Overview

URL u.to/EuKYEg
IP195.216.243.155
ASNAS29226 CJSC Mastertel
Location Russian Federation
Report completed2018-07-11 15:13:42 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-07-11 2 u.to/EuKYEg Phishing
2018-07-11 2 thnccpa.net/Office/Office/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 195.216.243.155

Date UQ / IDS / BL URL IP
2019-02-16 02:19:46 +0100
0 - 2 - 2 u.to/ABlkFA 195.216.243.155
2019-02-11 18:23:29 +0100
0 - 0 - 0 https://u.to/ZFyhFA 195.216.243.155
2019-02-11 09:09:25 +0100
0 - 0 - 1 u.to/EE8zFA 195.216.243.155
2019-02-11 04:42:16 +0100
0 - 0 - 1 u.to/rSLpEw 195.216.243.155
2019-02-10 16:54:14 +0100
0 - 0 - 2 u.to/N5QsFA 195.216.243.155
2019-02-10 14:03:12 +0100
0 - 0 - 2 u.to/x7iQFA 195.216.243.155
2019-02-10 13:15:36 +0100
0 - 0 - 2 u.to/k1NXEw 195.216.243.155
2019-02-10 13:05:26 +0100
0 - 0 - 1 u.to/aXnoEw 195.216.243.155
2019-02-10 08:06:58 +0100
0 - 0 - 1 u.to/9eNZFA 195.216.243.155
2019-02-10 06:17:38 +0100
0 - 0 - 1 u.to/TZBUFA 195.216.243.155

Last 10 reports on ASN: AS29226 CJSC Mastertel

Date UQ / IDS / BL URL IP
2019-02-16 02:19:46 +0100
0 - 2 - 2 u.to/ABlkFA 195.216.243.155
2019-02-15 15:20:46 +0100
0 - 0 - 1 redsigns.do.am/_ld/0/3_RFUFree_3.3.8.rar 195.216.243.39
2019-02-15 09:12:55 +0100
0 - 0 - 1 gtagamer.org/_ld/37/3711_Colormod-2-.rar 195.216.243.237
2019-02-15 03:54:29 +0100
0 - 0 - 1 bl-cs.ucoz.ru/_ld/0/30_Silent_Aim_CSGO.rar 195.216.243.31
2019-02-14 04:43:32 +0100
0 - 0 - 1 cheat-funny.ru/_ld/1/130_2374_chit_d3d_m.rar 195.216.243.8
2019-02-14 02:16:33 +0100
0 - 0 - 1 reff.moy.su/index/0-4 195.216.243.31
2019-02-14 00:13:11 +0100
0 - 0 - 1 cheat-funny.ru/_ld/1/130_2374_chit_d3d_m.rar 195.216.243.8
2019-02-13 19:46:38 +0100
0 - 0 - 1 nokia-e65.smartovik.ru/themes/Nice-Sunset.exe 217.67.179.222
2019-02-13 19:31:17 +0100
0 - 0 - 1 cheat-funny.ru/_ld/0/75_chit_kredity_wa.rar 195.216.243.8
2019-02-13 16:21:39 +0100
0 - 0 - 1 cheat-funny.ru/_ld/0/72_2320_engine7_ha.rar 195.216.243.8

Last 10 reports on domain: u.to

Date UQ / IDS / BL URL IP
2019-02-16 02:19:46 +0100
0 - 2 - 2 u.to/ABlkFA 195.216.243.155
2019-02-11 18:23:29 +0100
0 - 0 - 0 https://u.to/ZFyhFA 195.216.243.155
2019-02-11 09:09:25 +0100
0 - 0 - 1 u.to/EE8zFA 195.216.243.155
2019-02-11 04:42:16 +0100
0 - 0 - 1 u.to/rSLpEw 195.216.243.155
2019-02-10 16:54:14 +0100
0 - 0 - 2 u.to/N5QsFA 195.216.243.155
2019-02-10 14:03:12 +0100
0 - 0 - 2 u.to/x7iQFA 195.216.243.155
2019-02-10 13:15:36 +0100
0 - 0 - 2 u.to/k1NXEw 195.216.243.155
2019-02-10 13:05:26 +0100
0 - 0 - 1 u.to/aXnoEw 195.216.243.155
2019-02-10 08:06:58 +0100
0 - 0 - 1 u.to/9eNZFA 195.216.243.155
2019-02-10 06:17:38 +0100
0 - 0 - 1 u.to/TZBUFA 195.216.243.155


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (4)


Request Response
                                        
                                            GET /EuKYEg HTTP/1.1 
Host: u.to
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.216.243.155
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: uServ/1.5.1
Date: Wed, 11 Jul 2018 13:13:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: lng=en; path=/; expires=Thu, 11-Jul-2019 13:13:12 GMT; domain=.u.to;
Location: http://thnccpa.net/Office/Office/


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   213
Md5:    10750c1f7bccde158b9731d16d570167
Sha1:   1ce4de508f67c0f7cdf05ff55e724d3992218203
Sha256: 1b03852aaab48c051d07f7ebb1287ff7f009d40534c59cf77d9781e568d116d7

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /Office/Office/ HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:12 GMT
Server: Apache
Content-Length: 212
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   212
Md5:    6b55ae53adc930267bf39e2d3400aeb5
Sha1:   882876da8be68a16b91e78634ba8bf6e47c24036
Sha256: 6b0c26bed28d6eb8fb001df9c5f08eed221ee3a40855d0fdf04b3e7f57b3ea6c

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:12 GMT
Server: Apache
Content-Length: 209
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:15 GMT
Server: Apache
Content-Length: 209
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642