Overview

URL https://baywa-er.com
IP46.21.147.251
ASNAS35017 Swiftway Sp. z o.o.
Location Netherlands
Report completed2019-02-12 08:59:30 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 46.21.147.251

Date UQ / IDS / BL URL IP
2019-05-31 21:33:19 +0200
0 - 0 - 1 sbnk-connect.com/ 46.21.147.251
2019-05-29 22:29:29 +0200
0 - 0 - 1 rivesam.com/auu/yu.exe 46.21.147.251
2019-05-29 21:37:56 +0200
0 - 0 - 1 mailveri.us/ssdff.exe 46.21.147.251
2019-05-28 17:56:56 +0200
0 - 0 - 1 rivesam.com/zz/ASE.exe 46.21.147.251
2019-05-27 03:50:14 +0200
0 - 0 - 1 mailveri.us/oricryt.exe 46.21.147.251
2019-05-25 21:18:54 +0200
0 - 0 - 1 rivesam.com/zimba/azc.exe 46.21.147.251
2019-05-25 19:12:56 +0200
0 - 0 - 1 mailveri.us/warrfq.exe 46.21.147.251
2019-05-25 17:44:57 +0200
0 - 0 - 1 rivesam.com/zimba/AZC.exe 46.21.147.251
2019-05-24 21:42:05 +0200
0 - 0 - 1 rivesam.com/zcds/bf.exe 46.21.147.251
2019-05-24 01:11:16 +0200
0 - 0 - 1 rivesam.com/zakk/ccu.exe 46.21.147.251

Last 10 reports on ASN: AS35017 Swiftway Sp. z o.o.

Date UQ / IDS / BL URL IP
2019-06-30 17:40:16 +0200
0 - 0 - 0 crazy-holiday.biz/ 46.21.146.239
2019-06-30 16:55:29 +0200
0 - 1 - 0 fap18videos.com/ 94.100.24.174
2019-06-30 16:53:52 +0200
0 - 1 - 0 teen18folders.mobi/ 94.100.24.174
2019-06-30 16:47:46 +0200
0 - 1 - 0 teen18forum.mobi/ 94.100.24.174
2019-06-30 16:47:18 +0200
0 - 1 - 0 joyteens.blue/ 94.100.24.174
2019-06-30 16:44:14 +0200
0 - 1 - 0 teenfolder.org/ 94.100.24.174
2019-06-30 16:43:37 +0200
0 - 1 - 0 teen18folders.mobi/ 94.100.24.174
2019-06-30 16:36:45 +0200
0 - 1 - 0 teen18planet.link/ 94.100.24.174
2019-06-30 16:35:47 +0200
0 - 1 - 0 joyteens.blue/ 94.100.24.174
2019-06-30 16:35:17 +0200
0 - 2 - 0 18teens.blue/ 94.100.24.174

No other reports on domain: baywa-er.com



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (7)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 11 Feb 2019 19:26:16 GMT
Etag: 3E8DCC018069B98C9C3B21856CCE22CF0DB70857
X-OCSP-Responder-ID: mcdpcaocsp15
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=559022
Expires: Mon, 18 Feb 2019 19:16:00 GMT
Date: Tue, 12 Feb 2019 07:58:58 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5a0335dbc60e3446160b7d0f92098996
Sha1:   3e8dcc018069b98c9c3b21856cce22cf0db70857
Sha256: 063edcf8361efe8f2887c2240b25a47b41633abc1d294a3f6d3513dfd5807c7b
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 06 Feb 2019 14:40:12 GMT
Etag: AA0238F1BA4F41934F357E3BF161E7C098E0162B
X-OCSP-Responder-ID: mcdpcaocsp4
Content-Length: 728
Cache-Control: public, no-transform, must-revalidate, max-age=109820
Expires: Wed, 13 Feb 2019 14:29:18 GMT
Date: Tue, 12 Feb 2019 07:58:58 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   728
Md5:    8bcc2ea16559751076da84a818470183
Sha1:   aa0238f1ba4f41934f357e3bf161e7c098e0162b
Sha256: 9ad7c1ece2c00a761681254623877197a3e491ddffd6e61d47fcb7a1e9a345a1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         91.135.34.19
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Wed, 06 Feb 2019 14:40:12 GMT
Etag: 97CECF5E00E5BF805971D092FA387A407A8507CC
X-OCSP-Responder-ID: mcdpcaocsp14
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=109861
Expires: Wed, 13 Feb 2019 14:29:59 GMT
Date: Tue, 12 Feb 2019 07:58:58 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a38b2eb6491107f50c1bfa85f7c4f7ec
Sha1:   97cecf5e00e5bf805971d092fa387a407a8507cc
Sha256: 01d2503432e75e74583bb75fc21a33762aa79f02603134bc0ab53479ee9ca2ff
                                        
                                            GET / HTTP/1.1 
Host: baywa-er.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         46.21.147.251
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Powered-By: PHP/5.6.40
Content-Length: 1002
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 12 Feb 2019 07:58:58 GMT
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,39,43,44"
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1002
Md5:    bc0e530d545e3696fc1f900a1ebeb7c8
Sha1:   c211907199245294774158552faa90f46a087786
Sha256: d8e34e535d053b3d17b92c51bd34969e45ddfa66571009dbefe11fc49b28edd3
                                        
                                            GET /js/jquery.min.js HTTP/1.1 
Host: baywa-er.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://baywa-er.com/

                                         
                                         46.21.147.251
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: public, max-age=604800
Expires: Tue, 19 Feb 2019 07:58:58 GMT
Etag: "1538f-5a6fe3ea-ef5bc859d9508d3a;gz"
Last-Modified: Tue, 30 Jan 2018 03:18:02 GMT
Content-Length: 35358
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 12 Feb 2019 07:58:58 GMT
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,39,43,44"
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   35358
Md5:    83a94c0e4dce1975b10bee48bf41267b
Sha1:   8ae39295f64d891e367e49a0ff54e80067085bc9
Sha256: ee39efe9eba01b524accd2ac9af7a458fecce60e1479df06b22dd4be6f6f5d28
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: baywa-er.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         46.21.147.251
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Powered-By: PHP/5.6.40
Content-Length: 1002
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 12 Feb 2019 07:58:58 GMT
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,39,43,44"
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1002
Md5:    bc0e530d545e3696fc1f900a1ebeb7c8
Sha1:   c211907199245294774158552faa90f46a087786
Sha256: d8e34e535d053b3d17b92c51bd34969e45ddfa66571009dbefe11fc49b28edd3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: baywa-er.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         46.21.147.251
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Powered-By: PHP/5.6.40
Content-Length: 1002
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Tue, 12 Feb 2019 07:59:01 GMT
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,39,43,44"
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1002
Md5:    bc0e530d545e3696fc1f900a1ebeb7c8
Sha1:   c211907199245294774158552faa90f46a087786
Sha256: d8e34e535d053b3d17b92c51bd34969e45ddfa66571009dbefe11fc49b28edd3