Report Overview

  1. URL

    nsw2u.com/doom-switch-xci-nsp

  2. IP

    188.114.96.1

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2023-06-05T18:48:45Z

    Access

    public

  4. Tags

    None

  5. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    6

Domain Summary

Domain Rank First Seen Last Seen
cdnjs.cloudflare.com (3) 235 2015-04-17 22:46:33 2023-06-05 05:11:33
fonts.googleapis.com (1) 8877 2013-06-10 22:14:26 2023-06-05 13:37:59
ciscobinary.openh264.org (1) 40822 2014-10-07 07:43:56 2023-06-05 08:39:43
www.googletagmanager.com (2) 75 2013-05-22 04:07:37 2023-06-05 11:14:29
1.gravatar.com (1) 7167 2012-05-21 09:08:48 2023-06-05 10:48:40
i0.wp.com (48) 3021 2013-09-17 08:14:42 2023-06-05 07:10:48
s0.wp.com (6) 6184 2017-01-30 06:08:18 2023-06-05 07:14:43
images.vfl.ru (1) 275945 2012-10-04 04:24:47 2023-05-29 23:13:44
pagead2.googlesyndication.com (1) 101 2021-02-20 16:52:05 2023-06-05 13:55:35
challenges.cloudflare.com (2) unknown 2021-10-20 07:02:03 2023-06-05 13:13:24
mgnetu.com (2) 93129 2019-07-13 13:27:43 2023-05-31 16:11:58
fonts.gstatic.com (1) unknown 2014-09-09 02:40:21 2023-06-05 13:08:38
ad.a-ads.com (3) 26970 2013-04-19 23:54:57 2023-06-05 14:19:58
0.gravatar.com (3) 6977 2012-05-21 09:08:47 2023-06-05 10:39:06
woovoree.net (3) unknown 2023-04-29 18:26:01 2023-06-02 04:55:18
www.google-analytics.com (1) 40 2012-10-03 03:04:21 2023-06-05 10:43:37
aus5.mozilla.org (1) 2548 2015-10-27 08:06:24 2023-06-05 05:09:27
jetpack.wordpress.com (1) 139476 2012-08-03 09:18:00 2023-06-05 18:17:37
stats.wp.com (1) 2711 2017-01-30 06:06:59 2023-06-05 07:06:05
definedbootnervous.com (3) unknown 2023-05-22 04:09:17 2023-05-29 04:37:37
c0.wp.com (12) 6988 2018-09-24 17:59:05 2023-06-05 05:09:01
ocsp.pki.goog (9) 175 2018-07-01 08:43:07 2023-06-05 05:09:10
ocsp.sectigo.com (1) 487 2019-11-29 12:50:24 2023-06-05 13:50:27
static.a-ads.com (2) 34827 2013-06-01 18:47:05 2023-06-05 11:14:35
secure.gravatar.com (3) 1671 2012-05-22 07:36:38 2023-06-05 08:59:18
2.bp.blogspot.com (2) 11071 2012-05-21 15:44:19 2023-06-05 08:20:24
my.rtmark.net (1) 9054 2015-02-04 10:54:57 2023-06-05 09:17:14
nsw2u.com (33) unknown 2020-12-20 03:30:48 2023-05-29 22:52:49

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
Severity Indicator Alert
medium definedbootnervous.com
medium definedbootnervous.com
medium definedbootnervous.com
medium woovoree.net
medium woovoree.net
medium woovoree.net

ThreatFox

No alerts detected


Files detected

  1. URL

    ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

  2. IP

    62.115.252.122

  3. ASN

    #1299 Telia Company AB

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate\012- data

    Size

    511815

  2. Hash

    152eda253e242e18443ef3282495bc7c

    ff0fa85565f21ec4931baad4573b4c0bd08c4019

    8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48

    Detections

    Analyzer Verdict Alert
    VirusTotal 0/60

JavaScript (85)

HTTP Transactions (148)

