Report Overview
Visitedpublic
2026-05-31 17:01:20
Tags
Submit Tags
URL
shouu.buzz/
Finishing URL
onlineresultsfinder.com/?dn=shouu.buzz&sksubid=23197244&_slsen=0
IP / ASN
172.239.193.153
Title
onlineresultsfinder.com/?dn=shouu.buzz&sksubid=23197244&_slsen=0
Detections
urlquery
0
Network Intrusion Detection
5
Threat Detection Systems
6
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
obseu.iseaskies.com | 396953 | 2022-08-01 | 2024-06-11 | 2026-05-28 | 3.9 kB | 5.0 kB |  3.248.162.96 | |
s.yimg.com | 4553 | 1997-05-14 | 2012-05-20 | 2026-05-25 | 450 B | 26 kB |  87.248.119.252 |   |
resultsfastfind.com 1 alert(s) on this Host | unknown | 2025-04-06 | 2026-01-30 | 2026-05-29 | 1.4 kB | 75 kB |  104.21.59.205 |    |
msadsscale.microsoft.com | 241518 | 1991-05-02 | 2025-01-13 | 2026-05-27 | 455 B | 73 kB | 150.171.109.200 |  |
shouu.buzz 2 alert(s) on this Host | 1635925 | 2025-01-15 | 2025-01-20 | 2026-02-04 | 906 B | 5.5 kB | 172.236.108.16 |   |
ww1.shouu.buzz 16 alert(s) on this Host | unknown | 2025-01-15 | 2026-05-31 | 2026-05-31 | 10 kB | 18 kB | 0.0.0.0 | |
l.cdn-fileserver.com 4 alert(s) on this Host | 962880 | 2025-04-08 | 2025-04-11 | 2026-05-25 | 10 kB | 3.6 kB | 188.114.97.1 | |
euob.iseaskies.com | 456269 | 2022-08-01 | 2024-06-22 | 2026-05-28 | 446 B | 133 kB | 3.167.2.102 |   |
onlineresultsfinder.com 2 alert(s) on this Host | unknown | 2025-12-15 | 2026-01-19 | 2026-05-27 | 1.1 kB | 12 kB |  199.191.50.11 | |
router.parklogic.com | 346495 | 2007-02-28 | 2025-03-19 | 2026-05-25 | 490 B | 215 B | 172.234.216.100 | |
s.cdn-fileserver.com 3 alert(s) on this Host | 1473336 | 2025-04-08 | 2025-04-11 | 2026-05-25 | 1.5 kB | 45 kB | 188.114.97.1 | |
img.sedoparking.com | 591238 | 2001-09-18 | 2013-04-22 | 2026-05-25 | 376 B | 16 kB | 205.234.175.175 |  |
Apache Traffic Server (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.Amazon Web Services (PaaS)
Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.Google Cloud (IaaS)
Google Cloud is a suite of cloud computing services.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Google Cloud CDN (CDN)
Cloud CDN uses Google's global edge network to serve content closer to users.Azure Front Door (Load balancers)
Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.Azure (PaaS)
Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Caddy (Web servers)
Amazon CloudFront (CDN)
Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.Nginx:1.28.0 (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.CacheFly (CDN)
CacheFly is a content delivery network (CDN) which offers CDN service that relies solely on IP anycast for routing, rather than DNS based global load balancing.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP |  64.190.63.136 | ET INFO HTTP Request to a *.buzz domain | |
| medium | Client IP | 64.190.63.136 | ET INFO HTTP Request to a *.buzz domain | |
| low | 3.248.162.96 | Client IP | ET INFO Observed ZeroSSL SSL/TLS Certificate | |
| medium | Client IP | 64.190.63.136 | ET INFO HTTP Request to a *.buzz domain | |
| medium | Client IP | 64.190.63.136 | ET INFO HTTP Request to a *.buzz domain |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DigiCert UltraDNS | s.cdn-fileserver.com | malicious | Sinkholed |
| DNS4EU | shouu.buzz | malicious | Sinkholed |
| DNS4EU | ww1.shouu.buzz | malicious | Sinkholed |
| DigiCert UltraDNS | l.cdn-fileserver.com | malicious | Sinkholed |
| Cloudflare DNS | onlineresultsfinder.com | malicious | Sinkholed |
| DNS4EU | resultsfastfind.com | malicious | Sinkholed |
JavaScript (17)
No JavaScripts
HTTP Transactions (30)
| URL | IP | Response | Size |
|---|