Report - minecraftov.ru/vse-bloki-minecraft/stroitelnye-bloki/432-sherst-sinyaya

Report Overview

URL

minecraftov.ru/vse-bloki-minecraft/stroitelnye-bloki/432-sherst-sinyaya
IP

88.212.232.164

ASN

#7979 SERVERS-COM
Submitted

2023-02-02T15:06:21Z

Access
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

12

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
minecraftov.ru (75)	unknown	2015-10-10T05:25:43Z	2023-02-02T15:28:59Z	40960	1460838	88.212.232.164
ocsp.pki.goog (20)	175	2018-07-01T08:43:07Z	2023-03-13T05:09:47Z	6860	13986	142.250.74.131
www.google-analytics.com (1)	40	2012-10-03T03:04:21Z	2023-03-13T07:36:03Z	370	20615	142.250.74.46
cse.google.com (2)	2642	2015-03-18T06:14:25Z	2023-03-13T08:52:51Z	685	56872	142.250.74.174
fonts.gstatic.com (6)	unknown	2014-09-09T02:40:21Z	2023-03-13T08:44:36Z	3079	116590	142.250.74.35
www.googletagservices.com (1)	169	2021-02-14T04:54:38Z	2023-03-13T08:45:50Z	422	49971	216.58.207.194
www.google.com (1)	7	2015-05-10T13:11:19Z	2023-03-13T06:40:43Z	417	1084	216.58.207.228
stats.g.doubleclick.net (1)	96	2013-06-10T22:21:11Z	2023-03-13T08:02:41Z	600	592	64.233.162.155
tpc.googlesyndication.com (1)	126	2020-01-16T09:35:32Z	2023-03-13T05:31:03Z	421	9690	142.250.74.161
firefox.settings.services.mozilla.com (2)	867	2020-06-04T22:08:41Z	2023-03-13T05:09:10Z	796	2374	35.241.9.150
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03T13:26:46Z	2023-03-13T05:09:35Z	413	5844	34.160.144.191
counter.yadro.ru (2)	7275	2014-09-09T20:41:17Z	2023-03-13T07:26:53Z	916	845	88.212.201.198
mc.yandex.ru (4)	2672	2012-05-21T11:38:30Z	2023-03-13T08:16:45Z	3701	78821	77.88.21.119
www.gstatic.com (1)	unknown	2016-07-26T11:37:06Z	2023-03-13T07:57:11Z	437	2290	216.58.211.3
adservice.google.no (2)	96969	2018-06-20T01:38:38Z	2023-03-13T05:09:46Z	802	1528	142.250.74.34
clients1.google.com (1)	415	2013-02-01T14:08:37Z	2023-03-13T05:32:11Z	306	125	172.217.21.174
static.doubleclick.net (4)	333	2012-06-26T18:16:24Z	2023-03-13T08:46:37Z	1817	292058	142.250.74.134
www.google.no (1)	25607	2016-04-05T21:50:59Z	2023-03-13T06:26:15Z	513	578	142.250.74.67
r3.o.lencr.org (9)	344	2020-12-02T09:52:13Z	2023-03-13T05:09:07Z	3042	7974	23.36.77.32
contile.services.mozilla.com (1)	1114	2021-05-27T20:32:35Z	2023-03-13T05:09:13Z	333	391	34.117.237.239
pagead2.googlesyndication.com (3)	101	2021-02-20T16:52:05Z	2023-03-13T08:39:15Z	1207	226289	216.58.207.226
ocsp.globalsign.com (1)	2075	2012-07-20T19:46:16Z	2023-03-13T05:09:19Z	359	1412	104.18.20.226
push.services.mozilla.com (1)	2140	2014-10-24T10:27:06Z	2023-03-13T05:09:14Z	606	127	52.40.68.141
adservice.google.com (1)	76	2021-02-20T17:10:48Z	2023-03-13T08:49:52Z	395	663	172.217.21.162
img-getpocket.cdn.mozilla.net (6)	1631	2018-06-22T01:36:00Z	2023-03-13T05:09:16Z	3245	93210	34.120.237.76

