Report Overview
Visitedpublic
2026-03-20 03:45:23
Tags
Submit Tags
URL
www.ww38.ww38.ww38.ww38.ww16.paypal.com-websecurity.the-plough-greetham.co.uk/?tr_uuid=20260320-1444-38f2-823c-18834c7f012a&fp=-5
Finishing URL
quickresultonline.com/?dn=the-plough-greetham.co.uk&sksubid=332949&_slsen=1
IP / ASN
103.224.182.252
Title
quickresultonline.com/?dn=the-plough-greetham.co.uk&sksubid=332949&_slsen=1
Detections
urlquery
0
Network Intrusion Detection
3
Threat Detection Systems
8
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
ww16.ww38.ww38.ww38.ww38.ww16.paypal.com-websecurity.the-plough-greetham.co.uk 16 alert(s) on this Host | unknown | 2023-02-04 | 2026-03-20 | 2026-03-20 | 11 kB | 19 kB |  0.0.0.0 | |
obseu.iseaskies.com | 396953 | 2022-08-01 | 2024-06-11 | 2026-03-19 | 5.6 kB | 0 B | 0.0.0.0 | |
s.cdn-fileserver.com 3 alert(s) on this Host | 1473336 | 2025-04-08 | 2025-04-11 | 2026-03-16 | 1.5 kB | 45 kB | 188.114.96.1 |    |
img.sedoparking.com | 591238 | 2001-09-18 | 2013-04-22 | 2026-03-16 | 440 B | 16 kB | 205.234.175.175 |  |
resultsfastfind.com | unknown | 2025-04-06 | 2026-01-30 | 2026-03-13 | 1.4 kB | 76 kB | 172.67.183.137 | |
quickresultonline.com 4 alert(s) on this Host | unknown | 2025-12-18 | 2026-01-20 | 2026-03-14 | 1.1 kB | 12 kB |  199.191.50.11 |  |
msadsscale.microsoft.com | 241518 | 1991-05-02 | 2025-01-13 | 2026-03-18 | 455 B | 73 kB | 13.107.213.53 |  |
s.yimg.com | 4553 | 1997-05-14 | 2012-05-20 | 2026-03-16 | 450 B | 26 kB |  87.248.119.252 |   |
l.cdn-fileserver.com 4 alert(s) on this Host | 962880 | 2025-04-08 | 2025-04-11 | 2026-03-16 | 11 kB | 3.5 kB | 188.114.96.1 | |
euob.iseaskies.com | 456269 | 2022-08-01 | 2024-06-22 | 2026-03-19 | 510 B | 122 kB | 65.9.46.96 |   |
www.ww38.ww38.ww38.ww38.ww16.paypal.com-websecurity.the-plough-greetham.co.uk 6 alert(s) on this Host | unknown | unknown | No data | No data | 1.1 kB | 389 B | 0.0.0.0 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.CacheFly (CDN)
CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.Nginx:1.28.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Apache Traffic Server (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Caddy (Web servers)
Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 103.224.182.252 | ET PHISHING Possible Paypal Phishing Domain Mar 14 2016 | |
| low |  34.251.101.162 | Client IP | ET INFO Observed ZeroSSL SSL/TLS Certificate | |
| low | 3.248.162.96 | Client IP | ET INFO Observed ZeroSSL SSL/TLS Certificate |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | l.cdn-fileserver.com | malicious | Sinkholed |
| DNS4EU | ww16.ww38.ww38.ww38.ww38.ww16.paypal.com-websecurity.the-plough-greetham.co.uk | malicious | Sinkholed |
| Quad9 DNS | ww16.ww38.ww38.ww38.ww38.ww16.paypal.com-websecurity.the-plough-greetham.co.uk | malicious | Sinkholed |
| DigiCert UltraDNS | s.cdn-fileserver.com | malicious | Sinkholed |
| DNS4EU | quickresultonline.com | malicious | Sinkholed |
| Quad9 DNS | quickresultonline.com | malicious | Sinkholed |
| DNS4EU | www.ww38.ww38.ww38.ww38.ww16.paypal.com-websecurity.the-plough-greetham.co.uk | malicious | Sinkholed |
| Quad9 DNS | www.ww38.ww38.ww38.ww38.ww16.paypal.com-websecurity.the-plough-greetham.co.uk | malicious | Sinkholed |
JavaScript (16)
No JavaScripts
HTTP Transactions (26)
| URL | IP | Response | Size |
|---|