | No data | 431 B | 7.3 kB |  151.101.193.229 | |
metrics.castaewan.com 2 alert(s) on this Domain | unknown | unknown | No data | No data | 1.0 kB | 2.5 kB |  104.21.58.158 |  |
castaewan.com 4 alert(s) on this Domain | unknown | unknown | No data | No data | 3.3 kB | 186 kB | 5.254.28.21 |     |
resjoydc.com 21 alert(s) on this Domain | unknown | unknown | No data | No data | 14 kB | 434 kB | 172.67.150.250 |   |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.PHP:7.4.19 (Programming languages)
PHP is a general-purpose scripting language used for web development.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Vue.js (JavaScript frameworks)
Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.jsDelivr (CDN)
JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | castaewan.com | malicious | Sinkholed |
| DNS0 Zero | resjoydc.com | malicious | Sinkholed |
| DNS0 Zero | metrics.castaewan.com | malicious | Sinkholed |
JavaScript (15)
No JavaScripts
HTTP Transactions (28)
| URL | IP | Response | Size |
|---|