Report Overview

  1. URL

    static.dl.mail.ru/MglHustleCastleLoader.exe

  2. IP

    188.93.63.180

    ASN

    #47764 Mail.Ru LLC

  3. Submitted

    2023-02-06T12:24:33Z

    Access

  4. Tags

    None

  5. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    2

  3. Threat Detection Systems

    0

Domain Summary

Domain Rank First Seen Last Seen
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-13T05:09:10Z
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-13T05:09:35Z
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-13T05:09:13Z
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-13T05:09:14Z
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-22T01:36:00Z 2023-03-13T05:09:16Z
static.dl.mail.ru (1) 121595 2012-05-30T02:12:47Z 2023-03-13T07:30:13Z
r3.o.lencr.org (8) 344 2020-12-02T09:52:13Z 2023-03-13T05:09:07Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Severity Source IP Destination IP Alert
high  188.93.63.180 Client IP
low  188.93.63.180 Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (0)

HTTP Transactions (21)

URL IP Response Size
r3.o.lencr.org/
23.36.76.226 200 OK 503
r3.o.lencr.org/
23.36.76.226 200 OK 503
firefox.settings.services.mozilla.com/v1/
35.241.9.150 200 OK 939
r3.o.lencr.org/
23.36.76.226 200 OK 503
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191 200 OK 5348
contile.services.mozilla.com/v1/tiles
34.117.237.239 200 OK 12
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150 200 OK 329
r3.o.lencr.org/
23.36.76.226 200 OK 503
push.services.mozilla.com/
44.239.211.14 101 Switching Protocols 0
r3.o.lencr.org/
23.36.76.226 200 OK 503
r3.o.lencr.org/
23.36.76.226 200 OK 503
r3.o.lencr.org/
23.36.76.226 200 OK 503
r3.o.lencr.org/
23.36.76.226 200 OK 503
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8827daad-7b04-4c60-a6f6-c1b923025413.jpeg
34.120.237.76 200 OK 7851
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3694634-2f5a-47ff-b75c-9cb394881acc.jpeg
34.120.237.76 200 OK 9808
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F731dc7de-ce12-4639-9ceb-3218584c3d56.jpeg
34.120.237.76 200 OK 10514
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F98423c35-aa11-41c0-8f4f-52bec4c9eaa8.jpeg
34.120.237.76 200 OK 9579
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7f49c6ce-40f8-40bf-9423-2de34118bace.jpeg
34.120.237.76 200 OK 8981
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F31cf5553-4c3f-4c6d-8dfb-d292e38275bb.jpeg
34.120.237.76 200 OK 9809
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc7158f70-9e7b-4725-8249-e7061700f1ee.webp
34.120.237.76 200 OK 8528
static.dl.mail.ru/MglHustleCastleLoader.exe
188.93.63.180 200 OK 0