Overview

URL ctmuk.ml/
IP31.220.2.120
ASNAS199636 Esecurity S.A.
Location Belize
Report completed2019-06-10 03:30:58 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2019-06-10 03:30:26 CEST 2 Client IP  Internal IP ET INFO DNS Query for Suspicious .ml Domain


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 31.220.2.120

Date UQ / IDS / BL URL IP
2019-06-30 19:46:29 +0200
0 - 0 - 0 www.dreammodels.biz/ 31.220.2.120
2019-06-09 15:57:18 +0200
0 - 0 - 2 jedran.net/googledrivedoc/googledrivedocument (...) 31.220.2.120
2019-05-31 06:22:22 +0200
0 - 0 - 2 zogabox.com/transfermoney/Sign%20in%20to%20yo (...) 31.220.2.120
2019-05-31 05:15:49 +0200
0 - 0 - 2 zogabox.com/transfermoney/Sign%20in%20to%20yo (...) 31.220.2.120
2019-05-31 04:59:41 +0200
0 - 0 - 2 zogabox.com/transfermoney/Sign%20in%20to%20yo (...) 31.220.2.120
2019-05-31 02:48:23 +0200
0 - 0 - 2 zogabox.com/shujuku 31.220.2.120
2019-05-14 22:18:16 +0200
0 - 0 - 1 icloud.com.appleid.com-find-my-iphone.support/ 31.220.2.120
2019-04-19 07:18:12 +0200
4 - 0 - 2 fredlyfhs.gq/ltdon/nismore/office.php 31.220.2.120
2019-04-14 03:25:49 +0200
0 - 0 - 2 https://lmvus.com/don-chi/54/00889_4e6277839.doc 31.220.2.120
2019-04-08 13:47:52 +0200
0 - 0 - 3 theartconcept.com/ 31.220.2.120

Last 10 reports on ASN: AS199636 Esecurity S.A.

Date UQ / IDS / BL URL IP
2019-06-30 19:46:29 +0200
0 - 0 - 0 www.dreammodels.biz/ 31.220.2.120
2019-06-30 01:17:27 +0200
0 - 1 - 0 180chan.al 198.144.121.148
2019-06-25 23:00:39 +0200
0 - 0 - 1 microsoftonline.com.outlook.webversion4880983 (...) 31.220.3.228
2019-06-25 18:28:59 +0200
0 - 0 - 0 https://northerntrustglobalplc.com/index.php/ (...) 31.220.3.10
2019-06-25 13:42:23 +0200
3 - 0 - 0 kanaletshqiptare.ddns.net 31.220.3.91
2019-06-21 01:42:13 +0200
0 - 1 - 1 155chan.gr 198.144.121.148
2019-06-16 06:03:25 +0200
0 - 1 - 0 144chan.vn 198.144.121.148
2019-06-12 00:59:54 +0200
0 - 0 - 0 tv.pkcast.com/ 31.220.0.82
2019-06-10 03:53:42 +0200
0 - 1 - 0 https://goldentexbd.ga/ 31.220.2.165
2019-06-10 03:53:37 +0200
0 - 2 - 0 https://goldentexbd.ga/eftmx/nobody@mycraftma (...) 31.220.2.165

No other reports on domain: ctmuk.ml



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (7)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: ctmuk.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         31.220.2.120
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Content-Length: 593
Date: Mon, 10 Jun 2019 01:30:16 GMT
Server: LiteSpeed
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Location: http://ctmuk.ml/cgi-sys/suspendedpage.cgi
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   593
Md5:    ec4fc20523a299bbfed48d1cffbf79d0
Sha1:   a615465c75b2e50a4a967a76501ce1809f5d8a36
Sha256: 06508a8401970c6ffbd37222af797b19d6f968df5da292286260b1ee6724570c
                                        
                                            GET /releases/v5.0.6/css/all.css HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://ctmuk.ml/cgi-sys/suspendedpage.cgi

                                         
                                         23.111.9.35
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Mon, 10 Jun 2019 01:30:27 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Last-Modified: Thu, 25 Jan 2018 22:27:35 GMT
Etag: W/"42eaa52604673b64d6b356c2fd7f87e3"
Cache-Control: max-age=31556926
Server: NetDNA-cache/2.2
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
X-Cache: HIT
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   8699
Md5:    f7bb9422036baf1180aafb1649629220
Sha1:   5e12587146acc05164d0d7681a72f7090c9696b0
Sha256: 47914a1a5b571f1990053dee1902c7c736960776aed98c1e39a3e5d499fc6448
                                        
                                            GET /releases/v5.0.6/webfonts/fa-solid-900.woff HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://use.fontawesome.com/releases/v5.0.6/css/all.css
Origin: http://ctmuk.ml

                                         
                                         23.111.9.35
HTTP/1.1 200 OK
Content-Type: application/font-woff
                                        
Date: Mon, 10 Jun 2019 01:30:28 GMT
Content-Length: 48704
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET
Access-Control-Max-Age: 3000
Last-Modified: Thu, 25 Jan 2018 22:27:58 GMT
Etag: "c9a328cc89d13b8959e710d82b4b40d1"
Cache-Control: max-age=31556926
Server: NetDNA-cache/2.2
Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
X-Cache: HIT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  data
Size:   48704
Md5:    c9a328cc89d13b8959e710d82b4b40d1
Sha1:   11bfdbfdc598ac2adf2cfed69ce4a133dbbbf450
Sha256: 6f43ff9f2fb98cc65e18f73ee16951bacfb055f76e68e06f7d91989fd770fa71
                                        
                                            GET /cgi-sys/suspendedpage.cgi HTTP/1.1 
Host: ctmuk.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         31.220.2.120
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 10 Jun 2019 01:30:23 GMT
Server: LiteSpeed
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4252
Md5:    123250590830489362f7077037918ae9
Sha1:   e7c286dabe3a58dcf838a0e2fddcfd93b45c4fa9
Sha256: d75375af8ca51d4c6b25c34011230ecbb84285237927bbee6a9dfc5a54beb2ee
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ctmuk.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         31.220.2.120
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Content-Length: 593
Date: Mon, 10 Jun 2019 01:30:24 GMT
Server: LiteSpeed
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Location: http://ctmuk.ml/cgi-sys/suspendedpage.cgi
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   593
Md5:    ec4fc20523a299bbfed48d1cffbf79d0
Sha1:   a615465c75b2e50a4a967a76501ce1809f5d8a36
Sha256: 06508a8401970c6ffbd37222af797b19d6f968df5da292286260b1ee6724570c
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ctmuk.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         31.220.2.120
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Content-Length: 593
Date: Mon, 10 Jun 2019 01:30:27 GMT
Server: LiteSpeed
Cache-Control: no-cache, no-store, must-revalidate, max-age=0
Location: http://ctmuk.ml/cgi-sys/suspendedpage.cgi
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   593
Md5:    ec4fc20523a299bbfed48d1cffbf79d0
Sha1:   a615465c75b2e50a4a967a76501ce1809f5d8a36
Sha256: 06508a8401970c6ffbd37222af797b19d6f968df5da292286260b1ee6724570c
                                        
                                            GET /cgi-sys/suspendedpage.cgi HTTP/1.1 
Host: ctmuk.ml
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         31.220.2.120
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Transfer-Encoding: chunked
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 10 Jun 2019 01:30:28 GMT
Server: LiteSpeed
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4252
Md5:    123250590830489362f7077037918ae9
Sha1:   e7c286dabe3a58dcf838a0e2fddcfd93b45c4fa9
Sha256: d75375af8ca51d4c6b25c34011230ecbb84285237927bbee6a9dfc5a54beb2ee