Report - uspsmail95km09t3.ddns.net/a523583c2d546e5c9192e8f205ee3492/?token=aa49c2708631d3b724a8899094cc91004b3ff174b9efbe6d6d458c901df171281b5a5e76365bec6dcd39fceb4bde132cf1531972654cb1f0e150f8af888055cb../index.php

Report Overview

Visitedpublic

2023-11-02 14:15:30

Tags

Submit Tags

URL

uspsmail95km09t3.ddns.net/a523583c2d546e5c9192e8f205ee3492/?token=aa49c2708631d3b724a8899094cc91004b3ff174b9efbe6d6d458c901df171281b5a5e76365bec6dcd39fceb4bde132cf1531972654cb1f0e150f8af888055cb../index.php

Finishing URL

uspsmail95km09t3.ddns.net/da453c5f4d484ca5e3634d028a15bbda/?token=fe1fedad8b0b139f9f03274cc1083d6f2e7d8cbe9ddc6e6ef9d211881cca28ce555225563950c0dfa7f3d10b83dd92468267b13e8cd959dd6ed2b9d851188959

IP / ASN

United States

157.245.90.85

#14061 DIGITALOCEAN-ASN

Title

USPS - Offer

Suspicious - DynDNS domain

Detections

urlquery

0

Network Intrusion Detection

0

Threat Detection Systems

0

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
www.siteground.com	291195	2004-03-22	2017-01-30 08:53:08	2023-10-31 15:18:15	351 B	929 B	34.149.40.93
devilsms.live	unknown	2021-09-16	2022-06-09 23:23:15	2023-10-23 20:43:39	433 B	0 B	0.0.0.0
uspsmail95km09t3.ddns.net	unknown	unknown	No data	No data	6.3 kB	40 kB	157.245.90.85
maps.googleapis.com	33876	2005-01-25	2019-10-17 17:56:16	2023-11-02 13:41:57	902 B	84 kB	142.250.74.138

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-11-02 14:15:13	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:13	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:13	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:15	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:16	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:16	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:17	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:18	medium	Client IP	157.245.90.85	ET INFO DYNAMIC_DNS HTTP Request to a *.ddns .net Domain
2023-11-02 14:15:18	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:18	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:18	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:19	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net
2023-11-02 14:15:19	medium	Client IP	Internal IP	ET POLICY DNS Query to DynDNS Domain *.ddns .net

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-11-02	medium	devilsms.live	Sinkholed

ThreatFox

No alerts detected

JavaScript (3)

HTTP Transactions (14)

	URL	IP	Response	Size