Report Overview
Visitedpublic
2026-02-14 00:34:29
Tags
Submit Tags
URL
debolus.icu/
Finishing URL
en.wikibooks.org/wiki/Microsoft_Office#InvalidKey
IP / ASN
104.21.13.68
Title
Microsoft Office - Wikibooks, open books for an open world
Detections
urlquery
0
Network Intrusion Detection
2
Threat Detection Systems
2
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
meta.wikimedia.org | 37818 | 2003-03-16 | 2012-05-21 | 2026-02-08 | 558 B | 10 kB |  185.15.59.224 | |
href.li 1 alert(s) on this Host | 30988 | unknown | 2012-05-22 | 2026-02-11 | 523 B | 867 B | 192.0.78.26 |  |
en.wikibooks.org | 338057 | 2003-07-19 | 2012-06-03 | 2026-02-10 | 25 kB | 1.3 MB | 185.15.59.224 |    |
auth.wikimedia.org | 36228 | 2003-03-16 | 2025-03-17 | 2026-02-12 | 519 B | 1.7 kB | 185.15.59.224 | |
upload.wikimedia.org | 4329 | 2003-03-16 | 2012-05-21 | 2026-02-09 | 3.2 kB | 261 kB | 185.15.59.240 |  |
debolus.icu 1 alert(s) on this Host | unknown | 2026-01-30 | 2026-02-12 | 2026-02-12 | 480 B | 1.4 kB | 188.114.97.1 |  |
Nginx (Web servers, Reverse proxies)
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.Apache Traffic Server:9.2.11 (Web servers)
Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.MediaWiki:1.46.0-wmf.15 (Wikis)
MediaWiki is a free and open-source wiki engine.PHP (Programming languages)
PHP is a general-purpose scripting language used for web development.Envoy (Reverse proxies)
Envoy is an open-source edge and service proxy, designed for cloud-native applications.Cloudflare (CDN)
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
| Timestamp | Severity | Source IP | Destination IP | Alert |
|---|---|---|---|---|
| medium | Client IP | 188.114.97.1 | ET INFO Suspicious Domain (*.icu) in TLS SNI | |
| low | Client IP | 192.0.78.26 | ETPRO INFO Referer Obfuscation/Hiding Service Domain (href .li in TLS SNI) |
Threat Detection Systems
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Hagezi Threat Feed | debolus.icu | malicious | Sinkholed |
| DigiCert UltraDNS | href.li | malicious | Sinkholed |
JavaScript (26)
No JavaScripts
HTTP Transactions (41)
| URL | IP | Response | Size |
|---|