Report Overview
Visitedpublic
2026-04-13 22:03:53
Tags
Submit Tags
URL
65565.buzz/
Finishing URL
ww17.65565.buzz/
IP / ASN
103.224.182.250
Title
ww17.65565.buzz/
Detections
urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
6
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
l.cdn-fileserver.com 6 alert(s) on this Host | 962880 | 2025-04-08 | 2025-04-11 | 2026-04-13 | 9.3 kB | 2.7 kB |  188.114.97.1 |    |
ww17.65565.buzz 9 alert(s) on this Host | unknown | unknown | No data | No data | 1.3 kB | 12 kB |  208.91.196.95 |  |
s.cdn-fileserver.com 6 alert(s) on this Host | 1473336 | 2025-04-08 | 2025-04-11 | 2026-04-13 | 1.5 kB | 45 kB | 188.114.97.1 | |
s.yimg.com | 4553 | 1997-05-14 | 2012-05-20 | 2026-04-13 | 448 B | 26 kB |  87.248.119.251 |   |
65565.buzz 6 alert(s) on this Host | unknown | 2025-04-13 | 2026-04-13 | 2026-04-13 | 2.7 kB | 36 kB | 103.224.182.250 |  |
find-searcher.com | 584226 | 2025-02-14 | 2025-02-27 | 2026-04-08 | 1.4 kB | 71 kB | 199.191.50.144 | |
msadsscale.microsoft.com | 241518 | 1991-05-02 | 2025-01-13 | 2026-04-08 | 453 B | 73 kB | 13.107.226.53 |  |
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Nginx:1.28.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Apache Traffic Server (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 103.224.182.250 | ET INFO HTTP Request to a *.buzz domain | |
| medium | Client IP | 103.224.182.250 | ET INFO HTTP Request to a *.buzz domain | |
| medium | Client IP | 103.224.182.250 | ET INFO HTTP Request to a *.buzz domain | |
| medium | Client IP | 103.224.182.250 | ET INFO HTTP Request to a *.buzz domain | |
| medium | Client IP | 208.91.196.95 | ET INFO HTTP Request to a *.buzz domain | |
| medium | Client IP | 208.91.196.95 | ET INFO HTTP Request to a *.buzz domain |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | l.cdn-fileserver.com | malicious | Sinkholed |
| Quad9 DNS | l.cdn-fileserver.com | malicious | Sinkholed |
| Hagezi Threat Feed | ww17.65565.buzz | malicious | Sinkholed |
| DNS4EU | ww17.65565.buzz | malicious | Sinkholed |
| DigiCert UltraDNS | s.cdn-fileserver.com | malicious | Sinkholed |
| Quad9 DNS | s.cdn-fileserver.com | malicious | Sinkholed |
JavaScript (10)
No JavaScripts
HTTP Transactions (18)
| URL | IP | Response | Size |
|---|