DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://bacollections.com
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://bacollections.com
- Submitted IP / ASN
76.223.105.230 AS16509 · Amazon.com, Inc.
- Final URL
- https://bacollections.com/
- Final IP / ASN
- 76.223.105.230 AS16509 · AMAZON-02
Final page
- Page title
- bacollections.com
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 117.2 KB (119981 bytes)
Detections
Activity
- HTTP requests
- 54
- Observed hosts
- 3
- Script records
- 44
Estimated HTTP data
- Sent
- ~33.3 KB
- Received
- ~1.29 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| img1.wsimg.com | 58983 | 2008-03-17 | 2012-06-20 | 2026-10-19 | 25.1 KB | 1.10 MB |  95.101.11.155 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |
| bacollections.com 3 alerts | N/A | 2022-07-24 | 2019-07-09 | 2023-08-07 | 1.6 KB | 186.7 KB | 76.223.105.230 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. GoDaddy Website Builder:8.0.0000 CMS Not recorded |
| csp.secureserver.net | 62352 | 1998-03-30 | 2022-12-18 | 2026-10-19 | 1.6 KB | 1.5 KB | 23.44.47.70 | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. Envoy Reverse proxies Envoy is an open-source edge and service proxy, designed for cloud-native applications. |