Overview

URL fatherdeals.com/
IP184.168.131.241
ASNAS26496 GoDaddy.com, LLC
Location United States
Report completed2019-03-25 09:17:18 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-03-25 2 fatherdeals.com/ Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 184.168.131.241

Date UQ / IDS / BL URL IP
2019-04-19 20:14:26 +0200
0 - 0 - 1 hundgenn.com/hbb 184.168.131.241
2019-04-19 19:59:23 +0200
0 - 0 - 1 hundgenn.com/hbb 184.168.131.241
2019-04-19 19:40:13 +0200
0 - 0 - 17 sound.advconcepts.org 184.168.131.241
2019-04-19 19:29:25 +0200
0 - 0 - 1 hundgenn.com/hbb 184.168.131.241
2019-04-19 18:53:01 +0200
0 - 0 - 18 demand.homewardboundpm.com/ 184.168.131.241
2019-04-19 18:51:12 +0200
0 - 0 - 17 five.rvacommercialrealestate.net/ 184.168.131.241
2019-04-19 17:23:01 +0200
0 - 0 - 18 wonder.oomnee.com/ 184.168.131.241
2019-04-19 17:18:03 +0200
0 - 0 - 0 https://www.norselegion.com 184.168.131.241
2019-04-19 16:59:41 +0200
0 - 0 - 0 mytpi.com/ 184.168.131.241
2019-04-19 16:18:27 +0200
0 - 0 - 1 pinnaclefences.com/tips-on-how-to-rotate-your (...) 184.168.131.241

Last 10 reports on ASN: AS26496 GoDaddy.com, LLC

Date UQ / IDS / BL URL IP
2019-04-19 21:17:19 +0200
0 - 0 - 1 www.chicagobuymyride.com/sellmycar.php/ 184.168.46.19
2019-04-19 21:12:25 +0200
0 - 0 - 117 teamsofer.com/store/qzum-jmya49p7lc0mcc_huvow (...) 107.180.24.235
2019-04-19 20:57:26 +0200
0 - 0 - 1 www.unnaticreations.in/wp-content/uploads/201 (...) 166.62.27.148
2019-04-19 20:45:07 +0200
0 - 0 - 1 hbs-properties.com/install.php 160.153.47.201
2019-04-19 20:43:42 +0200
0 - 0 - 2 www.akqp.com/bet365ty 184.168.221.57
2019-04-19 20:41:43 +0200
0 - 0 - 1 cocktailsk.com/ 107.180.1.250
2019-04-19 20:29:43 +0200
0 - 0 - 2 mysprint.shop/wp-content/yomS-WBG5r12lZbuvfP8 (...) 23.229.176.164
2019-04-19 20:17:24 +0200
0 - 0 - 15 teachingenglishcolombia.org/ 107.180.24.240
2019-04-19 20:14:26 +0200
0 - 0 - 1 hundgenn.com/hbb 184.168.131.241
2019-04-19 20:03:30 +0200
0 - 0 - 1 duckshow.com/2012/03/duck-walks-into-bar.html (...) 173.201.144.1

No other reports on domain: fatherdeals.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (4)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: fatherdeals.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         184.168.131.241
HTTP/1.1 502 Bad Gateway
Content-Type: text/html
                                        
Server: nginx/1.12.2
Date: Mon, 25 Mar 2019 08:16:46 GMT
Content-Length: 173
Connection: close


--- Additional Info ---
Magic:  HTML document text
Size:   173
Md5:    fc5595d9d3f3cabad4d2badf75229e98
Sha1:   80dcc85d6519c92a4ede81e194ebf5cb2a0d9859
Sha256: bb89ee25940e05c663b885533bc3091a3d49ab5596543b6f4a2897e98e037cfa

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: fatherdeals.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         184.168.131.241
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.12.2
Date: Mon, 25 Mar 2019 08:16:46 GMT
Transfer-Encoding: chunked
Connection: close
Location: http://www.dabbersinsurance.com/favicon.ico


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.dabbersinsurance.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         66.235.200.24
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 25 Mar 2019 08:16:46 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d12c9b147c7bbb047fd45ed335b9d6dce1553501806; expires=Tue, 24-Mar-20 08:16:46 GMT; path=/; domain=.www.dabbersinsurance.com; HttpOnly
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4bcf71d51bac42c1-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   125
Md5:    16a8322f8628c3af5dbdf659cfb2226e
Sha1:   f157a45d02dc277e36e680ee8028e3716d7d4730
Sha256: 663895e75310547061c3f2bf10ba841df907a05d30816a9b1151fcae579cc65c
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.dabbersinsurance.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d12c9b147c7bbb047fd45ed335b9d6dce1553501806

                                         
                                         66.235.200.24
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 25 Mar 2019 08:16:49 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Via: 1.1 google
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4bcf71e58aa042c1-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   125
Md5:    16a8322f8628c3af5dbdf659cfb2226e
Sha1:   f157a45d02dc277e36e680ee8028e3716d7d4730
Sha256: 663895e75310547061c3f2bf10ba841df907a05d30816a9b1151fcae579cc65c