Overview

URLhttp://etwgetvi.strefa.pl/y9fs7inzj/
IP217.74.66.183
ASNAS16138 INTERIA.PL Sp z.o.o.
Location Poland
Report completed2012-11-09 20:54:46 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Adobe Reader8.0
Java1.6.0_26


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Source IP Destination IP Severity Alert
2012-11-09 20:54:08 urlQuery Client 112.175.243.222ET CURRENT_EVENTS HTTP Request to a *.co.cc domain
Snort /w Sourcefire VRT No alerts detected


Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 217.74.66.183

Date Alerts / IDS URL IP
2013-03-18 20:30:030 / 0http://spartawegorzyno.pl/wp-includes.php?receipt=831217.74.66.183
2013-03-15 18:52:302 / 8http://www.malakarczma.com/oferta.html217.74.66.183
2013-03-15 16:36:492 / 7http://malakarczma.com/oferta.html217.74.66.183
2013-03-15 02:00:002 / 2http://michalbalazy.strefa.pl/217.74.66.183
2013-03-14 22:24:472 / 8http://www.malakarczma.com/217.74.66.183
2013-03-14 02:13:192 / 8http://www.malakarczma.com/oferta.html217.74.66.183

Last 6 reports on ASN: AS16138 INTERIA.PL Sp z.o.o.

Date Alerts / IDS URL IP
2013-03-20 10:48:190 / 1http://snowboard619.w.interia.pl/logos.gif?22e4d=142925217.74.65.162
2013-03-20 10:31:570 / 1http://snowboard619.w.interia.pl/logos.gif?21fca=1392100217.74.65.162
2013-03-20 10:29:050 / 1http://snowboard619.w.interia.pl/logos.gif?233a9=432891217.74.65.162
2013-03-20 10:25:340 / 1http://snowboard619.w.interia.pl/logos.gif?22453=1403710217.74.65.162
2013-03-20 10:10:080 / 1http://www.rmfon.pl/swf/newPlayer11.swf217.74.66.216
2013-03-20 10:04:400 / 1http://snowboard619.w.interia.pl/logos.gif?2988c=340248217.74.65.162

Last 3 reports on domain: etwgetvi.strefa.pl

Date Alerts / IDS URL IP
2013-01-11 19:30:490 / 1http://etwgetvi.strefa.pl/h6d4edhvy/217.74.66.183
2013-01-11 11:13:510 / 1http://etwgetvi.strefa.pl/qxj9fcu8c217.74.66.183
2012-11-09 14:34:530 / 2http://etwgetvi.strefa.pl/vgc3xdvxt217.74.66.183



JavaScript

Executed Scripts (7)


Executed Evals (3)

#1 JavaScript::Eval (size: 413, repeated: 1) 

if (typeof ActiveXObject != "undefined") {
    try {
        fo = new ActiveXObject("ShockwaveFlash.ShockwaveFlash.7");
    } catch (e) {
        try {
            fo = new ActiveXObject("ShockwaveFlash.ShockwaveFlash.6");
            fv = "X";
            fo.AllowScriptAccess = "always";
        } catch (e) {
            if (fv == "X") {
                fv = "WIN 6,0,20,0";
            }
        }
        try {
            fo = new ActiveXObject("ShockwaveFlash.ShockwaveFlash");
        } catch (e) {}
    }
    if ((fv == "-" || fv == "X") && fo) {
        fv = fo.GetVariable("$version");
    }
}

#2 JavaScript::Eval (size: 122, repeated: 1) 

try {
    f = (d == top.document) ? 1 : 2;
    if (typeof top.document.referrer == "string") {
        ref = top.document.referrer
    }
} catch (e) {
    f = 3;
}

#3 JavaScript::Eval (size: 73, repeated: 1) 

try {
    fv = navigator.plugins["Shockwave Flash"].description;
} catch (e) {}

Executed Writes (1)

#1 JavaScript::Write (size: 84, repeated: 1) 

<script src="http://www.google-analytics.com/ga.js" type="text/javascript"></script>


HTTP Transactions (12)


Request Response 
GET /css.1.css HTTP/1.1

Host: img.strefa.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
 
HTTP/1.0 200 OK

Content-Type: text/css

Last-Modified: Mon, 16 Feb 2009 14:37:52 GMT
Accept-Ranges: bytes
Content-Length: 766
Date: Fri, 09 Nov 2012 19:47:48 GMT
Server: INPL 2.1
Etag: &quot;33992-2fe-49997a40&quot;
Expires: Fri, 09 Nov 2012 20:02:48 GMT
Cache-Control: max-age=900
Connection: keep-alive
GET /inpl/inpl.ad.1.4.9.js HTTP/1.1

Host: x.interia.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
 
HTTP/1.1 200 OK

Content-Type: text/javascript

P3P: CP=&quot;CAO PSA OUR&quot;
Vary: Accept-Encoding
Content-Encoding: gzip
Last-Modified: Wed, 01 Jul 2009 11:49:35 GMT
Expires: Fri, 16 Nov 2012 06:42:33 GMT
Cache-Control: private
Content-Length: 1749
Accept-Ranges: bytes
Date: Fri, 09 Nov 2012 19:54:10 GMT
Connection: keep-alive
GET /strefa_pl.gif HTTP/1.1

