Domain > zmail.bluelotusprod.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2026-03-01	66.96.132.211 (ClassC)

HTTP/1.1 465 Date: Sun, 01 Mar 2026 22:12:14 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: request_id2ac9e19d-6260-4058-b03a-a0afef9df3d4; Max-Age3600; Path/; HttpOnlyCache-Control: no-store, no-cache, must-revalidate, max-age0Pragma: no-cacheExpires: 0X-Request-ID: 2ac9e19d-6260-4058-b03a-a0afef9df3d4

!DOCTYPE html>html langen>head>meta charsetUTF-8>title>Access Denied/title>style>html, body {    font-family: Helvetica Neue, Helvetica, Arial, sans-serif;    background: #ffffff;    color: #333;    margin: 0;    padding: 0;    min-height: 100vh;    display: flex;    flex-direction: column;    align-items: center;}h1 {    color: #c00;    font-size: 2.5em;    margin: 50px 0 10px 0;    text-align: center;}h2 {    color: #555;    font-size: 1.7em;    margin: 5px 0 40px 0;    text-align: center;}/* Browser window */.screen {    width: 90%;    max-width: 1200px;    background: #f0f0f0;    border-radius: 10px;    box-shadow: 0 20px 40px rgba(0,0,0,0.3);    border: 1px solid #ccc;    position: relative;    overflow: hidden;}/* Tab bar */.screen .tab-bar {    height: 35px;    background: #e0e0e0;    display: flex;    align-items: center;    padding: 0 10px;    border-bottom: 1px solid #ccc;}.screen .tab {    width: 14px;    height: 14px;    border-radius: 50%;    margin-right: 6px;}.screen .tab.red { background: #f25f58; }.screen .tab.yellow { background: #f8c956; }.screen .tab.green { background: #3fc14f; }/* URL bar */.screen .url-bar {    height: 28px;    background: #ffffff;    margin: 5px 15px;    border-radius: 6px;    border: 1px solid #ccc;    display: flex;    align-items: center;    padding: 0 10px;    font-size: 0.9em;    color: #555;    box-shadow: inset 0 1px 2px rgba(0,0,0,0.1);}/* Page content */.screen .content {    padding: 100px 40px;     position: relative;}/* Red circle X */.block-icon {    width: 160px;      height: 160px;     margin: 0 auto;    border-radius: 50%;    background-color: #c00;    display: flex;    align-items: center;    justify-content: center;    box-shadow: 0 0 12px rgba(0,0,0,0.25);}.block-icon svg {    width: 80px;    height: 80px;    stroke: #fff;    stroke-width: 10;}/* Bottom questions */.container {    width: 95%;    max-width: 1400px;    margin: 40px auto 10px auto;     display: flex;    justify-content: space-between;    gap: 20px;}.box {    flex: 1;    min-width: 0;    background: #fff;    padding: 30px;    border-radius: 6px;    box-shadow: 0 0 15px rgba(0,0,0,0.1);    text-align: left;    font-size: 1em;}/* Request ID in rectangle */.request-id-footer {    margin-top: 10px;     background: #f8f8f8;    border: 1px solid #ccc;    padding: 15px 30px;    font-weight: bold;    font-family: monospace;    color: #c00;    font-size: 1.3em;    border-radius: 6px;    text-align: center;    box-shadow: inset 0 2px 4px rgba(0,0,0,0.1);}/style>/head>body>h1>Sorry, you have been blocked/h1>h2>You are unable to access strong>zmail.bluelotusprod.com/strong>/h2>div classscreen>    !-- Tab bar -->    div classtab-bar>        div classtab red>/div>        div classtab yellow>/div>        div classtab green>/div>    /div>    !-- URL bar -->    div classurl-bar>        https://zmail.bluelotusprod.com    /div>    !-- Page content -->    div classcontent>        div classblock-icon>            svg viewBox0 0 60 60>                line x10 y10 x260 y260/>                line x160 y10 x20 y260/>            /svg>        /div>    /div>/div>div classcontainer>    div classbox>        strong>Why have I been blocked?/strong>        p>It seems that something in your recent request triggered our website’s security system. These protections are in place to keep the site safe from online threats and misuse. Various actions can cause this block, such as submitting specific words or phrases, executing a SQL command, or sending improperly formatted data./p>    /div>    div classbox>        strong>What can I do to resolve this?/strong>        p>If you think you were blocked by mistake, please reach out to the site owner. Be sure to include the Request ID shown below so they can quickly look into your request and restore access if appropriate./p>    /div>/div>div classrequest-id-footer>    REQUEST ID : 2ac9e19d-6260-4058-b03a-a0afef9df3d4/div>/body>/html>

