Cyberbro - Analysis Results

Analysis start time: 2026-03-05 10:06:55

Analysis duration: 0 minutes, 12.16 seconds

1.1.1.1

IPv4

DNS Lookup

one.one.one.one.

VirusTotal

Ratio: 0/94

Community: 82

IPquery

IP: 1.1.1.1

Score: 0

Geoloc: Sydney, New South Wales

Country: Australia

ASN: AS13335 Cloudflare, Inc.

Type: Not anonymous

IPinfo

IP: 1.1.1.1

Geoloc: Brisbane, Queensland

Country: Australia

Hostname: one.one.one.one

ASN: AS13335 Cloudflare, Inc.

Abusix

Abuse contact: helpdesk@apnic.net

AbuseIPDB

Reports: 55

Risk: 0%

Spur.us

Not anonymous

URLscan

Scan count: 10000

Top related domains:

  • coinmate.io (36)
  • shop.jenn.ie (4)
  • one.one.one.one (4)
  • shop.laineywilson.com (3)
  • snufffle3core.info (2)

Google DNS (common records)

Type Data TTL
PTR one.one.one.one. 1292

CrowdStrike

Device Count: 0

Link: See on CrowdStrike

Shodan

Ports: 2096, 2082, 2083, 2052, 2053, 2086, 2087, 2095, 80, 8880, 8080, 4500, 53, 8443, 443

Tags: vpn

Google

Search results:

Not Found

Criminal IP

Abuse Record Count: 138

Score

Inbound: Safe
Outbound: Safe

Issues

  • is_anonymous_vpn: False
  • is_cloud: True
  • is_darkweb: False
  • is_hosting: True
  • is_mobile: False
  • is_proxy: False
  • is_scanner: False
  • is_snort: True
  • is_tor: False
  • is_vpn: False

IDS

  • Classification: trojan
    Confirmed Time: 2026-03-04 13:29:51
    Message: ET TROJAN Observed Lactrodectus Domain in TLS SNI
    Source System: snort-2.9.0 11138
    Url:
  • Classification: info
    Confirmed Time: 2024-06-16 21:53:48
    Message: ET INFO Observed DNS over HTTPS Domain in TLS SNI (dns .ikataruto .com)
    Source System: ./snort-2.9.0 10618
    Url: github.com/curl/curl/wiki/DNS-over-HTTPS
  • Classification: info
    Confirmed Time: 2024-05-19 21:41:18
    Message: ET INFO Observed DNS over HTTPS Domain in TLS SNI (cloudseriousshit .com)
    Source System: ./snort-2.9.0 10598
    Url: github.com/curl/curl/wiki/DNS-over-HTTPS
  • Classification: info
    Confirmed Time: 2023-06-11 22:00:46
    Message: ET INFO Observed DNS over HTTPS Domain in TLS SNI (doh .lululu .eu .org)
    Source System: ./snort-2.9.0 10345
    Url: github.com/curl/curl/wiki/DNS-over-HTTPS
  • Classification: trojan
    Confirmed Time: 2022-12-17 14:27:16
    Message: ET TROJAN Observed BatLoader Domain (installationupgrade6 .com) in TLS SNI
    Source System: ./snort-2.9.0 10198
    Url:

Current Open Ports

  • Port: 80
    Vulnerability: False
    Product Name: cloudflare
    Protocol: HTTP
    Socket Type: tcp
  • Port: 8880
    Vulnerability: False
    Product Name: Unknown
    Socket Type: tcp
  • Port: 8080
    Vulnerability: False
    Product Name: cloudflare
    Protocol: HTTP
    Socket Type: tcp
  • Port: 8443
    Vulnerability: False
    Product Name: cloudflare
    Socket Type: tcp
  • Port: 853
    Vulnerability: False
    Product Name: Unknown
    Socket Type: tcp
  • Port: 443
    Vulnerability: False
    Product Name: cloudflare
    Protocol: HTTPS
    Socket Type: tcp
  • Port: 2053
    Vulnerability: False
    Product Name: Unknown
    Socket Type: tcp
  • Port: 2096
    Vulnerability: False
    Product Name: Unknown
    Socket Type: tcp
  • Port: 53
    Vulnerability: False
    Product Name: Unknown
    Protocol: DNS
    Socket Type: tcp

Alienvault

Not found