Overview

URL bit.ly/2y3pOUM
IP67.199.248.10
ASNAS3257 Tinet SpA
Location United States
Report completed2017-10-17 14:54:13 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-10-17 2 zascor.co.za/file/dokin/index.php Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 67.199.248.10

Date UQ / IDS / BL URL IP
2017-11-21 00:29:00 +0100
0 - 0 - 0 bit.ly/2zm3tU6 67.199.248.10
2017-11-21 00:16:42 +0100
0 - 0 - 0 bit.ly/2yUvlhT 67.199.248.10
2017-11-20 22:55:25 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.10
2017-11-20 21:47:52 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.10
2017-11-20 21:47:35 +0100
0 - 0 - 0 bit.ly 67.199.248.10
2017-11-20 21:47:04 +0100
4 - 1 - 1 bit.ly/2hc18zS 67.199.248.10
2017-11-20 21:29:02 +0100
0 - 0 - 0 bit.ly/2ASNtVQ 67.199.248.10
2017-11-20 21:20:33 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.10
2017-11-20 20:43:27 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.10
2017-11-20 20:20:56 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.10

Last 10 reports on ASN: AS3257 Tinet SpA

Date UQ / IDS / BL URL IP
2017-11-21 00:29:00 +0100
0 - 0 - 0 bit.ly/2zm3tU6 67.199.248.10
2017-11-21 00:16:42 +0100
0 - 0 - 0 bit.ly/2yUvlhT 67.199.248.10
2017-11-20 23:48:39 +0100
0 - 0 - 1 https://bitly.com/a/warning?hash=2g59R9C 67.199.248.14
2017-11-20 23:48:35 +0100
0 - 0 - 1 https://bitly.com/a/warning?hash=2jikGX3 67.199.248.14
2017-11-20 23:42:15 +0100
0 - 0 - 1 https://bitly.com/a/warning?hash=1I70Qzs 67.199.248.14
2017-11-20 23:23:19 +0100
0 - 0 - 3 fs08n2.sendspace.com/dl/2a255a19e339cdd074773 (...) 69.31.136.37
2017-11-20 23:20:12 +0100
0 - 0 - 1 https://bitly.com/a/warning?hash=2zQwE1a 67.199.248.14
2017-11-20 23:09:47 +0100
0 - 0 - 3 fs08n2.sendspace.com/dl/2a255a19e339cdd074773 (...) 69.31.136.37
2017-11-20 23:02:35 +0100
0 - 0 - 1 https://bitly.com/a/warning?hash=1I70Qzs 67.199.248.15
2017-11-20 22:55:25 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.10

Last 10 reports on domain: bit.ly

Date UQ / IDS / BL URL IP
2017-11-21 00:29:00 +0100
0 - 0 - 0 bit.ly/2zm3tU6 67.199.248.10
2017-11-21 00:16:42 +0100
0 - 0 - 0 bit.ly/2yUvlhT 67.199.248.10
2017-11-20 22:55:25 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.10
2017-11-20 22:03:44 +0100
0 - 0 - 0 bit.ly/2AhqSGb 67.199.248.11
2017-11-20 21:47:52 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.10
2017-11-20 21:47:35 +0100
0 - 0 - 0 bit.ly 67.199.248.10
2017-11-20 21:47:04 +0100
4 - 1 - 1 bit.ly/2hc18zS 67.199.248.10
2017-11-20 21:45:01 +0100
4 - 1 - 1 bit.ly/2hc18zS 67.199.248.11
2017-11-20 21:36:15 +0100
4 - 0 - 0 bit.ly/2zkebun 67.199.248.11
2017-11-20 21:29:02 +0100
0 - 0 - 0 bit.ly/2ASNtVQ 67.199.248.10


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (12)


Request Response
                                        
                                            GET /2y3pOUM HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.199.248.10
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Tue, 17 Oct 2017 13:00:19 GMT
Content-Length: 127
Connection: keep-alive
Cache-Control: private, max-age=90
Location: http://zascor.co.za/file/dokin/index.php
Set-Cookie: _bit=h9hd0j-2744c1138be3c007b4-00I; Domain=bit.ly; Expires=Sun, 15 Apr 2018 13:00:19 GMT


--- Additional Info ---
Magic:  HTML document text
Size:   127
Md5:    d54e1c6c933ed3fe3ddafa0fe9a6e885
Sha1:   5bfdf15dccd97722edc6af0cada108bcbbafdb2d
Sha256: babd0b9b18dc9c1d1bbb3d69db3c9db355c812622c05b53d3525f192a256f25b
                                        
                                            GET /file/dokin/index.php HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         41.185.8.122
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Tue, 17 Oct 2017 13:00:18 GMT
Server: Apache
X-Powered-By: PHP/5.5.38
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII HTML document text, with CRLF, LF line terminators
Size:   1427
Md5:    8783af3588206dfb66c5e8234b7d6c59
Sha1:   d651096b5ffce1dabf87d589cbdc3af3d2d75fd9
Sha256: c692fbc634ef1716dd10c0e204428bd83f771c548b0798c507454ac5b69bfb82

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /file/dokin/ganton_files/style1.css HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zascor.co.za/file/dokin/index.php

                                         
                                         41.185.8.122
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 17 Oct 2017 13:00:19 GMT
Server: Apache
Content-Length: 351
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   351
Md5:    ca6445832047dab750a92d631cec918a
Sha1:   01cf6689d9915c1ab104c3bf38084a8bfdad8da9
Sha256: 96423ec29874fada906963aba812e8ec306c4ff15da81f4082ea77926d0c9a27
                                        
                                            GET /file/dokin/css/alin.png HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zascor.co.za/file/dokin/index.php

                                         
                                         41.185.8.122
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Oct 2017 13:00:19 GMT
Server: Apache
Last-Modified: Mon, 10 Jul 2017 02:22:20 GMT
Accept-Ranges: bytes
Content-Length: 1285
Connection: close


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   1285
Md5:    34dd3add3bd22552c94035eef8ab174a
Sha1:   3549659d2edf82234e5c7b487ec4aed755c4387a
Sha256: e769ee4af1c574e9927cafd4f49fcd25bcf546b2d91274fc8df604881316b32f
                                        
                                            GET /file/dokin/css/itiliki.png HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zascor.co.za/file/dokin/index.php

                                         
                                         41.185.8.122
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Oct 2017 13:00:19 GMT
Server: Apache
Last-Modified: Mon, 10 Jul 2017 02:22:22 GMT
Accept-Ranges: bytes
Content-Length: 440
Connection: close


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit/color RGBA, non-interlaced
Size:   440
Md5:    f4feed4458e2b3295c3024a8538feb7f
Sha1:   66caa1a06116ae37534ce6ef3b25627be87a4f99
Sha256: 8b623356ef47a42e3aca4c850fd5d56c8705348100e3278646581220c3d59934
                                        
                                            GET /file/dokin/css/gmilo.png HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zascor.co.za/file/dokin/index.php

                                         
                                         41.185.8.122
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Oct 2017 13:00:19 GMT
Server: Apache
Last-Modified: Mon, 10 Jul 2017 03:01:42 GMT
Accept-Ranges: bytes
Content-Length: 2067
Connection: close


--- Additional Info ---
Magic:  PNG image, 91 x 69, 8-bit/color RGB, non-interlaced
Size:   2067
Md5:    006f8e4c92486b0df5349fe4d2cf6476
Sha1:   96f7cce5132bcb6d5b88849579982b821c34162b
Sha256: 617668933d14c3020205fcbbe9d76dd2cd77fce10e857e34258edea8323f00cd
                                        
                                            GET /file/dokin/css/yaya.png HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zascor.co.za/file/dokin/index.php

                                         
                                         41.185.8.122
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Oct 2017 13:00:19 GMT
Server: Apache
Last-Modified: Mon, 10 Jul 2017 02:22:20 GMT
Accept-Ranges: bytes
Content-Length: 1673
Connection: close


--- Additional Info ---
Magic:  PNG image, 48 x 48, 8-bit colormap, non-interlaced
Size:   1673
Md5:    8e8453df161cd4e0f8da05db0c967cae
Sha1:   89afacee04f7b7aafac3c8827d8ea3ed6368956f
Sha256: 4a13c0da84f5aef7d559981d031c52e5edcb020c639b0b004ed37988774e076f
                                        
                                            GET /file/dokin/css/dadas.png HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zascor.co.za/file/dokin/index.php

                                         
                                         41.185.8.122
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Oct 2017 13:00:20 GMT
Server: Apache
Last-Modified: Mon, 10 Jul 2017 03:13:42 GMT
Accept-Ranges: bytes
Content-Length: 4773
Connection: close


--- Additional Info ---
Magic:  PNG image, 145 x 110, 8-bit/color RGB, non-interlaced
Size:   4773
Md5:    38da384a163a8e9ab1a2c3e192f270a4
Sha1:   85dcaef73917c4329580dc49a68f4f83e78de024
Sha256: d40513b103e484b27c0581d477ca931c1a2fc636f87ca9a4873492e2269bf91c
                                        
                                            GET /file/dokin/css/fisere.png HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zascor.co.za/file/dokin/index.php

                                         
                                         41.185.8.122
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Oct 2017 13:00:20 GMT
Server: Apache
Last-Modified: Mon, 10 Jul 2017 02:22:20 GMT
Accept-Ranges: bytes
Content-Length: 18755
Connection: close


--- Additional Info ---
Magic:  PNG image, 61 x 61, 8-bit/color RGB, non-interlaced
Size:   18755
Md5:    f22f0b74f27173c3bad9d57cb7cab8fc
Sha1:   e9b392893f4af159b4a158d3eaed26309a740031
Sha256: 201252a0397b3970232b33717076c8614187524bda208e0f0d05c48f6eb72825
                                        
                                            GET /file/dokin/css/dokin.png HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://zascor.co.za/file/dokin/index.php

                                         
                                         41.185.8.122
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Tue, 17 Oct 2017 13:00:19 GMT
Server: Apache
Last-Modified: Mon, 10 Jul 2017 03:27:42 GMT
Accept-Ranges: bytes
Content-Length: 134644
Connection: close


--- Additional Info ---
Magic:  PNG image, 1404 x 848, 8-bit/color RGBA, non-interlaced
Size:   134644
Md5:    3ac5ce8b46c301c909ed9a822dff9847
Sha1:   008e55bc57728f17117520c98da55d41bdb3e650
Sha256: 84a7be5ae9640c88db2b4661c560eebf99551af05073e9dd1ff3a26e0b44f455
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         41.185.8.122
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 17 Oct 2017 13:00:21 GMT
Server: Apache
Content-Length: 328
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   328
Md5:    301fa7ceb5b3c291d4bbeee953048686
Sha1:   758d921efd60d4e9f0f6d77648ccc500c8611fea
Sha256: 6b62a3658ad247e8f30d3e9f35da5e00ffac1ea09785bd1f0a9830f659cf01da
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: zascor.co.za
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         41.185.8.122
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Tue, 17 Oct 2017 13:00:24 GMT
Server: Apache
Content-Length: 328
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   328
Md5:    301fa7ceb5b3c291d4bbeee953048686
Sha1:   758d921efd60d4e9f0f6d77648ccc500c8611fea
Sha256: 6b62a3658ad247e8f30d3e9f35da5e00ffac1ea09785bd1f0a9830f659cf01da