Report Overview
Visitedpublic
2023-11-02 14:15:28
Tags
Submit Tags
URL
uspsmail95km09t3.ddns.net/a523583c2d546e5c9192e8f205ee3492/?token=aa49c2708631d3b724a8899094cc91004b3ff174b9efbe6d6d458c901df171281b5a5e76365bec6dcd39fceb4bde132cf1531972654cb1f0e150f8af888055cb../index.php../index.php../index.php../index.php
Finishing URL
uspsmail95km09t3.ddns.net/e61fc31aed34e22c90e8bc9865670b8a/?token=1483af1bc97f6252d7b9432e4f826639403d54624c4387abec7d2bea033efe456c84f55c031dae68fd42deb9f03ae62d7354be4e1b8b16d76a40b6fbe1af6d15
IP / ASN
157.245.90.85
#14061 DIGITALOCEAN-ASN
Title
USPS - Offer

Suspicious - DynDNS domain

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
uspsmail95km09t3.ddns.net
unknownunknownNo dataNo data
maps.googleapis.com
338762005-01-252019-10-17 17:56:162023-11-02 13:41:57
www.siteground.com
2911952004-03-222017-01-30 08:53:082023-10-31 15:18:15
devilsms.live
unknown2021-09-162022-06-09 23:23:152023-10-23 20:43:39

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IP
157.245.90.85
ET INFO DYNAMIC_DNS HTTP Request to a *.ddns .net Domain
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IP
157.245.90.85
ET INFO DYNAMIC_DNS HTTP Request to a *.ddns .net Domain
mediumClient IP
157.245.90.85
ET INFO DYNAMIC_DNS HTTP Request to a *.ddns .net Domain
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
high
157.245.90.85
Client IPETPRO HUNTING Suspicious Redirect to Recursive PHP - Possible Phishing
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IPInternal IPET POLICY DNS Query to DynDNS Domain *.ddns .net
mediumClient IP
157.245.90.85
ET INFO DYNAMIC_DNS HTTP Request to a *.ddns .net Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumdevilsms.liveSinkholed

ThreatFox

No alerts detected


JavaScript (3)

HTTP Transactions (17)

URLIPResponseSize