Port 443

HTTP/1.1 465 Date: Sun, 01 Mar 2026 22:12:15 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: request_id0f6bfd98-e967-4253-adef-c5d7c1c1eca6; Max-Age3600; Path/; HttpOnlyCache-Control: no-store, no-cache, must-revalidate, max-age0Pragma: no-cacheExpires: 0X-Request-ID: 0f6bfd98-e967-4253-adef-c5d7c1c1eca6

!DOCTYPE html>html langen>head>meta charsetUTF-8>title>Access Denied/title>style>html, body {    font-family: Helvetica Neue, Helvetica, Arial, sans-serif;    background: #ffffff;    color: #333;    margin: 0;    padding: 0;    min-height: 100vh;    display: flex;    flex-direction: column;    align-items: center;}h1 {    color: #c00;    font-size: 2.5em;    margin: 50px 0 10px 0;    text-align: center;}h2 {    color: #555;    font-size: 1.7em;    margin: 5px 0 40px 0;    text-align: center;}/* Browser window */.screen {    width: 90%;    max-width: 1200px;    background: #f0f0f0;    border-radius: 10px;    box-shadow: 0 20px 40px rgba(0,0,0,0.3);    border: 1px solid #ccc;    position: relative;    overflow: hidden;}/* Tab bar */.screen .tab-bar {    height: 35px;    background: #e0e0e0;    display: flex;    align-items: center;    padding: 0 10px;    border-bottom: 1px solid #ccc;}.screen .tab {    width: 14px;    height: 14px;    border-radius: 50%;    margin-right: 6px;}.screen .tab.red { background: #f25f58; }.screen .tab.yellow { background: #f8c956; }.screen .tab.green { background: #3fc14f; }/* URL bar */.screen .url-bar {    height: 28px;    background: #ffffff;    margin: 5px 15px;    border-radius: 6px;    border: 1px solid #ccc;    display: flex;    align-items: center;    padding: 0 10px;    font-size: 0.9em;    color: #555;    box-shadow: inset 0 1px 2px rgba(0,0,0,0.1);}/* Page content */.screen .content {    padding: 100px 40px;     position: relative;}/* Red circle X */.block-icon {    width: 160px;      height: 160px;     margin: 0 auto;    border-radius: 50%;    background-color: #c00;    display: flex;    align-items: center;    justify-content: center;    box-shadow: 0 0 12px rgba(0,0,0,0.25);}.block-icon svg {    width: 80px;    height: 80px;    stroke: #fff;    stroke-width: 10;}/* Bottom questions */.container {    width: 95%;    max-width: 1400px;    margin: 40px auto 10px auto;     display: flex;    justify-content: space-between;    gap: 20px;}.box {    flex: 1;    min-width: 0;    background: #fff;    padding: 30px;    border-radius: 6px;    box-shadow: 0 0 15px rgba(0,0,0,0.1);    text-align: left;    font-size: 1em;}/* Request ID in rectangle */.request-id-footer {    margin-top: 10px;     background: #f8f8f8;    border: 1px solid #ccc;    padding: 15px 30px;    font-weight: bold;    font-family: monospace;    color: #c00;    font-size: 1.3em;    border-radius: 6px;    text-align: center;    box-shadow: inset 0 2px 4px rgba(0,0,0,0.1);}/style>/head>body>h1>Sorry, you have been blocked/h1>h2>You are unable to access strong>zmail.bluelotusprod.com/strong>/h2>div classscreen>    !-- Tab bar -->    div classtab-bar>        div classtab red>/div>        div classtab yellow>/div>        div classtab green>/div>    /div>    !-- URL bar -->    div classurl-bar>        https://zmail.bluelotusprod.com    /div>    !-- Page content -->    div classcontent>        div classblock-icon>            svg viewBox0 0 60 60>                line x10 y10 x260 y260/>                line x160 y10 x20 y260/>            /svg>        /div>    /div>/div>div classcontainer>    div classbox>        strong>Why have I been blocked?/strong>        p>It seems that something in your recent request triggered our website’s security system. These protections are in place to keep the site safe from online threats and misuse. Various actions can cause this block, such as submitting specific words or phrases, executing a SQL command, or sending improperly formatted data./p>    /div>    div classbox>        strong>What can I do to resolve this?/strong>        p>If you think you were blocked by mistake, please reach out to the site owner. Be sure to include the Request ID shown below so they can quickly look into your request and restore access if appropriate./p>    /div>/div>div classrequest-id-footer>    REQUEST ID : 0f6bfd98-e967-4253-adef-c5d7c1c1eca6/div>/body>/html>

Subdomains

Date	Domain	IP
www1.bluelotusprod.com	2026-02-09	66.96.132.211
zmail.bluelotusprod.com	2026-03-01	66.96.132.211
demo.bluelotusprod.com	2025-12-04	66.96.132.211
kindlecovers.bluelotusprod.com	2025-12-29	66.96.132.211

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > zmail.bluelotusprod.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains