Report Overview

  1. URL

    plz.life/news.php?id=2XLXJX.txt

  2. IP

    52.173.151.229

    ASN

    #8075 MICROSOFT-CORP-MSN-AS-BLOCK

  3. Submitted

    2023-06-09T11:27:11Z

    Access

    public

  4. Tags

    None

  5. urlquery detections

    No alerts detected

Detections

  2. urlquery

    0

  3. Network Intrusion Detection

    8

  4. Threat Detection Systems

    0

Domain Summary

Domain Rank First Seen Last Seen
aus5.mozilla.org (1) 2548 2015-10-27 08:06:24 2023-06-09 05:12:17
i.ytimg.com (15) 109 2012-10-03 19:11:04 2023-06-09 10:35:15
rr1---sn-capm-vnae.googlevideo.com (9) unknown 2021-08-21 17:55:01 2023-06-09 08:18:07
jnn-pa.googleapis.com (4) 2640 2021-11-16 07:12:21 2023-06-09 10:22:31
accounts.google.com (3) 81 2016-03-20 13:44:49 2023-06-09 09:56:27
www.gstatic.com (1) unknown 2016-07-26 11:37:06 2023-06-09 12:08:06
i1.ytimg.com (1) 1340 2013-04-13 02:16:40 2023-06-09 12:56:19
grabify.world (1) unknown 2020-03-11 01:22:23 2023-06-09 09:55:13
ocsp.pki.goog (18) 175 2018-07-01 08:43:07 2023-06-09 05:09:21
www.youtube.com (41) 90 2013-04-13 09:43:20 2023-06-09 05:09:18
tpc.googlesyndication.com (5) 126 2020-01-16 09:35:32 2023-06-09 11:54:42
pagead2.googlesyndication.com (4) 101 2021-02-20 16:52:05 2023-06-09 11:01:00
rr2---sn-capm-vnae.googlevideo.com (2) unknown 2021-08-23 20:19:52 2023-06-09 10:31:43
ciscobinary.openh264.org (1) 40822 2014-10-07 07:43:56 2023-06-09 08:33:33
plz.life (2) unknown 2021-01-21 02:59:37 2023-06-04 16:26:03
grabify.link (1) 181878 2015-07-08 11:57:23 2023-06-09 05:34:51
fonts.gstatic.com (4) unknown 2014-09-09 02:40:21 2023-06-09 10:09:08
yt3.ggpht.com (7) 203 2014-01-15 17:55:17 2023-06-09 05:20:48
youtube.com (1) 29 2012-06-28 16:52:34 2023-06-09 11:15:33

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Severity Source IP Destination IP Alert
medium Client IP Internal IP
ET INFO Observed DNS Query to .life TLD
medium Client IP Internal IP
ET INFO Observed DNS Query to .life TLD
medium Client IP Internal IP
ET INFO Observed DNS Query to .life TLD
medium Client IP Internal IP
ET INFO Observed DNS Query to .world TLD
medium Client IP Internal IP
ET INFO Observed DNS Query to .world TLD
medium Client IP  172.67.68.246
ET INFO Observed IP Tracking Domain (grabify .link in TLS SNI)
medium Client IP Internal IP
ET INFO Observed DNS Query to .life TLD
medium Client IP  52.173.151.229
ET INFO HTTP Request to Suspicious *.life Domain

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    ciscobinary.openh264.org/openh264-linux64-2e1774ab6dc6c43debb0b5b628bdf122a391d521.zip

  2. IP

    2.22.61.59

  3. ASN

    #20940 Akamai International B.V.

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate\012- data

    Size

    511815

  2. Hash

    152eda253e242e18443ef3282495bc7c

    ff0fa85565f21ec4931baad4573b4c0bd08c4019

    8e03090fee16f6e0ee2e436af8e51d0c3deed6d9f0db80dec048e668fc009a48

    Detections

    Analyzer Verdict Alert
    VirusTotal 0/60
    VirusTotal -

JavaScript (272)