Report Overview
Visitedpublic
2025-10-14 08:52:11
Tags
Submit Tags
URL
s3.eu-north-1.amazonaws.com/llezkfkjkezmalroidllekjgfkerlkzljefkmaleilajfkenfjdhmslisn/dbs.html
Finishing URL
te-lekom.sytes.net/t-online2/
IP / ASN
3.5.216.197
Title
te-lekom.sytes.net/t-online2/
Suspicious - DynDNS domain
Detections
urlquery
2
Network Intrusion Detection
1
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
s3.eu-north-1.amazonaws.com | unknown | 2005-08-18 | 2018-12-12 | 2025-10-10 | 1.1 kB | 1.1 kB | 3.5.217.25 |   |
mailerdirecmails.icu | 5706025 | 2025-07-20 | 2025-10-13 | 2025-10-13 | 1.5 kB | 1.1 kB |  37.9.175.196 |   |
te-lekom.sytes.net 6 alert(s) on this Host | unknown | 1999-04-22 | 2025-10-14 | 2025-10-14 | 1.5 kB | 4.7 kB |  18.192.212.190 |   |
Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Amazon S3 (CDN)
Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.PHP:8.3.26 (Programming languages)
PHP is a general-purpose scripting language used for web development.Plesk (Hosting panels)
Plesk is a web hosting and server data centre automation software with a control panel developed for Linux and Windows-based retail hosting service providers.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 37.9.175.196 | ET INFO Suspicious Domain (*.icu) in TLS SNI |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | te-lekom.sytes.net | malicious | Sinkholed |
JavaScript (1)
No JavaScripts
HTTP Transactions (8)
| URL | IP | Response | Size |
|---|