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2023-02-02	medium	minecraftov.ru/vse-bloki-minecraft/stroitelnye-bloki/432-sherst-sinyaya	Malware
2023-02-02	medium	minecraftov.ru/templates/allrounder-3/js/lv-dropdown.js	Malware
2023-02-02	medium	minecraftov.ru/templates/allrounder-3/js/jq.easy-caption.min.js	Malware
2023-02-02	medium	minecraftov.ru/templates/allrounder-3/js/jq.easy-tooltip.min.js	Malware
2023-02-02	medium	minecraftov.ru/templates/allrounder-3/js/reflection.js	Malware
2023-02-02	medium	minecraftov.ru/templates/allrounder-3/js/effects.js	Malware
2023-02-02	medium	minecraftov.ru/components/com_jcomments/tpl/default/style.css?v=3002	Malware
2023-02-02	medium	minecraftov.ru/components/com_jcomments/js/jcomments-v2.3.js?v=12	Malware
2023-02-02	medium	minecraftov.ru/media/jui/js/jquery-noconflict.js?a30c12947c5076d4efb53bd508247f42	Malware
2023-02-02	medium	minecraftov.ru/media/jui/js/jquery-migrate.min.js?a30c12947c5076d4efb53bd508247f42	Malware
2023-02-02	medium	minecraftov.ru/templates/allrounder-3/js/jquery-1.9.1.min.js	Malware
2023-02-02	medium	minecraftov.ru/component/jcomments/	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

HTTP Transactions (148)

	URL	IP	Response	Size
	r3.o.lencr.org/	23.36.77.32	200 OK	503
Search urlquery URL r3.o.lencr.org/ DOMAIN lencr.org FQDN r3.o.lencr.org IP 23.36.77.32 Hash 62de35a6c8e4efd7633fc5236b5b086f External sources Mnemonic PDNS FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.36.77.32 VirusTotal HASH 6a92912a86dfcd0330d040cef06bef36889c76ab FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.36.77.32 crt.sh FQDN r3.o.lencr.org DOMAIN lencr.org URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 62de35a6c8e4efd7633fc5236b5b086f 6a92912a86dfcd0330d040cef06bef36889c76ab ebb8ca05df5ba73b92174105d54d192a8d9e3e10fba48bf96161b0cb759220ec HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "EBB8CA05DF5BA73B92174105D54D192A8D9E3E10FBA48BF96161B0CB759220EC" Last-Modified: Tue, 31 Jan 2023 04:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4574 Expires: Thu, 02 Feb 2023 16:22:24 GMT Date: Thu, 02 Feb 2023 15:06:10 GMT Connection: keep-alive`

	r3.o.lencr.org/	23.36.77.32	200 OK	503
Search urlquery URL r3.o.lencr.org/ DOMAIN lencr.org FQDN r3.o.lencr.org IP 23.36.77.32 Hash 7e05c8461bd2dc5a149f71e2c465ea29 External sources Mnemonic PDNS FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.36.77.32 VirusTotal HASH 705983959c887e243cb55a8a1796757b579ee977 FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.36.77.32 crt.sh FQDN r3.o.lencr.org DOMAIN lencr.org URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 7e05c8461bd2dc5a149f71e2c465ea29 705983959c887e243cb55a8a1796757b579ee977 4d9ea085d5dda9dabed11af9847c2b0aa6182358673b356a4e2bd631e22a9922 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "4D9EA085D5DDA9DABED11AF9847C2B0AA6182358673B356A4E2BD631E22A9922" Last-Modified: Tue, 31 Jan 2023 12:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2370 Expires: Thu, 02 Feb 2023 15:45:40 GMT Date: Thu, 02 Feb 2023 15:06:10 GMT Connection: keep-alive`

	firefox.settings.services.mozilla.com/v1/	35.241.9.150	200 OK	939
Search urlquery URL firefox.settings.services.mozilla.com/v1/ DOMAIN mozilla.com FQDN firefox.settings.services.mozilla.com IP 35.241.9.150 Hash ff250d3ef3fa45322bf05039a0122a9f External sources Mnemonic PDNS FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com IP 35.241.9.150 VirusTotal HASH b3e7a2c383bce1bab807dbe1a03c375258b51f1d FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com IP 35.241.9.150 crt.sh FQDN firefox.settings.services.mozilla.com DOMAIN mozilla.com URL HTTP/2 firefox.settings.services.mozilla.com/v1/ IP 35.241.9.150:0 ASN #15169 GOOGLE Magic JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size 939 Hash ff250d3ef3fa45322bf05039a0122a9f b3e7a2c383bce1bab807dbe1a03c375258b51f1d d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba HTTP Headers `GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site` `HTTP/2 200 OK access-control-allow-origin: * access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; strict-transport-security: max-age=31536000 x-content-type-options: nosniff content-length: 939 via: 1.1 google date: Thu, 02 Feb 2023 14:43:31 GMT content-type: application/json age: 1359 cache-control: max-age=3600,public alt-svc: clear X-Firefox-Spdy: h2`

