Overview

URL soo.gd/EC46
IP172.98.74.243
ASN
Location United States
Report completed2018-07-12 21:53:35 CEST
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.98.74.243

Date UQ / IDS / BL URL IP
2018-09-20 22:54:01 +0200
0 - 0 - 0 cutt.us/gajIN 172.98.74.243
2018-09-09 17:10:37 +0200
0 - 0 - 0 cutt.us/5oASK 172.98.74.243
2018-08-10 07:30:24 +0200
0 - 1 - 0 cutt.us/UMvsW 172.98.74.243
2018-07-27 16:57:02 +0200
0 - 0 - 0 cutt.us/fQDGa 172.98.74.243
2018-07-13 01:36:30 +0200
0 - 1 - 1 www.v.ht/docusign 172.98.74.243
2018-07-09 20:23:09 +0200
0 - 0 - 0 cutt.us/cqt88 172.98.74.243
2018-07-09 00:27:52 +0200
0 - 0 - 0 cutt.us/NikoleDnls_erotic-AOJW 172.98.74.243
2018-07-07 20:30:15 +0200
0 - 0 - 0 soo.gd/Nzgp 172.98.74.243
2018-07-06 18:43:08 +0200
0 - 0 - 0 cutt.us 172.98.74.243
2018-07-06 17:52:17 +0200
0 - 1 - 0 cutt.us/wzTm7 172.98.74.243

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2018-09-22 14:49:08 +0200
0 - 0 - 5 digi.coinup.org/nl 52.178.105.179
2018-09-22 14:48:45 +0200
0 - 0 - 5 digi.coinup.org/nl/ 52.178.105.179
2018-09-22 14:47:49 +0200
0 - 0 - 32 danceandlove.com/ 164.132.50.213
2018-09-22 14:47:38 +0200
0 - 0 - 1 bx0311.stream/ 151.106.18.213
2018-09-22 14:46:46 +0200
0 - 0 - 1 www.wathspap.com/rc/86e14b0678?affclick=5ba62 (...) 172.64.139.6
2018-09-22 14:43:26 +0200
0 - 0 - 5 thechampionsleadsupportgroup.com/ 145.239.254.53
2018-09-22 14:40:20 +0200
0 - 0 - 1 www.wathspap.com/rc/6b3b1506f3?affclick=12be3 (...) 172.64.139.6
2018-09-22 14:39:40 +0200
0 - 0 - 1 ads.glispa.com/sw/6438096/CD42685/5ba6318cb57 (...) 52.209.100.241
2018-09-22 14:38:30 +0200
0 - 0 - 1 boost.inkbelief.faith/stub_maker.php?program= (...) 143.204.194.29
2018-09-22 14:33:46 +0200
0 - 0 - 2 www.sharifpost.com/2009/09/ 132.148.50.129

Last 10 reports on domain: soo.gd

Date UQ / IDS / BL URL IP
2018-07-15 10:16:31 +0200
0 - 0 - 0 soo.gd/471588364 104.200.150.207
2018-07-08 23:06:42 +0200
0 - 0 - 1 soo.gd/e8Np 172.98.74.244
2018-07-07 20:30:15 +0200
0 - 0 - 0 soo.gd/Nzgp 172.98.74.243
2018-06-21 00:02:57 +0200
0 - 1 - 0 soo.gd/natalitk 172.98.74.244
2018-06-11 11:25:47 +0200
0 - 1 - 1 soo.gd/vrdZ 104.200.150.207
2018-06-11 07:49:13 +0200
0 - 0 - 1 soo.gd/OLed 172.98.74.243
2018-05-23 09:46:46 +0200
0 - 0 - 0 soo.gd/oWH7 172.98.74.243
2018-05-22 19:14:22 +0200
0 - 0 - 0 soo.gd/zhSD 104.200.150.207
2018-05-22 13:05:58 +0200
0 - 0 - 0 soo.gd/obMi 104.200.150.207
2018-05-21 12:04:32 +0200
0 - 0 - 0 soo.gd/obMi 104.200.150.207


JavaScript

Executed Scripts (7)


Executed Evals (0)


Executed Writes (2)

#1 JavaScript::Write (size: 118, repeated: 1) - SHA256: d468ef24623b800616392d0778b54df32a9c2e7dad408e448a9d0e9dde0bfa5b

                                        < script id = "gpt-impl-0.7669023694308696"
src = "https://securepubads.g.doubleclick.net/gpt/pubads_impl_231.js" > < /script>
                                    

#2 JavaScript::Write (size: 203, repeated: 1) - SHA256: 5f547644529b2725ba3467930a2fc0a53cb6421c5c85801a9c229bb264b3742d

                                        < script src = "https&#58;&#47;&#47;adservice&#46;google&#46;com&#47;adsid&#47;integrator&#46;sync&#46;js&#63;domain&#61;soo&#46;gd" > < /script><script >processGoogleTokenSync({"newToken":"FBS"},5);</script >
                                    


HTTP Transactions (10)


Request Response
                                        
                                            GET /EC46 HTTP/1.1 
Host: soo.gd
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.98.74.243
HTTP/1.1 200 OK
Content-Type: text/html; Charset=UTF-8;charset=UTF-8
                                        
Server: nginx
Date: Thu, 12 Jul 2018 19:53:01 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
I-AM: Gamma
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1340
Md5:    d18d7730780c7e26cf62c2eb1fe34c8d
Sha1:   c6af68d600860afb5f85cdf90abfca32e0671ec9
Sha256: d5e2cb93d9fc65c13584e0caf66d3f892aaf720ce83f81b087c081039ec8c93b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jul 2018 19:53:03 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a714a4e2a3c88790a41a195139c1b49d
Sha1:   6adc5dfe16241a7805c9c97bf636328f71fc8808
Sha256: 3d0afe00e8a2a20ccb4bc5e174464d166391a0e1d2c6a7d4a7497f682ebef6bb
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jul 2018 19:53:03 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    d9d754520ae3340aa37cca6115eee05b
Sha1:   a0320372760d99c762cb2eb4b37f776625ef1b33
Sha256: 7dc8284c51c9a38dc1bf03bd28857ea5336e8f5c564eddbb1c9082ee43c93738
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         216.58.211.14
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 12 Jul 2018 19:53:03 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    85519c556ff2db961ac935a8077cc90f
Sha1:   35f3e7a683011b58158154e7ff579e4674a6590f
Sha256: d3e7bd7617d6a9f828bc4a680978d72ed4538def0b49d0061f84af58f7cb5294
                                        
                                            GET /tag/js/gpt.js HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://soo.gd/EC46

                                         
                                         172.217.20.34
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Date: Thu, 12 Jul 2018 19:53:03 GMT
Expires: Thu, 12 Jul 2018 19:53:03 GMT
Cache-Control: private, max-age=900, stale-while-revalidate=3600
Etag: "5 / 270 of 1000 / last-modified: 1531424699"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   7861
Md5:    e349aaf6e689596a492844a67676b0c3
Sha1:   cb6ffdde4b9007e87c18078e45f7d15d3d6acf5c
Sha256: 4dcb098b527ba8a97ee82fb4b53b7aaf8690e4ce8af4d4a9e2a8bdb9d132da32
                                        
                                            GET /L3AkqG HTTP/1.1 
Host: goo.gl
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://soo.gd/EC46

                                         
                                         216.58.211.14
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 12 Jul 2018 19:53:03 GMT
Location: https://up.top4top.net/images/spacer.gif
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   184
Md5:    6bb048a6e238eb54ea57f9dedd4d3be7
Sha1:   14989a123ca14065b1b5f876e212a670f6e01886
Sha256: b78e284601dce7c2a1e0e12fd41719e7a71cdbb2adbfcead97b703fc7212b5d8
                                        
                                            GET /gpt/pubads_impl_231.js HTTP/1.1 
Host: securepubads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://soo.gd/EC46

                                         
                                         216.58.211.2
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Timing-Allow-Origin: *
Date: Thu, 12 Jul 2018 19:53:03 GMT
Expires: Thu, 12 Jul 2018 19:53:03 GMT
Cache-Control: private, immutable, max-age=31536000
Last-Modified: Fri, 06 Jul 2018 21:28:59 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="44,43,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   62603
Md5:    7e4b8ab9318697e251cb53a4b79a3002
Sha1:   c299b4328dfd102447d2acd41bdb460d3428b459
Sha256: 3e235d49514807ecc8e6934db1f080c2a968896cb18005ad71835c67d8dbde10
                                        
                                            GET /adsid/integrator.sync.js?domain=soo.gd HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://soo.gd/EC46

                                         
                                         172.217.20.34
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Thu, 12 Jul 2018 19:53:04 GMT
Server: cafe
X-XSS-Protection: 1; mode=block
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="43,42,41,39,35",quic=":443"; ma=2592000; v="43,42,41,39,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   108
Md5:    352b0bb21ed997f96d40b76f5a81d5d0
Sha1:   4f5d9959999e408d96e0c26962157c1dece1ef36
Sha256: e74389027b4280ace10e986c5506995a4d2ccecd6ca14caa3a2eb05c28ac8d6b
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: soo.gd
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.98.74.243
HTTP/1.1 200 OK
Content-Type: image/vnd.microsoft.icon
                                        
Server: nginx
Date: Thu, 12 Jul 2018 19:53:05 GMT
Content-Length: 1150
Connection: keep-alive
Last-Modified: Fri, 19 Jul 2013 04:26:11 GMT
Etag: "9032eb-47e-4e1d5b9f57ec0"
Accept-Ranges: bytes
I-AM: Gamma


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon
Size:   1150
Md5:    5b495582f38ceefa767531b3170a7642
Sha1:   f38ea91c80d545c8172e4afd252d4a354f89d982
Sha256: 0fb9ebe8de92599ec4c2221ea53be61240e7283b3fc9996b48db4701e1319627
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: soo.gd
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         0.0.0.0
                                        


--- Additional Info ---