Overview

URL bankof-america-com.mw.lt/
IP54.36.158.41
ASN
Location United States
Report completed2018-11-05 14:02:01 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-05 2 bankof-america-com.mw.lt/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 54.36.158.41

Date UQ / IDS / BL URL IP
2019-01-16 01:47:04 +0100
0 - 0 - 3 cucchat.sextgem.com/blog?__xtblog_block_id=1 54.36.158.41
2018-11-19 04:17:45 +0100
0 - 1 - 0 https://lmodels.sextgem.com/ 54.36.158.41
2018-11-17 13:12:46 +0100
0 - 2 - 0 mp3t.ru/ 54.36.158.41
2018-11-17 09:54:12 +0100
0 - 1 - 0 wq.lt/k2vzK 54.36.158.41
2018-11-15 15:01:08 +0100
0 - 6 - 0 arab-xxx.sextgem.com/ 54.36.158.41
2018-11-15 12:26:56 +0100
0 - 4 - 0 bi3some.sextgem.com/ 54.36.158.41
2018-11-14 14:21:36 +0100
0 - 1 - 0 vuiqua99.wap.sh/hinh-nen/lien-minh-huyen-thoa (...) 54.36.158.41
2018-10-23 05:08:31 +0200
0 - 0 - 1 100x.sextgem.com/bokepindo3gpterbaru/2cowok_1 (...) 54.36.158.41
2018-10-16 17:12:51 +0200
0 - 2 - 0 arab-xxx.sextgem.com/ 54.36.158.41
2018-10-09 16:12:01 +0200
0 - 0 - 0 truyenhot.xtgem.com 54.36.158.41

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-01-16 08:02:33 +0100
0 - 0 - 8 zhaopai020.com/news_11.html 154.223.147.198
2019-01-16 07:58:22 +0100
0 - 0 - 2 https://www.stopdroplol.com/posts/133275-funn (...) 34.206.36.121
2019-01-16 07:57:16 +0100
0 - 0 - 2 owwwc.com/mm/amd32.exe 103.100.209.198
2019-01-16 07:57:11 +0100
0 - 4 - 2 owwwc.com/mm/cpu64.exe 103.100.209.198
2019-01-16 07:56:32 +0100
0 - 1 - 0 xn--czyciochy-x1b.pl/ 137.74.5.38
2019-01-16 07:55:57 +0100
0 - 3 - 0 update.flying-file.com/update/programfiles/fl (...) 143.204.51.155
2019-01-16 07:55:54 +0100
0 - 3 - 0 update.flying-file.com/update/programfiles/fl (...) 143.204.51.155
2019-01-16 07:54:40 +0100
0 - 0 - 20 transportesycementoshidalgo.es/ 51.68.186.22
2019-01-16 07:53:52 +0100
0 - 1 - 0 int-download.ec2.avery.com/Published/ac28c7e3 (...) 143.204.51.179
2019-01-16 07:53:01 +0100
0 - 0 - 2 client.ewc.com.ng/rYMib-pEPr_KS-OlR/Invoice/4 (...) 50.116.92.26

No other reports on domain: mw.lt



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (6)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: bankof-america-com.mw.lt
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.36.158.41
HTTP/1.1 404 Not Found
Content-Type: text/html;charset=UTF-8
                                        
Date: Mon, 05 Nov 2018 13:01:29 GMT
Vary: Host,Accept-Encoding
Content-Encoding: gzip
Content-Length: 1991
Age: 0
X-Cache: MISS
X-Cache-Hits: 0
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1991
Md5:    e69dd7d1fae53b3204fa98575bfb0937
Sha1:   faf4484ed03a2fbaae9c2b19be23e732a0537eb5
Sha256: 70473b4d456a61b1b008c7a694337b59e039dad71c8fcde4955b77cfd7ccaef8

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /images/forum/xtgem-forums.jpg HTTP/1.1 
Host: xtgem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bankof-america-com.mw.lt/

                                         
                                         178.33.123.218
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 05 Nov 2018 12:56:43 GMT
Last-Modified: Mon, 11 Dec 2017 13:05:49 GMT
Etag: "20c8-5601031744540"
Content-Length: 8392
Cache-Control: max-age=2592000
Expires: Wed, 05 Dec 2018 12:56:43 GMT
X-Ngz: 1
Age: 285
X-Cache: HIT
X-Cache-Hits: 179
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8392
Md5:    75241d1cc0fc23106cd2981df56d8026
Sha1:   06a86095dfa45711a3fa3962a48b418bec963c86
Sha256: 12af88849dcd3b09838185efbbaa7eae7231159ace07004afc5793d80378c34f
                                        
                                            GET /images/powered_by_xtgem.png HTTP/1.1 
Host: xtgem.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bankof-america-com.mw.lt/

                                         
                                         178.33.123.218
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Mon, 05 Nov 2018 12:42:36 GMT
Last-Modified: Mon, 11 Dec 2017 13:05:49 GMT
Etag: "28b0-5601031744540"
Content-Length: 10416
Cache-Control: max-age=2592000
Expires: Wed, 05 Dec 2018 12:42:36 GMT
X-Ngz: 1
Age: 1132
X-Cache: HIT
X-Cache-Hits: 129
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  PNG image, 235 x 45, 8-bit/color RGBA, non-interlaced
Size:   10416
Md5:    1d7efb1ea26cd9d98d5d5e6c97a5ba9f
Sha1:   b174180a63db2679e650232dd1351d110d5f7270
Sha256: 4e99adbc172ae5f3d664308a109b0ad623f6f0fc869eb421b58c5e05578495bf
                                        
                                            GET /quant.js HTTP/1.1 
Host: edge.quantserve.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://bankof-america-com.mw.lt/

                                         
                                         35.157.170.79
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Cache-Control: private, no-transform, must-revalidate, max-age=604800
Content-Encoding: gzip
Date: Mon, 05 Nov 2018 13:01:29 GMT
Etag: M0-e2b9884a
Expires: Mon, 12 Nov 2018 13:01:29 GMT
Last-Modified: Mon, 05-Nov-2018 13:01:29 GMT
Server: QS
Vary: Accept-Encoding
Content-Length: 5456
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5456
Md5:    ea55b8aade97737bdb3ac34239afe3e9
Sha1:   5bd3746efdffacbe0a0415d8760167834bb181ee
Sha256: d98cf4549e148788618a1ba008dc66d210d0063608b7c0acdfceb11430dd1579
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bankof-america-com.mw.lt
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.36.158.41
HTTP/1.1 404 Not Found
Content-Type: text/html;charset=UTF-8
                                        
Date: Mon, 05 Nov 2018 13:01:29 GMT
Vary: Host,Accept-Encoding
Content-Encoding: gzip
Content-Length: 2325
Age: 0
X-Cache: MISS
X-Cache-Hits: 0
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2325
Md5:    3cad4fc15c871b7e9e5e261b297b312c
Sha1:   1889ca97c67f482854bbee7ae7f4798955bb24aa
Sha256: 61179593dda42571bc2e2dd4c6d0658a24af7c2071025e70ab9730909e4ff8d4
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: bankof-america-com.mw.lt
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.36.158.41
HTTP/1.1 404 Not Found
Content-Type: text/html;charset=UTF-8
                                        
Date: Mon, 05 Nov 2018 13:01:29 GMT
Vary: Host,Accept-Encoding
Content-Encoding: gzip
Content-Length: 2325
Age: 2
X-Cache: HIT
X-Cache-Hits: 1
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2325
Md5:    3cad4fc15c871b7e9e5e261b297b312c
Sha1:   1889ca97c67f482854bbee7ae7f4798955bb24aa
Sha256: 61179593dda42571bc2e2dd4c6d0658a24af7c2071025e70ab9730909e4ff8d4