Overview

URLhttp://debiopl.cu.cc/links/fate_acted.php?bskh=0505030b34
IP216.38.62.18
ASNAS25847 ServInt
Location United States
Report completed2012-11-07 09:48:57 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-07 09:48:25 urlQuery Client 216.38.62.182ET CURRENT_EVENTS HTTP Request to a *.cu.cc domain
2012-11-07 09:48:25 urlQuery Client 216.38.62.181ET CURRENT_EVENTS Blackhole 2 Landing Page
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 216.38.62.18

Date Alerts / IDS URL IP
2013-02-16 09:44:180 / 5http://establishedforcourse.cu.cc/f/notepad.exe?ts=a970a8f7&affid=41100216.38.62.18
2013-02-13 23:54:300 / 6http://vertuks.cu.cc/data/ap2.php216.38.62.18
2013-02-13 18:57:460 / 6http://cesared.cu.cc/data/ap2.php216.38.62.18
2013-02-13 15:53:180 / 6http://nertgydev.cu.cc/links/fate_acted.php216.38.62.18
2013-02-13 15:36:300 / 6http://jackrussel.cu.cc/data/ap2.php216.38.62.18
2013-02-13 15:20:260 / 6http://asuak.cu.cc/links/considered-cross_behalf_answered.php216.38.62.18

Last 6 reports on ASN: AS25847 ServInt

Date Alerts / IDS URL IP
2013-02-18 23:21:440 / 0http://www.digitalmanga.com/64.131.72.168
2013-02-18 23:17:230 / 1http://www.dmpbooks.com/64.131.72.168
2013-02-18 22:33:270 / 0http://216.22.26.179/~jointher/wp-content/plugins/events-manager/includes/thumbnails/timthumb.p (...)216.22.26.179
2013-02-18 08:41:140 / 3http://3questionsgetthegirl.com/simple-trick-video/?afid=LinkTrust207.58.184.243
2013-02-18 06:10:370 / 1http://64.64.1.169/hKy.exe64.64.1.169
2013-02-17 16:19:380 / 1http://www.clubcivic.com/board/showthread.php?t=130823207.58.135.11

Last 6 reports on domain: debiopl.cu.cc

Date Alerts / IDS URL IP
2012-11-07 20:06:390 / 4http://debiopl.cu.cc/links/fate_acted.php?ipuof=0505030b34216.38.62.18
2012-11-07 20:04:330 / 2http://debiopl.cu.cc/links/fate_acted.php?whrmsmq=0505030b34216.38.62.18
2012-11-07 20:03:430 / 2http://debiopl.cu.cc/links/fate_acted.php?cwrxsy=0505030b34216.38.62.18
2012-11-07 11:28:430 / 4http://debiopl.cu.cc/links/fate_acted.php?tfux=0505030b34216.38.62.18
2012-11-07 11:25:300 / 4http://debiopl.cu.cc/links/fate_acted.php?mvxi=0505030b34216.38.62.18
2012-11-07 11:23:320 / 2http://debiopl.cu.cc/links/handling_gets-disappeared-womans.php?emykjjfk=0505030b34216.38.62.18



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (3)


Request Response 
GET /links/fate_acted.php?bskh=0505030b34 HTTP/1.1

Host: debiopl.cu.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 302 Found

Content-Type: text/html

Date: Wed, 07 Nov 2012 08:48:18 GMT
Server: Apache
X-Powered-By: PHP/5.2.17
Location: http://cu.cc/free.php?domain=debiopl.cu.cc
Content-Length: 0
Connection: close
GET /free.php?domain=debiopl.cu.cc HTTP/1.1

Host: cu.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 
HTTP/1.1 301 Moved Permanently

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 07 Nov 2012 08:48:25 GMT
Server: Apache
Location: http://www.registry.cu.cc/free.php?domain=debiopl.cu.cc
Content-Length: 263
Connection: close
GET /free.php?domain=debiopl.cu.cc HTTP/1.1

Host: www.registry.cu.cc

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive