Avast WEBforum

Other => Viruses and worms => Topic started by: polonus on March 13, 2018, 10:12:02 PM

Title: DynDNS domain IDS alert, often abused....
Post by: polonus on March 13, 2018, 10:12:02 PM

Read: https://www.splunk.com/blog/2015/08/04/detecting-dynamic-dns-domains-in-splunk.html
Given here: https://urlquery.net/report/2aa6a58c-ad24-4e5d-98d4-0fbaf4f5e963
Also here (AutoShun): https://www.virustotal.com/nl/url/f29da925f60ec990bb53b4269c90184cb1f6296d305f64c7abc05ea28fde1ff6/analysis/1520958731/
and https://sitecheck.sucuri.net/results/senses.dtdns.net  (ssems timing out now): https://aw-snap.info/file-viewer/?protocol=not-secure&tgt=senses.dtdns.net&ref_sel=GSP2&ua_sel=ff&fs=1

polonus