Report - s2.sendfile.su/download/1397351/mLvjr6fttJ4elOOGaj4uFlGbbDVjatWX79sptPnz/

Report Overview

Visitedpublic

2024-01-14 20:33:39

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
s2.sendfile.su	unknown	2009-04-16	2014-10-14 18:16:19	2023-11-07 07:02:43	852 B	373 B	5.196.71.37
sendfile.su	255968	2009-04-16	2015-01-18 18:04:46	2023-11-23 17:57:31	739 B	4.8 kB	94.242.57.135
s.sendfile.su	unknown	2009-04-16	2017-02-12 05:35:04	2023-12-26 23:26:04	4.6 kB	36 kB	94.242.57.135
mtrcss.com	296817	2023-12-20	2015-05-13 14:11:49	2023-12-26 23:26:04	323 B	340 B	103.224.212.214
ww25.mtrcss.com	unknown	2023-12-20	2023-12-26 23:26:05	2024-01-04 20:29:09	372 B	1.9 kB	199.59.243.225

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	5.196.71.37	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	5.196.71.37	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:14	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:15	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:15	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:15	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:15	medium	Client IP	Internal IP	ET DNS Query for .su TLD (Soviet Union) Often Malware Related
2024-01-14 20:33:15	medium	Client IP	94.242.57.135	ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (6)

	HASH	FROM	Size	First Seen	Last Seen
	544d19a1db82df32c973cdf222fbea13	DocumentWrite	226 B	2024-08-20	2024-08-20
Introduced by DocumentWrite First Seen 2024-08-20 Last Seen 2024-08-20 Times Seen 1 Size 226 B (226 bytes) MD5 544d19a1db82df32c973cdf222fbea13 SHA1 1814e4e96713038a7262e34382cdf55a9afebb3c SHA256 89f537005069f3b46ca913b7fefa3ead54ff30634aa340d26f43947051d054e4 Format Code Loading...

HTTP Transactions (19)

	URL	IP	Response	Size