Overview

URL https://t.co/3j3HVuKmhS
IP199.16.156.11
ASNAS13414 Twitter Inc.
Location United States
Report completed2018-11-09 19:39:08 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-09 2 www.tshasnaf.ir/fa/images/link/CC?000 Phishing
2018-11-09 2 www.tshasnaf.ir/fa/images/link/CC/?000 Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 199.16.156.11

Date UQ / IDS / BL URL IP
2018-11-16 09:31:08 +0100
0 - 0 - 0 t.co 199.16.156.11
2018-11-16 09:09:28 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.11
2018-11-16 07:38:06 +0100
0 - 0 - 0 https://t.co/AceckE7zkb 199.16.156.11
2018-11-15 19:42:54 +0100
0 - 1 - 4 t.co/NrfzRDmyca 199.16.156.11
2018-11-15 00:45:51 +0100
0 - 0 - 0 https://t.co/gzijSBKKca 199.16.156.11
2018-11-14 18:02:07 +0100
0 - 3 - 0 https://t.co/4rmTF2QXaz 199.16.156.11
2018-11-14 15:37:23 +0100
0 - 0 - 0 https://t.co/GC07DarV3e 199.16.156.11
2018-11-14 13:56:32 +0100
0 - 0 - 1 https://t.co/ePklJ97Nxm 199.16.156.11
2018-11-14 11:43:47 +0100
0 - 0 - 0 https://t.co/ui5V61Neum 199.16.156.11
2018-11-13 22:50:57 +0100
0 - 0 - 0 https://t.co/RYCx1TtEEK 199.16.156.11

Last 10 reports on ASN: AS13414 Twitter Inc.

Date UQ / IDS / BL URL IP
2018-11-16 09:31:08 +0100
0 - 0 - 0 t.co 199.16.156.11
2018-11-16 09:30:23 +0100
0 - 0 - 0 https://twitter.com/jules_su/status/106186588 (...) 104.244.42.129
2018-11-16 09:09:28 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.11
2018-11-16 08:16:10 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.75
2018-11-16 07:38:06 +0100
0 - 0 - 0 https://t.co/AceckE7zkb 199.16.156.11
2018-11-16 03:30:53 +0100
0 - 2 - 3 https://t.co/NrfzRDmyca 199.16.156.75
2018-11-15 19:42:54 +0100
0 - 1 - 4 t.co/NrfzRDmyca 199.16.156.11
2018-11-15 19:20:01 +0100
0 - 1 - 4 https://t.co/NrfzRDmyca 199.16.156.75
2018-11-15 17:50:59 +0100
0 - 0 - 0 https://twitter.com/MaryCos82251712 104.244.42.65
2018-11-15 17:47:29 +0100
0 - 0 - 0 https://twitter.com/SuperBo97020009 104.244.42.193

Last 10 reports on domain: t.co

Date UQ / IDS / BL URL IP
2018-11-16 09:31:08 +0100
0 - 0 - 0 t.co 199.16.156.11
2018-11-16 09:09:28 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.11
2018-11-16 08:16:10 +0100
0 - 0 - 0 t.co/AceckE7zkb 199.16.156.75
2018-11-16 07:38:06 +0100
0 - 0 - 0 https://t.co/AceckE7zkb 199.16.156.11
2018-11-16 03:30:53 +0100
0 - 2 - 3 https://t.co/NrfzRDmyca 199.16.156.75
2018-11-15 19:42:54 +0100
0 - 1 - 4 t.co/NrfzRDmyca 199.16.156.11
2018-11-15 19:20:01 +0100
0 - 1 - 4 https://t.co/NrfzRDmyca 199.16.156.75
2018-11-15 12:52:50 +0100
0 - 0 - 0 hxxps://t.co/xnWoOlYndv 199.16.156.75
2018-11-15 00:45:51 +0100
0 - 0 - 0 https://t.co/gzijSBKKca 199.16.156.11
2018-11-14 18:02:07 +0100
0 - 3 - 0 https://t.co/4rmTF2QXaz 199.16.156.11


JavaScript

Executed Scripts (1)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (10)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=157750
Date: Fri, 09 Nov 2018 18:38:36 GMT
Etag: "5be5746e-1d7"
Expires: Sun, 11 Nov 2018 14:27:46 GMT
Last-Modified: Fri, 09 Nov 2018 11:50:06 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    082268b7774806cab628803dca723226
Sha1:   c139c315d4861774619d53755dd54482017f6ad7
Sha256: 7ba7f23e457168073e163126bced6e1a68070c2b6c332c81b9c5aea45a26f01c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=157600
Date: Fri, 09 Nov 2018 18:38:36 GMT
Etag: "5be58988-1d7"
Expires: Sun, 11 Nov 2018 14:25:16 GMT
Last-Modified: Fri, 09 Nov 2018 13:20:08 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ae46e673351352bed8fd6b4f39166864
Sha1:   2ae2728ee72e586cbc3f360e261ed71d654bed2d
Sha256: 8ac9335d04b089449f7e414b1602928bfb0bbf22d2558c0de0d41be9fee2dbe0
                                        
                                            GET /3j3HVuKmhS HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         199.16.156.11
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: private,max-age=300
Content-Encoding: gzip
Content-Length: 196
content-security-policy: referrer always;
Date: Fri, 09 Nov 2018 18:38:37 GMT
Expires: Fri, 09 Nov 2018 18:43:37 GMT
perf: 6
referrer-policy: unsafe-url
Server: tsa_b
Set-Cookie: muc=a82b28e5-cc91-43f3-8bc4-d21de66769eb; Expires=Sun, 08 Nov 2020 18:38:37 GMT; Domain=t.co
strict-transport-security: max-age=0
Vary: Origin
x-connection-hash: 99018f8a76431f48b5edb1e29e2aabb7
x-response-time: 55
x-transaction-id: 00c670d500b2fd7d
x-xss-protection: 1; mode=block; report=https://twitter.com/i/xss_report


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   196
Md5:    e97dedcaffec92d827a081a345c09832
Sha1:   93b385b597160505db5ef5856ae7a2a309af06a9
Sha256: 52eab91bc77840e7756b87378e19ddc2aaeacc42270ef40e4f01c5d6c3422a06
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: muc=a82b28e5-cc91-43f3-8bc4-d21de66769eb

                                         
                                         199.16.156.11
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Content-Length: 1150
Date: Fri, 09 Nov 2018 18:38:37 GMT
Server: tsa_b
strict-transport-security: max-age=0
x-connection-hash: 99018f8a76431f48b5edb1e29e2aabb7
x-response-time: 4


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    630d203cdeba06df4c0e289c8c8094f6
Sha1:   eee14e8a36b0512c12ba26c0516b4553618dea36
Sha256: bbce71345828a27c5572637dbe88a3dd1e065266066600c8a841985588bf2902
                                        
                                            GET /2Sk3XQn?000 HTTP/1.1 
Host: bit.ly
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.199.248.10
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Server: nginx
Date: Fri, 09 Nov 2018 18:38:37 GMT
Content-Length: 131
Connection: keep-alive
Cache-Control: private, max-age=90
Location: http://www.tshasnaf.ir/fa/images/link/CC?000
Set-Cookie: _bit=ia9iCB-9853feaf4e0da260fd-00N; Domain=bit.ly; Expires=Wed, 08 May 2019 18:38:37 GMT


--- Additional Info ---
Magic:  HTML document text
Size:   131
Md5:    db5797e50f04b84a299995bba198ff5c
Sha1:   af84b663efe0f759a7dcb319342f97b2b4aab3eb
Sha256: 592e343bb5c66628ec56e701cdff321ff0fdf1a1d53a2262024349e9c71c359e
                                        
                                            GET /fa/images/link/CC?000 HTTP/1.1 
Host: www.tshasnaf.ir
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.49.84.27
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 09 Nov 2018 18:38:38 GMT
Server: Apache/2
Location: http://www.tshasnaf.ir/fa/images/link/CC/?000
Content-Length: 253
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   253
Md5:    1b95dd58ace4052caf1cd00fdb594a5a
Sha1:   69730ce6a106d5c30ef66f885ed4c6cd94230d48
Sha256: a11a7562541ec9f55b8deef9c061d55dd91de0ef63d2fa73751361b39de2b515

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /fa/images/link/CC/?000 HTTP/1.1 
Host: www.tshasnaf.ir
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.49.84.27
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 09 Nov 2018 18:38:38 GMT
Server: Apache/2
Vary: User-Agent
Content-Length: 0
Keep-Alive: timeout=2, max=99
Connection: Keep-Alive


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.tshasnaf.ir
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.49.84.27
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 09 Nov 2018 18:38:38 GMT
Server: Apache/2
Content-Length: 328
Keep-Alive: timeout=2, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   328
Md5:    301fa7ceb5b3c291d4bbeee953048686
Sha1:   758d921efd60d4e9f0f6d77648ccc500c8611fea
Sha256: 6b62a3658ad247e8f30d3e9f35da5e00ffac1ea09785bd1f0a9830f659cf01da
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: t.co
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: muc=a82b28e5-cc91-43f3-8bc4-d21de66769eb

                                         
                                         199.16.156.11
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Content-Length: 1150
Date: Fri, 09 Nov 2018 18:38:40 GMT
Server: tsa_b
strict-transport-security: max-age=0
x-connection-hash: 99018f8a76431f48b5edb1e29e2aabb7
x-response-time: 4


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    630d203cdeba06df4c0e289c8c8094f6
Sha1:   eee14e8a36b0512c12ba26c0516b4553618dea36
Sha256: bbce71345828a27c5572637dbe88a3dd1e065266066600c8a841985588bf2902
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.tshasnaf.ir
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         185.49.84.27
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 09 Nov 2018 18:38:40 GMT
Server: Apache/2
Content-Length: 328
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   328
Md5:    301fa7ceb5b3c291d4bbeee953048686
Sha1:   758d921efd60d4e9f0f6d77648ccc500c8611fea
Sha256: 6b62a3658ad247e8f30d3e9f35da5e00ffac1ea09785bd1f0a9830f659cf01da