Host: img.strefa.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
 
HTTP/1.0 200 OK

Content-Type: image/gif

Last-Modified: Mon, 16 Feb 2009 11:00:08 GMT
Accept-Ranges: bytes
Content-Length: 653
Date: Fri, 09 Nov 2012 19:52:17 GMT
Server: INPL 2.1
Etag: &quot;3b894-28d-49994738&quot;
Expires: Fri, 09 Nov 2012 20:07:17 GMT
Cache-Control: max-age=900
Connection: keep-alive
GET /strona_zablokowana.jpg HTTP/1.1

Host: img.strefa.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
 
HTTP/1.0 200 OK

Content-Type: image/jpeg

Last-Modified: Mon, 16 Feb 2009 11:37:58 GMT
Accept-Ranges: bytes
Content-Length: 3485
Date: Fri, 09 Nov 2012 19:53:36 GMT
Server: INPL 2.1
Etag: &quot;3399c-d9d-49995016&quot;
Expires: Fri, 09 Nov 2012 20:08:36 GMT
Cache-Control: max-age=900
Connection: keep-alive
GET /pic_zablokowana.png HTTP/1.1

Host: img.strefa.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
 
HTTP/1.0 200 OK

Content-Type: image/png

Last-Modified: Mon, 16 Feb 2009 11:09:40 GMT
Accept-Ranges: bytes
Content-Length: 6928
Date: Fri, 09 Nov 2012 19:48:06 GMT
Server: INPL 2.1
Etag: &quot;33997-1b10-49994974&quot;
Expires: Fri, 09 Nov 2012 20:03:06 GMT
Cache-Control: max-age=900
Connection: keep-alive
GET /xgemius.js HTTP/1.1

Host: interia.hit.gemius.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
 
HTTP/1.1 200 OK

Content-Type: application/x-javascript

Date: Fri, 09 Nov 2012 19:54:10 GMT
Expires: Sat, 10 Nov 2012 07:54:10 GMT
Accept-Ranges: none
Cache-Control: max-age=43200
Last-Modified: Wed, 31 Oct 2012 08:32:16 GMT
Vary: Accept-Encoding
P3P: CP=&quot;NOI DSP COR NID PSAo OUR IND&quot;
Connection: close
Content-Length: 1960
Content-Encoding: gzip
GET /_1352490850386/rexdot.gif?l=30&id=0nJF._e.GUanfXqR4NZDC8Wnj_gZxRscrVlo4ElDjIT.a7&fr=1&tz=-60&fv=Shockwave%20Flash%2010.0%20r45&href=http%3A%2F%2Fetwgetvi.strefa.pl%2Fy9fs7inzj%2F&ref=&screen=1176x885&col=24&window=1176x778 HTTP/1.1

Host: interia.hit.gemius.pl
GET /_1352490850386/rexdot.gif?l=30&amp;id=0nJF._e.GUanfXqR4NZDC8Wnj_gZxRscrVlo4ElDjIT.a7&amp;fr=1&amp;tz=-60&amp;fv=Shockwave%20Flash%2010.0%20r45&amp;href=http%3A%2F%2Fetwgetvi.strefa.pl%2Fy9fs7inzj%2F&amp;ref=&amp;screen=1176x885&amp;col=24&amp;window=1176x778 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
 
HTTP/1.1 301 Moved Permanently

HTTP/1.1 301 Moved Permanently

Date: Fri, 09 Nov 2012 19:54:10 GMT
Expires: Thu, 08 Nov 2012 19:54:10 GMT
Accept-Ranges: none
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Set-Cookie: Gtest=KlxkCBFGQMQGRXssQ7QSoeGGXI2p8iMoXBG.; Domain=hit.gemius.pl; Path=/; Expires=Wed, 30 Aug 2017 00:00:00 GMT
P3P: CP=&quot;NOI DSP COR NID PSAo OUR IND&quot;
Location: /__/_1352490850386/rexdot.gif?l=30&amp;id=0nJF._e.GUanfXqR4NZDC8Wnj_gZxRscrVlo4ElDjIT.a7&amp;fr=1&amp;tz=-60&amp;fv=Shockwave%20Flash%2010.0%20r45&amp;href=http%3A%2F%2Fetwgetvi.strefa.pl%2Fy9fs7inzj%2F&amp;ref=&amp;screen=1176x885&amp;col=24&amp;window=1176x778
Connection: close
Content-Length: 0
GET /ga.js HTTP/1.1

Host: www.google-analytics.com

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
If-Modified-Since: Wed, 19 Sep 2012 11:51:40 GMT
 
