Overview

URL u.to/EuKYEg
IP195.216.243.155
ASNAS29226 CJSC Mastertel
Location Russian Federation
Report completed2018-07-11 15:13:42 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-07-11 2 u.to/EuKYEg Phishing
2018-07-11 2 thnccpa.net/Office/Office/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 195.216.243.155

Date UQ / IDS / BL URL IP
2018-11-16 10:39:17 +0100
0 - 0 - 0 u.to 195.216.243.155
2018-11-13 08:45:28 +0100
0 - 0 - 1 https://u.to/HrPWEw 195.216.243.155
2018-11-09 21:32:54 +0100
0 - 0 - 0 https://u.to/fKQMFA 195.216.243.155
2018-11-08 16:29:00 +0100
0 - 0 - 3 https://u.to/di0MFA 195.216.243.155
2018-10-31 20:22:38 +0100
0 - 0 - 0 u.to 195.216.243.155
2018-10-30 15:47:14 +0100
0 - 0 - 0 u.to/WN-qEQ 195.216.243.155
2018-10-30 15:47:06 +0100
0 - 0 - 1 u.to/ILdeEg 195.216.243.155
2018-10-30 15:41:42 +0100
0 - 0 - 0 u.to/W7eVEg 195.216.243.155
2018-10-30 15:41:39 +0100
0 - 0 - 0 u.to/CDCQEg 195.216.243.155
2018-10-29 11:06:00 +0100
0 - 0 - 5 u.to/K8-xEg 195.216.243.155

Last 10 reports on ASN: AS29226 CJSC Mastertel

Date UQ / IDS / BL URL IP
2018-11-18 11:00:43 +0100
0 - 0 - 14 aktivator-windows.net/load/aktivatory_dlja_wi (...) 195.216.243.12
2018-11-16 11:47:18 +0100
0 - 1 - 0 moneyzone.ucoz.net/ 195.216.243.43
2018-11-16 10:39:17 +0100
0 - 0 - 0 u.to 195.216.243.155
2018-11-16 10:30:41 +0100
0 - 0 - 1 only-vip.kz/ 195.216.243.17
2018-11-15 15:24:22 +0100
0 - 1 - 0 lotsman.su/ 195.216.243.218
2018-11-14 22:35:52 +0100
0 - 0 - 1 hramkgu.ru/ 195.216.243.31
2018-11-14 22:21:14 +0100
0 - 5 - 0 utu.su/ 195.216.243.124
2018-11-14 17:37:30 +0100
0 - 0 - 0 forworship.my1.ru/favicon.ico 195.216.243.130
2018-11-14 14:30:27 +0100
2 - 1 - 2 trebisaut.do.am/video/vip/2909/filmy_i_animac (...) 195.216.243.44
2018-11-14 08:10:57 +0100
0 - 0 - 1 as124234.at.ua/incorrect-email.html 195.216.243.218

Last 10 reports on domain: u.to

Date UQ / IDS / BL URL IP
2018-11-16 10:39:17 +0100
0 - 0 - 0 u.to 195.216.243.155
2018-11-13 08:45:28 +0100
0 - 0 - 1 https://u.to/HrPWEw 195.216.243.155
2018-11-09 21:32:54 +0100
0 - 0 - 0 https://u.to/fKQMFA 195.216.243.155
2018-11-08 16:29:00 +0100
0 - 0 - 3 https://u.to/di0MFA 195.216.243.155
2018-10-31 20:22:38 +0100
0 - 0 - 0 u.to 195.216.243.155
2018-10-30 15:47:14 +0100
0 - 0 - 0 u.to/WN-qEQ 195.216.243.155
2018-10-30 15:47:06 +0100
0 - 0 - 1 u.to/ILdeEg 195.216.243.155
2018-10-30 15:41:42 +0100
0 - 0 - 0 u.to/W7eVEg 195.216.243.155
2018-10-30 15:41:39 +0100
0 - 0 - 0 u.to/CDCQEg 195.216.243.155
2018-10-29 11:06:00 +0100
0 - 0 - 5 u.to/K8-xEg 195.216.243.155


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (4)


Request Response
                                        
                                            GET /EuKYEg HTTP/1.1 
Host: u.to
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.216.243.155
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: uServ/1.5.1
Date: Wed, 11 Jul 2018 13:13:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: lng=en; path=/; expires=Thu, 11-Jul-2019 13:13:12 GMT; domain=.u.to;
Location: http://thnccpa.net/Office/Office/


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   213
Md5:    10750c1f7bccde158b9731d16d570167
Sha1:   1ce4de508f67c0f7cdf05ff55e724d3992218203
Sha256: 1b03852aaab48c051d07f7ebb1287ff7f009d40534c59cf77d9781e568d116d7

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /Office/Office/ HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:12 GMT
Server: Apache
Content-Length: 212
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   212
Md5:    6b55ae53adc930267bf39e2d3400aeb5
Sha1:   882876da8be68a16b91e78634ba8bf6e47c24036
Sha256: 6b0c26bed28d6eb8fb001df9c5f08eed221ee3a40855d0fdf04b3e7f57b3ea6c

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:12 GMT
Server: Apache
Content-Length: 209
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:15 GMT
Server: Apache
Content-Length: 209
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642