Report Overview
Visitedpublic
2026-03-22 18:40:49
Tags
Submit Tags
URL
logama4.click/
Finishing URL
ww38.logama4.click/
IP / ASN
103.224.212.215
Title
logama4.click
Detections
urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
logama4.click 2 alert(s) on this Host | unknown | unknown | No data | No data | 1.9 kB | 36 kB |  0.0.0.0 |  |
ww38.logama4.click 4 alert(s) on this Host | unknown | 2025-08-27 | 2026-03-22 | 2026-03-22 | 2.0 kB | 17 kB | 0.0.0.0 |  |
obseu.primecirclenet.com | unknown | 2026-01-28 | 2026-03-04 | 2026-03-18 | 5.0 kB | 5.5 kB |  54.75.69.192 | |
realtimesearchresults.com 2 alert(s) on this Host | 464056 | 2025-02-14 | 2025-03-28 | 2026-03-21 | 1.3 kB | 70 kB |  199.191.50.132 |   |
msadsscale.microsoft.com | 241518 | 1991-05-02 | 2025-01-13 | 2026-03-18 | 461 B | 73 kB |  13.107.213.53 |  |
euob.primecirclenet.com | unknown | 2026-01-28 | 2026-03-04 | 2026-03-18 | 455 B | 122 kB | 52.84.50.92 |    |
l.cdn-fileserver.com 3 alert(s) on this Host | 962880 | 2025-04-08 | 2025-04-11 | 2026-03-16 | 8.6 kB | 2.6 kB | 188.114.97.1 |  |
yfdpco3.com | 2753785 | 2025-03-20 | 2025-07-30 | 2026-03-20 | 643 B | 11 kB | 208.91.196.46 | |
s.cdn-fileserver.com 3 alert(s) on this Host | 1473336 | 2025-04-08 | 2025-04-11 | 2026-03-16 | 1.5 kB | 45 kB | 188.114.97.1 | |
s.yimg.com | 4553 | 1997-05-14 | 2012-05-20 | 2026-03-16 | 456 B | 26 kB |  87.248.119.251 |  |
Apache HTTP Server (Web servers)
Apache is a free and open-source cross-platform web server software.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Nginx:1.28.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Caddy (Web servers)
Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Apache Traffic Server (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| low | Client IP | 103.224.212.215 | ETPRO INFO HTTP Request to a *.click domain | |
| low | Client IP | 103.224.212.215 | ETPRO INFO HTTP Request to a *.click domain | |
| low | Client IP |  185.53.179.200 | ETPRO INFO HTTP Request to a *.click domain | |
| low | Client IP | 185.53.179.200 | ETPRO INFO HTTP Request to a *.click domain | |
| low | Client IP | 185.53.179.200 | ETPRO INFO HTTP Request to a *.click domain | |
| low | 54.75.69.192 | Client IP | ET INFO Observed ZeroSSL SSL/TLS Certificate |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | l.cdn-fileserver.com | malicious | Sinkholed |
| Cloudflare DNS | realtimesearchresults.com | malicious | Sinkholed |
| DNS4EU | realtimesearchresults.com | malicious | Sinkholed |
| DigiCert UltraDNS | s.cdn-fileserver.com | malicious | Sinkholed |
JavaScript (17)
No JavaScripts
HTTP Transactions (25)
| URL | IP | Response | Size |
|---|