Report Overview
Visitedpublic
2025-12-22 07:16:51
Tags
Submit Tags
URL
sberbank.yandex.pochta.cdek.blablacar.youla.www.covid19.techlector.com/
Finishing URL
ww7.techlector.com/?usid=102&utid=fd505412772a7d0d8058cb7214e529f5
IP / ASN
172.233.219.78
Title
techlector.com
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
1
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
sberbank.yandex.pochta.cdek.blablacar.youla.www.covid19.techlector.com | unknown | unknown | No data | No data | 1.1 kB | 5.4 kB | 172.233.219.78 |   |
ep2.adtrafficquality.google | 3229 | 2023-11-17 | 2024-08-13 | 2025-12-22 | 994 B | 34 kB | 142.251.142.225 | |
afs.googleusercontent.com | 65181 | 2008-11-17 | 2013-05-06 | 2025-12-21 | 1.0 kB | 2.0 kB | 142.250.74.33 | |
www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2025-12-21 | 445 B | 135 kB | 216.58.207.196 | |
parking3.parklogic.com | 497061 | 2007-02-28 | 2023-05-10 | 2025-12-22 | 1.1 kB | 1.9 kB | 172.232.7.47 | |
router.parklogic.com | 346495 | 2007-02-28 | 2025-03-19 | 2025-12-22 | 610 B | 219 B | 172.234.216.100 | |
ww7.techlector.com 4 alert(s) on this Host | unknown | 2015-01-25 | 2025-12-21 | 2025-12-21 | 2.4 kB | 54 kB | 199.59.243.228 | |
ep1.adtrafficquality.google | 3093 | 2023-11-17 | 2024-07-24 | 2025-12-21 | 537 B | 11 kB | 216.58.207.226 | |
syndicatedsearch.goog | 5365 | 2023-04-14 | 2023-09-25 | 2025-12-21 | 3.3 kB | 151 kB | 216.58.207.238 |  |
OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Google Web Server (Web servers)
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium |  172.18.0.17 | 172.233.219.78 | ET HUNTING Suspicious TLS SNI Request for Possible COVID-19 Domain M1 |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS0 Zero | ww7.techlector.com | malicious | Sinkholed |
JavaScript (10)
| HASH | FROM | Size | First Seen | Last Seen | |
|---|---|---|---|---|---|
| 58d06fb9e65a690e74a6ca1dbd091efb | DocumentWrite | 180 B | 2025-12-21 | 2025-12-22 | |
Introduced by DocumentWrite First Seen 2025-12-21 Last Seen 2025-12-22 Times Seen 3 Size 180 B (180 bytes) MD5 58d06fb9e65a690e74a6ca1dbd091efb SHA1 443253adadaffa92bde2f9788e1a189ebad169a7 Loading... | |||||
HTTP Transactions (19)
| URL | IP | Response | Size |
|---|