WEBSITE ANALYSIS REPORT

http://nmkjdwq4.icu

14 Feb 2026 · 14:52:22.000 UTCpublic

Report tags: suspicious telegram_bot
Submit tags

Request review

Suspicious activity

5 detections · review the detection signals

Review evidence →

Detection signals

URLQuery findings, Threat Detection Systems, and IDS alerts

URLQuery

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious

Severitymedium

Triggered on HTTP #13

urlquery Suspicious - Suspicious Javascript code

VerdictSuspicious

Severitymedium

Triggered on HTTP #13

Threat Detection Systems

Hagezi Threat Feed Sinkholed

VerdictMalicious

Severitymedium

Matched indicatornmkjdwq4.icu

DNS4EU Sinkholed

VerdictMalicious

Severitymedium

Triggered on HTTP #24

Matched indicatorcr50s4.2idtekqgnucg.online

IDS

Suricata IDS **ET INFO Suspicious Domain (*.icu) in TLS SNI**

VerdictVerdict not recorded

Severitymedium

Suricata /w Emerging Threats Pro

Triggered on Report-level

http://nmkjdwq4.icu

Detection signals

URLQuery

urlquery Suspicious - Suspicious Javascript code

urlquery Suspicious - Suspicious Javascript code

Threat Detection Systems

Hagezi Threat Feed Sinkholed

DNS4EU Sinkholed

IDS

Suricata IDS **ET INFO Suspicious Domain (*.icu) in TLS SNI**

Display preferences

Go to…

Notifications

Full request body

Full screenshot

>http://nmkjdwq4.icu

[Detection signals]

URLQuery

urlquery ·Suspicious - Suspicious Javascript code

urlquery ·Suspicious - Suspicious Javascript code

Threat Detection Systems

Hagezi Threat Feed ·Sinkholed

DNS4EU ·Sinkholed

IDS

Suricata IDS ·ET INFO Suspicious Domain (*.icu) in TLS SNI

http://nmkjdwq4.icu

Detection signals

urlquery Suspicious - Suspicious Javascript code

urlquery Suspicious - Suspicious Javascript code

Hagezi Threat Feed Sinkholed

DNS4EU Sinkholed

Suricata IDS **ET INFO Suspicious Domain (*.icu) in TLS SNI**