Report - vk.cc/cshrh4

Report Overview

Visited public
2023-12-08 21:54:05
Tags
URL
vk.cc/cshrh4
Finishing URL
about:certerror?e=nssBadCert&u=https%3A//tirdownload.ru/Rust211_x64.zip.torrent&c=UTF-8&d=%20
IP / ASN
87.240.132.78
#47541 VKontakte Ltd
Title
Warning: Potential Security Risk Ahead

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
mitmdetection.services.mozilla.com	67826	1994-10-18	2019-07-22 10:39:59	2023-12-08 11:00:43	378 B	326 B	54.230.111.49
tirdownload.ru	unknown	2020-05-18	2020-07-16 17:22:16	2023-11-17 02:17:50	537 B	0 B	0.0.0.0
vk.cc	170928	1997-10-13	2012-06-21 00:54:25	2023-12-05 05:17:19	478 B	817 B	87.240.129.133
vkontakte.ru	72994	2006-09-30	2012-05-21 17:01:22	2023-12-06 05:45:03	559 B	839 B	87.240.132.78
vk.com	2243	1997-06-24	2012-05-21 17:01:19	2023-12-08 08:50:23	1.3 kB	1.9 kB	93.186.225.194
away.vk.com	92855	1997-06-24	2017-04-11 13:32:47	2023-12-07 00:26:13	757 B	1.0 kB	93.186.225.194

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-08 21:53:54	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-12-08 21:53:54	medium	Client IP	Internal IP	ET DNS Query for .cc TLD
2023-12-08 21:53:54	medium	Client IP	Internal IP	ET DNS Query for .cc TLD

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (7)

	URL	IP	Size
	vk.cc/cshrh4	87.240.129.133	20 B
URL vk.cc/cshrh4 IP 87.240.129.133:0 ASN #47541 VKontakte Ltd File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers `GET /cshrh4 HTTP/1.1 Host: vk.cc User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 302 Found server: kittenx date: Fri, 08 Dec 2023 21:53:48 GMT content-type: text/html; charset=windows-1251 content-length: 20 location: https://vkontakte.ru/away.php?cc_key=cshrh4&to=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent x-powered-by: KPHP/7.4.115265 set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vkontakte.ru; secure; HttpOnly remixstlid=9106719280235332742_pH3zLn5rNcrbuOZgOizzPdbD5twgEZNBzDSwWrYxEZk; expires=Sat, 07 Dec 2024 21:53:48 GMT; path=/; domain=.vkontakte.ru; secure cache-control: no-store content-encoding: gzip x-frontend: front609304 access-control-expose-headers: X-Frontend strict-transport-security: max-age=31536000; includeSubdomains; x-trace-id: RxPMRhJ0A1FZ5DuPM8CqjakXWAVFWQ X-Firefox-Spdy: h2

	vkontakte.ru/away.php?cc_key=cshrh4&to=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent	87.240.132.78	0 B
URL vkontakte.ru/away.php?cc_key=cshrh4&to=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent IP 87.240.132.78:0 ASN #47541 VKontakte Ltd File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /away.php?cc_key=cshrh4&to=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent HTTP/1.1 Host: vkontakte.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 301 Moved Permanently server: kittenx date: Fri, 08 Dec 2023 21:53:48 GMT content-type: text/html; charset=windows-1251 content-length: 0 location: https://vk.com/login?act=vkcomredirect&to=YXdheS5waHA/Y2Nfa2V5PWNzaHJoNCZ0bz1odHRwcyUzQSUyRiUyRnRpcmRvd25sb2FkLnJ1JTJGUnVzdDIxMV94NjQuemlwLnRvcnJlbnQ- x-powered-by: KPHP/7.4.115265 set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vkontakte.ru; secure; HttpOnly remixstlid=9099963880794469873_zQyBf02023AcVZsZViqp9s3XegDsgaCq9JfTzNVbG1o; expires=Sat, 07 Dec 2024 21:53:48 GMT; path=/; domain=.vkontakte.ru; secure cache-control: no-store x-frontend: front226205 strict-transport-security: max-age=15768000 access-control-expose-headers: X-Frontend origin-agent-cluster: ?0 x-trace-id: y79yuBpwYlniCCaxIvMjkzgofIVkaQ X-Firefox-Spdy: h2

	vk.com/login?act=vkcomredirect&to=YXdheS5waHA/Y2Nfa2V5PWNzaHJoNCZ0bz1odHRwcyUzQSUyRiUyRnRpcmRvd25sb2FkLnJ1JTJGUnVzdDIxMV94NjQuemlwLnRvcnJlbnQ-	93.186.225.194	20 B
URL vk.com/login?act=vkcomredirect&to=YXdheS5waHA/Y2Nfa2V5PWNzaHJoNCZ0bz1odHRwcyUzQSUyRiUyRnRpcmRvd25sb2FkLnJ1JTJGUnVzdDIxMV94NjQuemlwLnRvcnJlbnQ- IP 93.186.225.194:0 ASN #47541 VKontakte Ltd File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers GET /login?act=vkcomredirect&to=YXdheS5waHA/Y2Nfa2V5PWNzaHJoNCZ0bz1odHRwcyUzQSUyRiUyRnRpcmRvd25sb2FkLnJ1JTJGUnVzdDIxMV94NjQuemlwLnRvcnJlbnQ- HTTP/1.1 Host: vk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 301 Moved Permanently server: kittenx date: Fri, 08 Dec 2023 21:53:48 GMT content-type: text/html; charset=windows-1251 content-length: 20 x-powered-by: KPHP/7.4.115265 set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly remixlang=3; expires=Wed, 11 Dec 2024 12:58:52 GMT; path=/; domain=.vk.com remixstlid=9093067743865229240_gLzXWm9hgiRZKRRKjBoj9E34z5ckCHxhd56J5qSEPxX; expires=Sat, 07 Dec 2024 21:53:48 GMT; path=/; domain=.vk.com; secure remixvkcom=1; path=/; domain=.vk.com; secure cache-control: no-store p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" x-robots-tag: noindex location: /away.php?cc_key=cshrh4&to=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent content-encoding: gzip x-frontend: front605110 strict-transport-security: max-age=15768000 access-control-expose-headers: X-Frontend origin-agent-cluster: ?0 x-trace-id: SXXgs9zev7Iw2befrYXs1JqbTXH9Bg X-Firefox-Spdy: h2

