Report Overview
Visitedpublic
2023-11-27 21:20:07
Tags
Submit Tags
URL
ksm5sksm5sksm5s.zzux.com/
Finishing URL
ksm5sksm5sksm5s.zzux.com/
IP / ASN
192.169.7.221
#8100 ASN-QUADRANET-GLOBAL
Title
Home

Suspicious - DynDNS domain

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
ksm5sksm5sksm5s.zzux.com
unknown2000-11-152015-06-11 17:14:232023-07-17 05:34:42

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IPInternal IPET INFO Observed DNS Query to DDNS Domain .zzux .com
mediumClient IPInternal IPET INFO Observed DNS Query to DDNS Domain .zzux .com
mediumClient IPInternal IPET INFO DYNAMIC_DNS Query to a *.zzux .com Domain
mediumClient IPInternal IPET INFO DYNAMIC_DNS Query to a *.zzux .com Domain
mediumClient IPInternal IPET INFO Observed DNS Query to DDNS Domain .zzux .com
mediumClient IPInternal IPET INFO DYNAMIC_DNS Query to a *.zzux .com Domain
high
192.169.7.221
Client IPETPRO MALWARE DustySky SSL Certificate Detected
high
192.169.7.221
Client IPET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
mediumClient IPInternal IPET INFO Observed DNS Query to DDNS Domain .zzux .com
mediumClient IPInternal IPET INFO DYNAMIC_DNS Query to a *.zzux .com Domain
high
192.169.7.221
Client IPET POLICY Self Signed SSL Certificate (SomeOrganizationalUnit)
high
192.169.7.221
Client IPETPRO MALWARE DustySky SSL Certificate Detected
mediumClient IP
192.169.7.221
ET INFO DYNAMIC_DNS HTTP Request to a *.zzux .com Domain
mediumClient IPInternal IPET INFO Observed DNS Query to DDNS Domain .zzux .com
mediumClient IPInternal IPET INFO DYNAMIC_DNS Query to a *.zzux .com Domain
mediumClient IPInternal IPET INFO Observed DNS Query to DDNS Domain .zzux .com
mediumClient IPInternal IPET INFO DYNAMIC_DNS Query to a *.zzux .com Domain
mediumClient IP
192.169.7.221
ET INFO DYNAMIC_DNS HTTP Request to a *.zzux .com Domain
mediumClient IP
192.169.7.221
ET INFO DYNAMIC_DNS HTTP Request to a *.zzux .com Domain

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (0)

HTTP Transactions (3)

URLIPResponseSize