Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
sh4737904.c.had.su	unknown	2017-05-10	2023-11-16 03:55:07	2023-12-04 15:50:16	557 B	487 B	81.91.178.100
kzg-b.top	unknown	unknown	No data	No data	16 kB	3.7 MB	188.114.97.1
code.jquery.com	634	2005-12-10	2012-05-21 19:28:02	2023-12-05 05:09:20	415 B	32 kB	151.101.2.137
ipinfo.io	8136	2013-04-23	2013-12-16 08:25:53	2023-12-05 06:53:03	417 B	1.8 kB	34.117.59.81
fonts.gstatic.com	unknown	2008-02-11	2014-09-09 02:40:21	2023-12-05 06:14:20	4.3 kB	260 kB	216.58.207.227
irnfd.blogspot.am	unknown	unknown	No data	No data	484 B	664 B	172.217.21.161
irnfd.blogspot.com	unknown	2000-07-31	2023-11-24 19:40:53	2023-12-05 11:56:10	485 B	16 kB	172.217.21.161
d3d3.top	unknown	2023-11-29	2023-11-29 16:39:57	2023-12-03 23:55:31	528 B	2.4 kB	188.114.97.1
cdnjs.cloudflare.com	235	2009-02-17	2015-04-17 22:46:33	2023-12-05 05:09:58	2.3 kB	104 kB	104.17.25.14
fonts.googleapis.com	8877	2005-01-25	2013-06-10 22:14:26	2023-12-05 07:37:50	518 B	43 kB	142.250.74.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-05 10:56:17	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2023-12-05 10:56:17	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2023-12-05 10:56:17	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile
2023-12-05 10:56:20	medium	Client IP	34.117.59.81	ET POLICY Possible External IP Lookup Domain Observed in SNI (ipinfo. io)

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (55)