Report Overview

  1. Submitted URL

    zhivir.com/wp/g1bvvKyM/

  2. IP

    38.117.65.129

    ASN

    #12212 RAVAND

  3. Submitted

    2022-10-20 08:31:23

    Access

  4. Website Title

  5. Final URL

  6. Tags

    None

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r3.o.lencr.org3442020-12-02T09:52:13Z2023-03-09T05:09:05Z
firefox.settings.services.mozilla.com8672020-06-04T22:08:41Z2023-03-09T05:09:18Z
content-signature-2.cdn.mozilla.net11522020-11-03T13:26:46Z2023-03-09T05:09:49Z
contile.services.mozilla.com11142021-05-27T20:32:35Z2023-03-09T05:09:48Z
ocsp.digicert.com862012-05-21T09:02:23Z2023-03-09T11:52:10Z
push.services.mozilla.com21402014-10-24T10:27:06Z2023-03-09T05:09:13Z
zhivir.comunknown2016-07-08T19:45:06Z2023-02-22T02:53:42Z
img-getpocket.cdn.mozilla.net16312018-06-22T01:36:00Z2023-03-09T10:04:36Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumzhivir.comSinkholed

Files detected

  1. URL

    zhivir.com/wp/g1bvvKyM/

  2. IP

    38.117.65.129

  3. ASN

    #12212 RAVAND

  1. File type

    PE32+ executable (DLL) (GUI) x86-64, for MS Windows\012- data

    Size

    526 kB (525824 bytes)

  2. Hash

    6f215547249a1b3f82d2f23fc42ad4b3

    8487d24ad95f23c60aa20ab656d5b5d129d4d65f

    Detections

    AnalyzerVerdictAlert
    VirusTotal55/70

JavaScript (0)

HTTP Transactions (17)

URLIPResponseSize
r3.o.lencr.org/
23.36.76.226200 OK503 B
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK939 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
34.160.144.191200 OK5.3 kB
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK12 B
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK329 B
ocsp.digicert.com/
93.184.220.29200 OK471 B
push.services.mozilla.com/
44.238.3.246101 Switching Protocols0 B
zhivir.com/wp/g1bvvKyM/
38.117.65.129200 OK526 kB
r3.o.lencr.org/
23.36.76.226200 OK503 B
r3.o.lencr.org/
23.36.76.226200 OK503 B
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc809406-f843-4494-9a76-eab77bec4daa.jpeg
34.120.237.76200 OK35 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0554c6e4-d3fa-4339-81d1-bb7aeff85547.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdf241de-ee6c-4ca6-8781-97504d479b12.jpeg
34.120.237.76200 OK11 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd83c2ad8-6e9b-44fa-9ecc-983e0df6afae.png
34.120.237.76200 OK9.6 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe1a95f4f-d066-4cb4-bb6a-392f3ed5c229.jpeg
34.120.237.76200 OK13 kB
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44a059e1-7d07-44a2-95a0-81be12639a27.jpeg
34.120.237.76200 OK11 kB