HTTP/1.1 200 OK

Content-Type: text/javascript

Content-Length: 14888
Content-Encoding: gzip
Last-Modified: Mon, 22 Oct 2012 15:51:19 GMT
X-Content-Type-Options: nosniff, nosniff
Date: Fri, 09 Nov 2012 08:35:01 GMT
Expires: Fri, 09 Nov 2012 20:35:01 GMT
Vary: Accept-Encoding
Age: 40749
Cache-Control: max-age=43200, public
Server: GFE/2.0
GET /__utm.gif?utmwv=5.3.7&utms=1&utmn=1755193525&utmhn=etwgetvi.strefa.pl&utmcs=ISO-8859-2&utmsr=1176x885&utmvp=1176x778&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=10.0%20r45&utmdt=Strefa.pl%20-%20Komunikat%20-%20Strona%20zablokowana&utmhid=1719998980&utmr=-&utmp=%2Fy9fs7inzj%2F&utmac=UA-2540319-29&utmcc=__utma%3D128682072.346834946.1352490851.1352490851.1352490851.1%3B%2B__utmz%3D128682072.1352490851.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmu=D~ HTTP/1.1

Host: www.google-analytics.com
GET /__utm.gif?utmwv=5.3.7&amp;utms=1&amp;utmn=1755193525&amp;utmhn=etwgetvi.strefa.pl&amp;utmcs=ISO-8859-2&amp;utmsr=1176x885&amp;utmvp=1176x778&amp;utmsc=24-bit&amp;utmul=en-us&amp;utmje=1&amp;utmfl=10.0%20r45&amp;utmdt=Strefa.pl%20-%20Komunikat%20-%20Strona%20zablokowana&amp;utmhid=1719998980&amp;utmr=-&amp;utmp=%2Fy9fs7inzj%2F&amp;utmac=UA-2540319-29&amp;utmcc=__utma%3D128682072.346834946.1352490851.1352490851.1352490851.1%3B%2B__utmz%3D128682072.1352490851.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&amp;utmu=D~ HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Wed, 07 Nov 2012 20:35:20 GMT
Content-Length: 35
X-Content-Type-Options: nosniff
Pragma: no-cache
Expires: Wed, 19 Apr 2000 11:43:00 GMT
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Cache-Control: private, no-cache, no-cache=Set-Cookie, proxy-revalidate
Age: 170330
Server: GFE/2.0
GET /__/_1352490850386/rexdot.gif?l=30&id=0nJF._e.GUanfXqR4NZDC8Wnj_gZxRscrVlo4ElDjIT.a7&fr=1&tz=-60&fv=Shockwave%20Flash%2010.0%20r45&href=http%3A%2F%2Fetwgetvi.strefa.pl%2Fy9fs7inzj%2F&ref=&screen=1176x885&col=24&window=1176x778 HTTP/1.1

Host: interia.hit.gemius.pl
GET /__/_1352490850386/rexdot.gif?l=30&amp;id=0nJF._e.GUanfXqR4NZDC8Wnj_gZxRscrVlo4ElDjIT.a7&amp;fr=1&amp;tz=-60&amp;fv=Shockwave%20Flash%2010.0%20r45&amp;href=http%3A%2F%2Fetwgetvi.strefa.pl%2Fy9fs7inzj%2F&amp;ref=&amp;screen=1176x885&amp;col=24&amp;window=1176x778 HTTP/1.1

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://etwgetvi.strefa.pl/y9fs7inzj/
Cookie: Gtest=KlxkCBFGQMQGRXssQ7QSoeGGXI2p8iMoXBG.
 
HTTP/1.1 200 OK

Content-Type: image/gif

Date: Fri, 09 Nov 2012 19:54:10 GMT
Expires: Thu, 08 Nov 2012 19:54:10 GMT
Accept-Ranges: none
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
Set-Cookie: Gdyn=KlxUaQoGQMQGRXssQ7QSoeGGXI2p8iMoFRxSG7BLMSyGuF8CYlM1GSosxcxSY0FySssa; Domain=hit.gemius.pl; Path=/; Expires=Wed, 30 Aug 2017 00:00:00 GMT
P3P: CP=&quot;NOI DSP COR NID PSAo OUR IND&quot;
Connection: close
Content-Length: 43
GET /favicon.ico HTTP/1.1

Host: etwgetvi.strefa.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __utma=128682072.346834946.1352490851.1352490851.1352490851.1; __utmb=128682072.1.10.1352490851; __utmc=128682072; __utmz=128682072.1352490851.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
 
HTTP/1.0 503 Service Unavailable

Content-Type: text/html

Date: Fri, 09 Nov 2012 19:54:10 GMT
Server: INPL 2.1
Vary: Host
Connection: close
GET /favicon.ico HTTP/1.1

Host: etwgetvi.strefa.pl

User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __utma=128682072.346834946.1352490851.1352490851.1352490851.1; __utmb=128682072.1.10.1352490851; __utmc=128682072; __utmz=128682072.1352490851.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
 
HTTP/1.0 503 Service Unavailable

Content-Type: text/html

Date: Fri, 09 Nov 2012 19:54:13 GMT
Server: INPL 2.1
Vary: Host
Connection: close