Report - gen.lib.rus.ec/

Report Overview

Visitedpublic

2024-12-15 06:55:10

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
gen.lib.rus.ec	629025	unknown	2012-07-01	2024-11-05	385 B	971 B	172.67.176.219
libgen.rs	165239	2020-08-27	2020-08-27	2024-11-05	466 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-12-15 06:54:44	medium	172.67.176.219	Client IP	ET INFO TLS Handshake Failure
2024-12-15 06:54:44	medium	172.67.176.219	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-12-15	medium	libgen.rs	Sinkholed

ThreatFox

No alerts detected

JavaScript (1)

	URL	From	Size	First Seen	Last Seen
	about:neterror?e=dnsNotFound&u=https%3A//libgen.rs/&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20libgen.rs.	ScriptElement	0 B	0001-01-01	2025-08-02
URL about:neterror?e=dnsNotFound&u=https%3A//libgen.rs/&c=UTF-8&d=We%20can%E2%80%99t%20connect%20to%20the%20server%20at%20libgen.rs. IP / ASN 0.0.0.0 #0 Introduced by ScriptElement Embedded true Resource Info First Seen 0001-01-01 Last Seen 2025-08-02 Times Seen 5606017 Size 0 B (0 bytes) MD5 d41d8cd98f00b204e9800998ecf8427e SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Format Code Loading...

HTTP Transactions (2)

URL IP Response Size

GET gen.lib.rus.ec/

172.67.176.219

301 Moved Permanently

162 B

URL

gen.lib.rus.ec/

IP / ASN

172.67.176.219

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-05

Last Seen2025-07-11

Times Seen131096

Size162 B (162 bytes)

MD54f8e702cc244ec5d4de32740c0ecbd97

SHA13adb1f02d5b6054de0046e367c1d687b6cdf7aff

SHA2569e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

HTTP Headers

GET / HTTP/1.1
Host: gen.lib.rus.ec
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Sun, 15 Dec 2024 06:54:45 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://libgen.rs/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9BLEPjriZVkuN8LQnOuSsI9gBSS2E36lrDDhO5hwNDEOirek7izHgoXWO0%2BNu%2FTsJQUtSi6hDGBTZDr9wQDdM8mJcGV2XshobDE85HIsh%2Bd6pkfeYa%2FNqw9fX%2FlltD7szQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8f24862aaedb712b-OSL
alt-svc: h2=":443"; ma=60
server-timing: cfL4;desc="?proto=TCP&rtt=433&min_rtt=433&rtt_var=216&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=387&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

GET libgen.rs/

0.0.0.0

0 B

URL

libgen.rs/

IP / ASN

0.0.0.0

Requested byN/A

Resource Info

File typeN/A

First Seen0001-01-01

Last Seen2025-08-02

Times Seen5606017

Size0 B (0 bytes)

MD5d41d8cd98f00b204e9800998ecf8427e

SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET / HTTP/1.1
Host: libgen.rs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache