Report Overview
Visitedpublic
2026-01-07 13:10:13
Tags
Submit Tags
URL
jeffredrick.com/?a=4256&oc=26275&c=68358&m=3&s1=
Finishing URL
dudespin.com/no/registration
IP / ASN
104.199.34.244
Title
Dudespin
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
eb6a7d55b667d9b6e52e2ebe363274d7b395eb78.seondnsresolve.com | 569757 | 2017-11-23 | 2023-03-14 | 2026-01-01 | 471 B | 978 B |  52.49.104.56 | |
maxi51.com | unknown | 2025-01-29 | 2026-01-05 | 2026-01-05 | 559 B | 898 kB |  3.220.90.255 | |
fonts.gstatic.com | unknown | 2008-02-11 | 2014-04-02 | 2026-01-04 | 1.1 kB | 155 kB | 142.250.74.35 | |
cdn.cookie-script.com | 107384 | 2013-05-28 | 2020-07-25 | 2026-01-06 | 444 B | 598 kB |  188.166.57.74 |  |
challenges.cloudflare.com | 11393 | 2009-02-17 | 2021-10-20 | 2026-01-04 | 1.1 kB | 101 kB |  104.18.95.41 |  |
dudespin.com | unknown | unknown | 2025-12-09 | 2025-12-16 | 99 kB | 11 MB |  185.207.196.60 |  |
jeffredrick.com 1 alert(s) on this Host | unknown | 2024-03-01 | 2026-01-05 | 2026-01-05 | 516 B | 898 kB | 104.199.34.244 | |
rex92.com | 5658772 | 2025-07-02 | 2025-11-21 | 2025-11-21 | 513 B | 898 kB | 3.220.90.255 | |
cdn.seondf.com | 742603 | 2021-06-30 | 2021-07-27 | 2026-01-07 | 836 B | 1.3 MB | 104.21.95.212 |   |
dub3spsin.com 1 alert(s) on this Host | unknown | unknown | 2025-12-16 | 2025-12-16 | 578 B | 898 kB | 185.207.198.171 | |
87dfe320422c31f39421cfcfcb14325d.seondnsresolve.com | unknown | 2017-11-23 | 2026-01-07 | 2026-01-07 | 483 B | 257 B | 52.210.2.228 | |
paramatise.com 1 alert(s) on this Host | 4159194 | 2024-11-13 | 2025-06-02 | 2025-10-08 | 560 B | 898 kB | 23.251.142.1 | |
dudsp.lynmonkel.com | unknown | 2025-07-15 | 2025-12-16 | 2025-12-16 | 529 B | 898 kB | 185.207.196.137 |   |
www.googletagmanager.com | 283 | 2011-11-11 | 2012-10-04 | 2026-01-04 | 881 B | 758 kB | 142.250.178.40 |
Nginx:1.26.3 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Cloudflare Bot Management (Security)
Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Express (Web frameworks, Web servers)
Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.Node.js (Programming languages)
Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 74.125.250.129 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) | |
| low | Client IP | 74.125.250.129 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | dudespin.com/cfr/15159469d61dbe8/p/29-12-2025-12-08-25-6d48e1e7/main.d5faaae54f9c33f5.js | audit | Hunting_JS_WebAssembly |
| DNS4EU | jeffredrick.com | malicious | Sinkholed |
| DNS4EU | paramatise.com | malicious | Sinkholed |
| DNS0 Zero | dub3spsin.com | malicious | Sinkholed |
JavaScript (44)
No JavaScripts
HTTP Transactions (101)
| URL | IP | Response | Size |
|---|