Report Overview
URL
amzuu.icu/h5/
Finishing URL
amzuu.icu/h5/#/
IP / ASN
154.92.22.53
Title
Amazon
Phishing - Amazon
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
cdn.dcloud.net.cn | 296858 | 2013-07-17 | 2018-09-15 | 2025-12-29 | 440 B | 579 B |  118.25.42.241 |  |
amzuu.icu 50 alert(s) on this Host | unknown | unknown | No data | No data | 4.5 kB | 1.4 MB | 154.92.22.53 |  |
ht1.ht.htamzoj.icu | unknown | 2025-12-23 | 2026-01-04 | 2026-01-04 | 1.1 kB | 3.8 kB | 154.92.22.53 | |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium |  172.18.0.11 | 154.92.22.53 | ET INFO Suspicious Domain (*.icu) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| OpenDNS | amzuu.icu | phishing | Phishing Block |
| Hagezi Threat Feed | amzuu.icu | malicious | Sinkholed |
| DNS0 Zero | amzuu.icu | malicious | Sinkholed |
| DNS4EU | amzuu.icu | malicious | Sinkholed |
JavaScript (6)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 3d5272693eb411e5b8b13a243f76c720 | DocumentWrite | 148 B | 2023-03-07 | 2026-06-07 | |
Introduced by DocumentWrite First Seen 2023-03-07 Last Seen 2026-06-07 Times Seen 15899 Size 148 B (148 bytes) MD5 3d5272693eb411e5b8b13a243f76c720 SHA1 6a586ab8e0a4bf12bbc60eea6ca9f2418625a22c Loading... | |||||
HTTP Transactions (13)
| URL | IP | Response | Size |
|---|