URL IP Response Size
nsw2u.com/doom-switch-xci-nsp
188.114.96.1 403 Forbidden 4470
nsw2u.com/cdn-cgi/images/trace/managed/js/transparent.gif?ray=7d2a96e498b5fab8
188.114.96.1 42
c0.wp.com/c/6.2.2/wp-includes/css/classic-themes.min.css
192.0.77.37 200 OK 291
nsw2u.com/wp-content/plugins/chp-ads-block-detector/assets/img/icon.png
188.114.96.1 200 OK 15671
i0.wp.com/images.vfl.ru/ii/1667485067/b3f90ee8/38633676.jpg?resize=200%2C200&ssl=1
192.0.77.2 200 OK 10874
nsw2u.com/wp-content/plugins/ad-inserter/js/sponsors.js?ver=2.7.28
188.114.96.1 200 OK 21
nsw2u.com/wp-content/plugins/ad-inserter/images/ads.png
188.114.96.1 200 OK 95
nsw2u.com/wp-content/plugins/ad-inserter/js/banner.js?ver=2.7.28
188.114.96.1 200 OK 22
i0.wp.com/images.vfl.ru/ii/1669375359/243cfd1a/38654662.jpg?resize=200%2C200&ssl=1
192.0.77.2 200 OK 14008
i0.wp.com/images.vfl.ru/ii/1679750390/4e99e8e1/38826367.jpg?ssl=1
192.0.77.2 200 OK 31608
i0.wp.com/images.vfl.ru/ii/1679738619/4429b61e/38826218.jpg?ssl=1
192.0.77.2 200 OK 23824
i0.wp.com/game-2u.com/wp-content/uploads/2023/03/The-Last-Spell-GoldBerg-PC.jpg?ssl=1
192.0.77.2 200 OK 21598
i0.wp.com/images.vfl.ru/ii/1679707845/154521c0/38824712.jpg?ssl=1
192.0.77.2 200 OK 12042
i0.wp.com/images.vfl.ru/ii/1667922247/a3e9c55a/38637769.jpg?resize=200%2C200&ssl=1
192.0.77.2 200 OK 10442
i0.wp.com/images.vfl.ru/ii/1667922429/c6e5e3fa/38637770.jpg?resize=200%2C200&ssl=1
192.0.77.2 200 OK 11726
i0.wp.com/nsw2u.com/wp-content/uploads/2022/07/cropped-nintendo-switch-logo.png?fit=200%2C200&ssl=1
192.0.77.2 200 OK 2734
i0.wp.com/images.vfl.ru/ii/1669801198/18d9647c/38657837.jpg?resize=200%2C200&ssl=1
192.0.77.2 200 OK 7818
i0.wp.com/images.vfl.ru/ii/1669564070/c5cf1365/38655710.jpg?resize=200%2C200&ssl=1
192.0.77.2 200 OK 7762
i0.wp.com/images.vfl.ru/ii/1642250333/fb2e40a2/37551870.jpg?resize=200%2C200&ssl=1
192.0.77.2 200 OK 6586
i0.wp.com/game-2u.com/wp-content/uploads/2023/04/Card-Survival-Tropical-Island-v104k-PC.jpg?ssl=1
192.0.77.2 200 OK 13678
i0.wp.com/game-2u.com/wp-content/uploads/2023/05/Absolute-Drift-v253b773-PC.jpg?ssl=1
192.0.77.2 200 OK 6024
i0.wp.com/images.vfl.ru/ii/1659626961/946b2a41/38516846.jpg?resize=200%2C200&ssl=1
192.0.77.2 200 OK 9702
nsw2u.com/wp-content/plugins/ad-inserter/js/300x250.js?ver=2.7.28
188.114.96.1 200 OK 23
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/bgset/ls.bgset.min.js?ver=6.2.2
104.17.25.14 200 OK 1101
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/plugins/unveilhooks/ls.unveilhooks.min.js?ver=6.2.2
104.17.25.14 200 OK 677
cdnjs.cloudflare.com/ajax/libs/lazysizes/5.3.2/lazysizes.min.js?ver=6.2.2
104.17.25.14 200 OK 3150
ocsp.pki.goog/gts1c3
142.250.74.131 471