Overview

URL genecurry.com/random/wls/wellsfargoadmin/verify2.html
IP207.55.255.4
ASNAS17054 CONTINENTAL BROADBAND PENNSYLVANIA, INC.
Location United States
Report completed2018-09-27 00:23:58 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-09-27 2 genecurry.com/random/wls/wellsfargoadmin/verify2.html Phishing
2018-09-27 2 genecurry.com/random/wls/wellsfargoadmin/verify2.html Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 207.55.255.4

Date UQ / IDS / BL URL IP
2019-05-05 07:28:46 +0200
0 - 0 - 13 irishgyroplanes.com/media.html 207.55.255.4
2019-05-05 06:59:54 +0200
0 - 0 - 1 gmiley.ie/wp-content/plugins/build/bot/script 207.55.255.4
2019-05-04 19:50:13 +0200
0 - 0 - 3 stickups.ie/ 207.55.255.4
2019-04-25 16:37:03 +0200
0 - 0 - 1 dublinpokerfestival.com/wp-includes/acct/1/co (...) 207.55.255.4
2019-04-24 06:20:52 +0200
0 - 0 - 1 https://www.betterdeck.ie/wp-includes/int/ver (...) 207.55.255.4
2019-04-23 05:38:42 +0200
0 - 0 - 2 betterdeck.ie/wp-includes/int/verification/4M (...) 207.55.255.4
2019-04-21 10:11:39 +0200
0 - 0 - 1 winnertakesall.ie/ghfth/?y=aW5mb0Bhc2dlbnQuY2 (...) 207.55.255.4
2019-04-21 06:26:01 +0200
0 - 0 - 15 ygysconsulting.com/2018/11/27/china-state-cou (...) 207.55.255.4
2019-04-19 02:17:40 +0200
0 - 0 - 3 winnertakesall.ie/invest/closing/index.php 207.55.255.4
2019-04-18 17:09:15 +0200
0 - 0 - 21 winnertakesall.ie 207.55.255.4

Last 10 reports on ASN: AS17054 CONTINENTAL BROADBAND PENNSYLVANIA, INC.

Date UQ / IDS / BL URL IP
2019-05-21 17:06:42 +0200
0 - 0 - 2 coreymarieburns.com/wp 216.222.194.136
2019-05-21 17:05:48 +0200
0 - 0 - 3 airportgeek.com/scripts/Validation 207.55.244.15
2019-05-21 05:26:25 +0200
0 - 0 - 1 change-health.com/wp-includes/autolink/autos.zip 216.222.194.162
2019-05-21 01:06:53 +0200
0 - 0 - 1 white-jewellery.com/AJHfN4GQ/tY8.exe 199.204.251.13
2019-05-20 23:40:41 +0200
0 - 0 - 1 white-jewellery.com/0wJ.exe 199.204.251.13
2019-05-20 23:21:45 +0200
0 - 0 - 1 southsidebaptistgriffin.com/images/408e6e841d (...) 68.171.38.42
2019-05-20 23:10:10 +0200
0 - 0 - 1 southsidebaptistgriffin.com/images/408e6e841d (...) 68.171.38.42
2019-05-20 22:19:11 +0200
0 - 0 - 1 white-jewellery.com/x9mz.exe 199.204.251.13
2019-05-20 22:03:32 +0200
0 - 0 - 0 practiline.com/download/pc.bu.info 216.37.42.60
2019-05-20 19:00:19 +0200
0 - 0 - 1 https://authenticrecordsonline.com/costman/dr (...) 216.222.194.166

Last 2 reports on domain: genecurry.com

Date UQ / IDS / BL URL IP
2019-01-19 11:25:11 +0100
0 - 0 - 2 genecurry.com/license/purolator-tracking.zip 207.55.255.4
2018-06-15 21:14:05 +0200
0 - 0 - 1 genecurry.com/license/purolator-tracking.zip 89.234.64.225


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (2)


Request Response
                                        
                                            GET /random/wls/wellsfargoadmin/verify2.html HTTP/1.1 
Host: genecurry.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         207.55.255.4
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Wed, 26 Sep 2018 22:23:26 GMT
Server: Protected by COMODO WAF mod_bwlimited/1.4
Location: https://genecurry.com/random/wls/wellsfargoadmin/verify2.html
Content-Length: 245
Keep-Alive: timeout=30, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   245
Md5:    fa8c0d42a520f855ee6016a660e45f7b
Sha1:   929de9e6590b88748c001099e03052956cfc2204
Sha256: 5d4841d4c341ac379b1610688a0b89f6246109bb45874232af4521dcd8969c5b

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /random/wls/wellsfargoadmin/verify2.html HTTP/1.1 
Host: genecurry.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Phishing