technology software

documentation technical

adult content

corporate

English

_ym_visorc

_ym_isad

_ym_d

_ym_uid

The domain 'legacylauncher.ru' uses the Russian country-code top-level domain (.ru) while skipping any subdomain. Count 14 characters in 'legacylauncher' split between 5 vowels and nine consonants. Word splitting yields two words: legacy, launcher. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

html/34/93/349394a5-5e48-4e55-8985-4fb52a66b8c5.html.gz

script-src 'none'; frame-src 'none'; sandbox;

2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8

5e23cee538cbd97b11c6850bb7e81c705d0c5dff558297019689b186a67c6a15

d19b155cc665af63720d3205d4138f4411159c697730fee2058b0d38edd3a832

df6b6e43a4f85d0275fdac6659150de55a42985e534f99907d390b8f54ca51c7

0b3e583f8fce4a8659ab8f06742dd20ba95e6ca89bd50ef998ffd5b6c11a9320

e5f6391a16891a7f9f88a4bd04b2445f5a49625fadaa208710eb0dd894adbbea

f8eb6a12b88544755f43475187f5e3a57f3293d79bf86d5d018864056be5ed3c

9e1c92465b9f21c8e7ccb5bb7d65b92e9fed32db295dea0077263dc624bbbf30

4a400fca6805c986c86feca58a242f40706e443a92387e8902ca30d5d1181f9a

94e53439ad0780b2cf2e8894da8793091f5870891bf77119cb9e7bbf441bf1f0

6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e

8a18d13015336bc184819a5a768447462202ef3105ec511bf42ed8304a7ed94f

59d6d7e786f31ec42693ca5a109e3addebf5e19f3c19bafa346e6277a1cb921c

Next.js missing cache-control header may lead to CDN caching empty reply

Next.js Denial of Service (DoS) condition

Next.js Vulnerable to HTTP Request Smuggling

Next.js Allows a Denial of Service (DoS) with Server Actions

Authorization Bypass in Next.js Middleware

Next.js Server-Side Request Forgery in Server Actions

Denial of Service condition in Next.js image optimization

Next.js authorization bypass vulnerability

Next.js Race Condition to Cache Poisoning

Information exposure in Next.js dev server due to lack of origin verification

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. When images returned from API routes vary based on request headers (such as `Cookie` or `Authorization`), these responses could be incorrectly cached and served to unauthorized users due to a cache key confusion bug.

All users are encouraged to upgrade if they use API routes to serve images that depend on request headers and have image optimization enabled.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57752)

A vulnerability in **Next.js Image Optimization** has been fixed in **v15.4.5** and **v14.2.31**. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious file delivery.

All users relying on `images.domains` or `images.remotePatterns` are encouraged to upgrade and verify that external image sources are strictly validated.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-55173)

A vulnerability in **Next.js Middleware** has been fixed in **v14.2.32** and **v15.4.7**. The issue occurred when request headers were directly passed into `NextResponse.next()`. In self-hosted applications, this could allow Server-Side Request Forgery (SSRF) if certain sensitive headers from the incoming request were reflected back into the response.

All users implementing custom middleware logic in self-hosted environments are strongly encouraged to upgrade and verify correct usage of the `next()` function.

More details at [Vercel Changelog](https://vercel.com/changelog/cve-2025-57822)

A vulnerability affects certain React packages for versions 19.0.0, 19.0.1, 19.1.0, 19.1.1, 19.1.2, 19.2.0, and 19.2.1 and frameworks that use the affected packages, including Next.js 15.x and 16.x using the App Router. The issue is tracked upstream as [CVE-2025-55184](https://www.cve.org/CVERecord?id=CVE-2025-55184).

A malicious HTTP request can be crafted and sent to any App Router endpoint that, when deserialized, can cause the server process to hang and consume CPU. This can result in denial of service in unpatched environments.

It was found that the fix addressing [CVE-2025-55184](https://github.com/advisories/GHSA-2m3v-v2m8-q956) in React Server Components was incomplete and did not fully prevent denial-of-service attacks in all payload types. This affects React package versions 19.0.2, 19.1.3, and 19.2.2 and frameworks that use the affected packages, including Next.js 13.x, 14.x, 15.x and 16.x using the App Router. The issue is tracked upstream as [CVE-2025-67779](https://www.cve.org/CVERecord?id=CVE-2025-67779).

A malicious HTTP request can be crafted and sent to any Server Function endpoint that, when deserialized, can enter an infinite loop within the React Server Components runtime. This can cause the server process to hang and consume CPU, resulting in denial of service in unpatched environments.

14c5b16a3c0d8af129bf7c43da276b3b38d1d440fb1fbab815ebdd8586f00df5

0225eb034d024a03bdc90ea6c79f56193662e7c3eee909696298820e517cbb83

37b872e33ef0ed008d58085ae89579970c9c302cdaa51e0dbf04aa1a6347ba70

2017921c8b6752ce9f86a1807560b20a7bb3b4223c840f7fd9c91763d00165e8

f32ea6dfb2491d7f01580c0d3381efdc1ce9d59ebf59ce56de1de81342621b9c

See Parent's guide on Minecraft.net for more info.

viewport

Download stable, fast, secure and yet customizable Minecraft: Java Edition launcher for free

description

next-head-count

theme-color

html/34/93/349394a5-5e48-4e55-8985-4fb52a66b8c5_nodriver.html.gz

Legacy Launcher for Minecraft

llaun.ch

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET

Legacy Launcher

Requests	IP Address	Location	AS Autonomous System
9	195.209.87.63	Russia	AS34879OOO Sovremennye setevye tekhnologii
7	104.16.80.73	United States	AS13238
7	87.250.251.119	Russia	AS13238YANDEX LLC
7	104.26.10.81	United States	AS13335Cloudflare, Inc.
30	4	-	-

Security Scan Report: legacylauncher.ru

Summary

AI Security Verdict

Moderate Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History