Overview

URL u.to/EuKYEg
IP195.216.243.155
ASNAS29226 CJSC Mastertel
Location Russian Federation
Report completed2018-07-11 15:13:42 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-07-11 2 u.to/EuKYEg Phishing
2018-07-11 2 thnccpa.net/Office/Office/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 195.216.243.155

Date UQ / IDS / BL URL IP
2018-09-06 07:55:19 +0200
0 - 1 - 0 u.to/415HEw 195.216.243.155
2018-08-23 08:43:46 +0200
1 - 0 - 0 u.to/wYy5Eg 195.216.243.155
2018-08-16 06:12:11 +0200
0 - 0 - 1 u.to/6AOdEg 195.216.243.155
2018-08-16 02:48:29 +0200
1 - 0 - 0 u.to/wYy5Eg 195.216.243.155
2018-08-16 02:48:19 +0200
0 - 0 - 1 u.to/6AOdEg 195.216.243.155
2018-08-15 10:12:05 +0200
0 - 0 - 1 u.to/6AOdEg 195.216.243.155
2018-08-14 17:16:27 +0200
0 - 0 - 0 u.to/PnEfEw 195.216.243.155
2018-08-12 07:36:06 +0200
0 - 0 - 2 u.to/CofrEg 195.216.243.155
2018-08-12 07:24:34 +0200
1 - 0 - 0 u.to/wYy5Eg 195.216.243.155
2018-08-11 02:24:25 +0200
0 - 0 - 1 u.to/CofrEg 195.216.243.155

Last 10 reports on ASN: AS29226 CJSC Mastertel

Date UQ / IDS / BL URL IP
2018-09-21 16:29:19 +0200
0 - 0 - 1 cs-xgm.ucoz.net/anticheat/MyAC_1.5.9.rar 195.216.243.38
2018-09-21 15:25:44 +0200
0 - 3 - 0 css-navi.clan.su/_ld/0/76_1908_Crash..rar 195.216.243.40
2018-09-21 12:26:42 +0200
0 - 2 - 0 css-navi.clan.su/_ld/0/76_1908_Crash..rar 195.216.243.40
2018-09-21 12:16:23 +0200
0 - 0 - 1 cs-xgm.ucoz.net/anticheat/MyAC_1.5.9.rar 195.216.243.38
2018-09-21 12:04:48 +0200
0 - 0 - 1 nokia-e65.smartovik.ru/games/soccer.exe 217.67.179.222
2018-09-21 10:25:40 +0200
0 - 5 - 0 css-navi.clan.su/_ld/0/76_1908_Crash..rar 195.216.243.40
2018-09-21 10:15:01 +0200
0 - 0 - 1 cs-xgm.ucoz.net/anticheat/MyAC_1.5.9.rar 195.216.243.38
2018-09-21 09:26:26 +0200
0 - 3 - 0 css-navi.clan.su/_ld/0/76_1908_Crash..rar 195.216.243.40
2018-09-21 00:28:35 +0200
0 - 0 - 1 cs-xgm.ucoz.net/anticheat/MyAC_1.5.9.rar 195.216.243.38
2018-09-20 23:39:42 +0200
0 - 0 - 1 cs-xgm.ucoz.net/anticheat/MyAC_1.5.9.rar 195.216.243.38

Last 10 reports on domain: u.to

Date UQ / IDS / BL URL IP
2018-09-06 07:55:19 +0200
0 - 1 - 0 u.to/415HEw 195.216.243.155
2018-08-23 08:43:46 +0200
1 - 0 - 0 u.to/wYy5Eg 195.216.243.155
2018-08-16 06:12:11 +0200
0 - 0 - 1 u.to/6AOdEg 195.216.243.155
2018-08-16 02:48:29 +0200
1 - 0 - 0 u.to/wYy5Eg 195.216.243.155
2018-08-16 02:48:19 +0200
0 - 0 - 1 u.to/6AOdEg 195.216.243.155
2018-08-15 10:12:05 +0200
0 - 0 - 1 u.to/6AOdEg 195.216.243.155
2018-08-14 17:16:27 +0200
0 - 0 - 0 u.to/PnEfEw 195.216.243.155
2018-08-12 07:36:06 +0200
0 - 0 - 2 u.to/CofrEg 195.216.243.155
2018-08-12 07:24:34 +0200
1 - 0 - 0 u.to/wYy5Eg 195.216.243.155
2018-08-11 02:24:25 +0200
0 - 0 - 1 u.to/CofrEg 195.216.243.155


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (4)


Request Response
                                        
                                            GET /EuKYEg HTTP/1.1 
Host: u.to
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         195.216.243.155
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Server: uServ/1.5.1
Date: Wed, 11 Jul 2018 13:13:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=15
Set-Cookie: lng=en; path=/; expires=Thu, 11-Jul-2019 13:13:12 GMT; domain=.u.to;
Location: http://thnccpa.net/Office/Office/


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   213
Md5:    10750c1f7bccde158b9731d16d570167
Sha1:   1ce4de508f67c0f7cdf05ff55e724d3992218203
Sha256: 1b03852aaab48c051d07f7ebb1287ff7f009d40534c59cf77d9781e568d116d7

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /Office/Office/ HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:12 GMT
Server: Apache
Content-Length: 212
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   212
Md5:    6b55ae53adc930267bf39e2d3400aeb5
Sha1:   882876da8be68a16b91e78634ba8bf6e47c24036
Sha256: 6b0c26bed28d6eb8fb001df9c5f08eed221ee3a40855d0fdf04b3e7f57b3ea6c

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:12 GMT
Server: Apache
Content-Length: 209
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: thnccpa.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         74.119.239.234
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 11 Jul 2018 13:13:15 GMT
Server: Apache
Content-Length: 209
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   209
Md5:    18ffb59b61525f781cf9251045be575d
Sha1:   bd7318b00b15b7a1c8a48524419fa2e5c27a5b6d
Sha256: b6682cab65d3243b5b75efb7279dbf49491957484780f2ba0a87632cc0e25642