	vk.com/away.php?cc_key=cshrh4&to=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent	93.186.225.194	20 B
URL vk.com/away.php?cc_key=cshrh4&to=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent IP 93.186.225.194:0 ASN #47541 VKontakte Ltd File type gzip compressed data, from Unix\012- data Size 20 B (20 bytes) Hash 7029066c27ac6f5ef18d660d5741979a 46c6643f07aa7f6bfe7118de926b86defc5087c4 59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2 HTTP Headers GET /away.php?cc_key=cshrh4&to=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent HTTP/1.1 Host: vk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: remixlang=3; remixstlid=9093067743865229240_gLzXWm9hgiRZKRRKjBoj9E34z5ckCHxhd56J5qSEPxX; remixvkcom=1 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 302 Found server: kittenx date: Fri, 08 Dec 2023 21:53:48 GMT content-type: text/html; charset=windows-1251 content-length: 20 location: https://away.vk.com/away.php?rh=90873fa2-c967-43d9-aa90-bb2a5257fa9c x-powered-by: KPHP/7.4.115265 set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly remixsec_redir=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent; path=/; domain=.vk.com remixua=-1%7C-1%7C320%7C295475610; expires=Sun, 01 Dec 2024 17:10:58 GMT; path=/; domain=.vk.com; secure cache-control: no-store x-frame-options: DENY content-encoding: gzip x-frontend: front605110 strict-transport-security: max-age=15768000 access-control-expose-headers: X-Frontend origin-agent-cluster: ?0 x-trace-id: 0dpQ_leRygb-AcDyEpmgYvthVWlFcQ X-Firefox-Spdy: h2

	away.vk.com/away.php?rh=90873fa2-c967-43d9-aa90-bb2a5257fa9c	93.186.225.194	285 B
URL away.vk.com/away.php?rh=90873fa2-c967-43d9-aa90-bb2a5257fa9c IP 93.186.225.194:0 ASN #47541 VKontakte Ltd File type HTML document, ASCII text, with very long lines (485), with no line terminators Size 285 B (285 bytes) Hash ffae2fdfe5564da76fb3b68100a2ed55 0ca3fa4624526393b9b1a0843c774a106ac96a16 17f87c054f913d2f00e6bed228c7da74e708d11f9d9a84c3358ca7d1cbe7207e HTTP Headers GET /away.php?rh=90873fa2-c967-43d9-aa90-bb2a5257fa9c HTTP/1.1 Host: away.vk.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Connection: keep-alive Cookie: remixlang=3; remixstlid=9093067743865229240_gLzXWm9hgiRZKRRKjBoj9E34z5ckCHxhd56J5qSEPxX; remixvkcom=1; remixsec_redir=https%3A%2F%2Ftirdownload.ru%2FRust211_x64.zip.torrent; remixua=-1%7C-1%7C320%7C295475610 Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache TE: trailers HTTP/2 200 OK server: kittenx date: Fri, 08 Dec 2023 21:53:48 GMT content-type: text/html; charset=windows-1251 content-length: 285 x-powered-by: KPHP/7.4.115265 set-cookie: remixir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.vk.com; secure; HttpOnly remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; domain=.vk.com remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=away.vk.com remixsec_redir=DELETED; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/ cache-control: no-store x-frame-options: DENY content-encoding: gzip x-frontend: front605110 access-control-expose-headers: X-Frontend x-trace-id: NREv70oZms14kkPjeP4cBrVksD5z9A X-Firefox-Spdy: h2

	mitmdetection.services.mozilla.com/	54.230.111.49	0 B
URL mitmdetection.services.mozilla.com/ IP 54.230.111.49:0 ASN #16509 AMAZON-02 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers `HEAD / HTTP/1.1 Host: mitmdetection.services.mozilla.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 404 Not Found content-type: application/xml date: Fri, 08 Dec 2023 21:53:49 GMT server: AmazonS3 x-cache: Error from cloudfront via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-P1 x-amz-cf-id: IPNCpyTp-5NCYlhQC2v5HI3Zi3qaY_nEHizhfBFczui2H9ZogZWBHQ== X-Firefox-Spdy: h2`

	tirdownload.ru/Rust211_x64.zip.torrent	0.0.0.0	0 B
URL User Request GET tirdownload.ru/Rust211_x64.zip.torrent IP 0.0.0.0:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /Rust211_x64.zip.torrent HTTP/1.1 Host: tirdownload.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://away.vk.com/ DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers