DNS4EU Sinkholed
VerdictMalicious
Severitymedium
WEBSITE ANALYSIS REPORT
http://gmail520.shop
public
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- http://gmail520.shop
- Submitted IP / ASN
172.67.195.134 AS13335 · CLOUDFLARENET
- Final URL
- https://gmail520.shop/
- Final IP / ASN
- 172.67.195.134 AS13335 · CLOUDFLARENET
Final page
- Page title
- 店铺正在维护
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 617.4 KB (632249 bytes)
Detections
Activity
- HTTP requests
- 107
- Observed hosts
- 11
- Script records
- 122
Estimated HTTP data
- Sent
- ~108.6 KB
- Received
- ~14.26 MB
Page capture
Final browser state
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
1Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| i2.hdslb.com | 167445 | 2011-11-25 | 2012-11-03 | 2026-05-27 | 886 B | 1.11 MB |  104.166.134.242 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |
| broadcast.chat.bilibili.com | 155380 | 2004-10-21 | 2017-01-30 | 2026-05-28 | 621 B | 160 B |  8.211.17.172 | |
| hw-v2-web-player-tracker.biliapi.net | 259723 | 2017-04-28 | 2022-09-04 | 2026-05-30 | 744 B | 179 B |  101.91.136.148 | |
| upos-hz-mirrorakam.akamaized.net | 205122 | 2014-03-18 | 2018-12-29 | 2026-05-28 | 43.4 KB | 440.4 KB |  23.36.76.251 | OpenResty Web servers OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine. Nginx Web servers, Reverse proxies Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. |
| s1.hdslb.com | 208984 | 2011-11-25 | 2017-02-03 | 2026-05-27 | 11.3 KB | 12.09 MB |  47.246.49.183 | Tengine Web servers Tengine is a web server which is based on the Nginx HTTP server. Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |
| player.bilibili.com | 1861554 | 2004-10-21 | 2018-04-02 | 2026-05-29 | 583 B | 7.9 KB | 47.246.49.204 | Tengine Web servers Tengine is a web server which is based on the Nginx HTTP server. Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |
| api.bilibili.com | 78731 | 2004-10-21 | 2014-10-07 | 2026-05-28 | 10.9 KB | 213.5 KB | 148.153.35.66 | |
| i1.hdslb.com | 164479 | 2011-11-25 | 2012-11-03 | 2026-05-23 | 886 B | 354.4 KB |  138.113.149.152 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |
| data.bilibili.com | 104145 | 2004-10-21 | 2015-04-08 | 2026-05-23 | 22.1 KB | 7.5 KB |  164.52.1.58 | |
| i0.hdslb.com | 76916 | 2011-11-25 | 2012-11-03 | 2026-05-23 | 1.9 KB | 15.4 KB |  98.98.201.226 | Amazon Web Services PaaS Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. |
| gmail520.shop 2 alerts | N/A | 2024-12-25 | 2025-10-03 | 2025-10-03 | 960 B | 47.4 KB | 172.67.195.134 | Cloudflare CDN Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services. HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. |