Report Overview
Visitedpublic
2026-04-24 07:11:47
Tags
Submit Tags
URL
www.6525722.cc/
Finishing URL
8ldvnb.7780452.cc:5555/?shareName=hsb301
IP / ASN
192.253.225.27
Title
welcome
Detections
urlquery
0
Network Intrusion Detection
6
Threat Detection Systems
3
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
cstaticdun.126.net 1 alert(s) on this Host | 474446 | 1998-02-28 | 2017-06-21 | 2026-04-17 | 1.3 kB | 768 kB |  47.246.50.194 |  |
192.253.225.59 | unknown | unknown | No data | No data | 564 B | 799 B | 192.253.225.59 |   |
c.dun.163.com | 567732 | 1997-09-15 | 2018-06-27 | 2026-04-19 | 599 B | 1.2 kB |  8.211.22.79 | |
8ldvnb.7780452.cc 110 alert(s) on this Host | unknown | 2026-04-18 | 2026-04-24 | 2026-04-24 | 57 kB | 6.5 MB |  0.0.0.0 |  |
ruigkdpn816p.adme.org.cn | unknown | 2010-01-28 | 2026-04-02 | 2026-04-23 | 10 kB | 2.6 MB | 163.181.131.229 | |
www.6525722.cc 2 alert(s) on this Host | unknown | 2025-12-23 | 2026-04-24 | 2026-04-24 | 882 B | 1.0 kB | 192.253.225.25 |
Tengine (Web servers)
Tengine is a web server which is based on the Nginx HTTP server.OpenResty (Web servers)
OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | 192.253.225.25 | Client IP | ET DROP Spamhaus DROP Listed Traffic Inbound group 42 | |
| medium | 192.253.225.28 | Client IP | ET DROP Spamhaus DROP Listed Traffic Inbound group 42 | |
| medium | 192.253.225.30 | Client IP | ET DROP Spamhaus DROP Listed Traffic Inbound group 42 | |
| medium | 192.253.225.23 | Client IP | ET DROP Spamhaus DROP Listed Traffic Inbound group 42 | |
| medium | 192.253.225.59 | Client IP | ET DROP Spamhaus DROP Listed Traffic Inbound group 42 | |
| low | Client IP | 74.125.250.129 | ET INFO Session Traversal Utilities for NAT (STUN Binding Request On Non-Standard High Port) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Nextron YARA rules | cstaticdun.126.net/2.28.5/core-optimi.m25b40.v2.28.5.min.js?v=2961691 | malware | Unique code from Jetriz, Swid & Jeniva of the Tetris framework |
| DNS4EU | 8ldvnb.7780452.cc | malicious | Sinkholed |
| DNS4EU | www.6525722.cc | malicious | Sinkholed |
JavaScript (88)
No JavaScripts
HTTP Transactions (139)
| URL | IP | Response | Size |
|---|