	r3.o.lencr.org/	23.36.77.32	200 OK	503
Search urlquery URL r3.o.lencr.org/ DOMAIN lencr.org FQDN r3.o.lencr.org IP 23.36.77.32 Hash 9a76feabb767086ae0fa54e0ffbf763f External sources Mnemonic PDNS FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.36.77.32 VirusTotal HASH 3655d78994a1e9838340669462728b67c8c12e54 FQDN r3.o.lencr.org DOMAIN lencr.org IP 23.36.77.32 crt.sh FQDN r3.o.lencr.org DOMAIN lencr.org URL HTTP/1.1 r3.o.lencr.org/ IP 23.36.77.32:0 ASN #20940 Akamai International B.V. Magic data Size 503 Hash 9a76feabb767086ae0fa54e0ffbf763f 3655d78994a1e9838340669462728b67c8c12e54 bf215ab858c7785b7c01f7d3d437a918f056f00fe9b065820e1cdd09b7bba8f9 HTTP Headers `POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 503 ETag: "BF215AB858C7785B7C01F7D3D437A918F056F00FE9B065820E1CDD09B7BBA8F9" Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=8804 Expires: Thu, 02 Feb 2023 17:32:54 GMT Date: Thu, 02 Feb 2023 15:06:10 GMT Connection: keep-alive`

	minecraftov.ru/vse-bloki-minecraft/stroitelnye-bloki/432-sherst-sinyaya	88.212.232.164	200 OK	11873
Search urlquery URL minecraftov.ru/vse-bloki-minecraft/stroitelnye-bloki/432-sherst-sinyaya DOMAIN minecraftov.ru FQDN minecraftov.ru IP 88.212.232.164 Hash aaeff0698c11c88fb639a437bebc5bd2 External sources Mnemonic PDNS FQDN minecraftov.ru DOMAIN minecraftov.ru IP 88.212.232.164 VirusTotal HASH b4d3c9ea68df9aa5bde748c3cd2655aac5b2a8f6 FQDN minecraftov.ru DOMAIN minecraftov.ru IP 88.212.232.164 crt.sh FQDN minecraftov.ru DOMAIN minecraftov.ru URL HTTP/1.1 minecraftov.ru/vse-bloki-minecraft/stroitelnye-bloki/432-sherst-sinyaya IP 88.212.232.164:0 ASN #7979 SERVERS-COM Magic XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1443), with CRLF, LF line terminators Size 11873 Hash aaeff0698c11c88f

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (215)

#1 JS:Script (size: 28)

#2 JS:Script (size: 614)

#3 JS:Script (size: 156)

#4 JS:Script (size: 34)

#5 JS:Script (size: 2933)

#6 JS:Script (size: 47)

#7 JS:Script (size: 34231)

#8 JS:Script (size: 48)

#9 JS:Script (size: 17314)

#10 JS:Script (size: 363)

#11 JS:Script (size: 915)

#12 JS:Script (size: 152804)

#13 JS:Script (size: 446395)

#14 JS:Script (size: 46)

#15 JS:Script (size: 8289)

#16 JS:Script (size: 1553)

#17 JS:Script (size: 460)

#18 JS:Script (size: 52)

#19 JS:Script (size: 1444)

#20 JS:Script (size: 408)

#21 JS:Script (size: 408)

#22 JS:Script (size: 395)

#23 JS:Script (size: 436)

#24 JS:Script (size: 8409)

#25 JS:Script (size: 414)

#26 JS:Script (size: 69)

#27 JS:Script (size: 150482)

#28 JS:Script (size: 10193)

#29 JS:Script (size: 50)

#30 JS:Script (size: 9)

#31 JS:Script (size: 29)

#32 JS:Script (size: 8380)

#33 JS:Script (size: 9549)

#34 JS:Script (size: 2130)

#35 JS:Script (size: 4206)

#36 JS:Script (size: 121)

#37 JS:Script (size: 19)

#38 JS:Script (size: 91)

#39 JS:Script (size: 955)

#40 JS:Script (size: 116012)

#41 JS:Script (size: 7062)

#42 JS:Script (size: 107)

#43 JS:Script (size: 435)

#44 JS:Script (size: 457)

#45 JS:Script (size: 962)

#46 JS:Script (size: 178)

#47 JS:Script (size: 0)

#48 JS:Script (size: 1829)

#49 JS:Script (size: 43)

#50 JS:Script (size: 369279)

#51 JS:Script (size: 314331)

#52 JS:Script (size: 7027)

#53 JS:Script (size: 29043)

#54 JS:Script (size: 50234)

#55 JS:Script (size: 928)

#56 JS:Script (size: 22853)