Report Overview

  1. Visited public
    2024-11-28 10:13:17
  2. URL

    www.google.com.af/url?q=https://links-1.govdelivery.com/CL0/=1133CHARtTPSJ3J3wDyycT&sa=t&esrc=IX5MsFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=HARlDJVS0YXpPkDfJ6C&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/hemediallc.com/xx/xxx//e9c34e0c98ba1da84dbcbd196ed97256baa86e63/ZmlsaXBwLnZhbG92aWNoQHNsdXJwbWFpbC5uZXQ=

  3. Finishing URL

    mzh.sovilone.ru/YflY/#Lfilipp.valovich@slurpmail.net

  4. IP / ASN
    142.250.74.163

    #15169 GOOGLE

    Title
  5. Suspicious - Anti-debugging code

Detections
urlquery
3
Network Intrusion Detection
0
Threat Detection Systems
0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
classify-client.services.mozilla.com38241994-10-182019-01-092024-11-27
hemediallc.comunknown2009-01-302024-11-282024-11-28
cdnjs.cloudflare.com2352009-02-172015-04-172024-11-27
challenges.cloudflare.comunknown2009-02-172021-10-202024-11-27
code.jquery.com6342005-12-102012-05-212024-11-27
www.google.com.af321082009-10-052013-02-092024-11-28
mzh.sovilone.ruunknown2024-11-152024-11-282024-11-28
aus5.mozilla.org25481998-01-242015-10-272024-11-27
normandy.cdn.mozilla.net35621998-01-312017-01-302024-11-27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Mnemonic Secure DNS

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


JavaScript (43)

HTTP Transactions (18)

URLIPResponseSize
www.google.com.af/url?q=https://links-1.govdelivery.com/CL0/=1133CHARtTPSJ3J3wDyycT&sa=t&esrc=IX5MsFgECA0xys8Em2FL&source=&cd=HXUursu8uEcr4eTiw9XH&cad=HARlDJVS0YXpPkDfJ6C&ved=xjnktlqryYWwZIBRrgvK&uact=&url=amp/hemediallc.com/xx/xxx//e9c34e0c98ba1da84dbcbd196ed97256baa86e63/ZmlsaXBwLnZhbG92aWNoQHNsdXJwbWFpbC5uZXQ=
142.250.74.67302 Found331 B
www.google.com.af/amp/hemediallc.com/xx/xxx//e9c34e0c98ba1da84dbcbd196ed97256baa86e63/ZmlsaXBwLnZhbG92aWNoQHNsdXJwbWFpbC5uZXQ=
142.250.74.67302 Found308 B
hemediallc.com/xx/xxx//e9c34e0c98ba1da84dbcbd196ed97256baa86e63/ZmlsaXBwLnZhbG92aWNoQHNsdXJwbWFpbC5uZXQ=
192.185.153.129200 OK0 B
cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.24.14200 OK14 kB
challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
104.18.94.41302 Found0 B
code.jquery.com/jquery-3.6.0.min.js
151.101.66.137200 OK31 kB
mzh.sovilone.ru/favicon.ico
188.114.96.1404 Not Found507 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
104.18.94.41200 OK61 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1099872644:1732785108:0e1zhVhziFfSRzKhhjeRKf7VjZuiSUYKxGnbofSkHoo/8e9995185a8db515/3XDq7mSK12Q3G90appZ7UzVPDR0YeX73YcHOVm_9TNE-1732788775-1.1.1.1-Iq.OnXatTXpG_KPqM2lUsLY9.ATekoSFjlWOGZdU3lKcq3hjvZTLYRIDzDQxquH7
104.18.94.41200 OK104 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8e9995185a8db515/1732788776365/4jPnzApmRu5iN2c
104.18.94.41200 OK61 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8e9995185a8db515/1732788776366/57f7b414f04cb5fe6d19fe2015c0b244fdfc7bfb381e606395b37fdd54b67a7b/BIbBYHHxCAWYmYo
104.18.94.41401 Unauthorized1 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/okiii/0x4AAAAAAA0LjoJJP0Nhat-C/auto/fbE/normal/auto/
104.18.94.41200 OK15 kB
aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml
35.244.181.201200 OK444 B
normandy.cdn.mozilla.net/api/v1/
35.201.103.21200 OK598 B
classify-client.services.mozilla.com/api/v1/classify_client/
34.98.75.36200 OK64 B
mzh.sovilone.ru/YflY/
188.114.96.1200 OK20 kB
challenges.cloudflare.com/turnstile/v0/b/a6e12e96a2d5/api.js
104.18.94.41200 OK48 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8e9995185a8db515&lang=auto
104.18.94.41200 OK116 kB