Overview

URLajmanbusinesssetup.com/me/workNEW2017K.exe
IP198.54.116.117
ASNUnknown
Location United States
Report completed2017-01-12 11:15:34 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com No alerts detected
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no
Added / Verified Severity Host Comment
2017-01-122ajmanbusinesssetup.comBlacklisted
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 198.54.116.117

Date UQ / IDS / BL URL IP
2017-02-18 13:59:390 - 0 - 79ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117
2017-02-07 20:02:420 - 0 - 2ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117
2017-02-06 20:55:280 - 0 - 51ajmanbusinesssetup.com/me/KWHHOT.exe198.54.116.117
2017-02-04 00:02:020 - 0 - 51ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117
2017-02-03 15:26:550 - 0 - 51ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117
2017-02-03 12:25:210 - 0 - 51ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117

Last 6 reports on ASN: Unknown

Date UQ / IDS / BL URL IP
2017-02-21 08:45:010 - 0 - 0emailadvertentie.net/ZSEKCLX8YwOkrOGh/unsubscribe81.171.24.156
2017-02-21 08:44:400 - 0 - 1upgradelive.upgradepcsafesystemset4now.info/?pcl=7a--wJTk8omhhyZLHpMQk1JNg4t-9ge0N3KpBxTxVkI.51.15.145.148
2017-02-21 08:42:060 - 0 - 1stats.devmaxcloud.com/apps.gif?action=update52.216.0.202
2017-02-21 08:41:020 - 0 - 0www.facebook.comhttps:///Fifty-Shades-Darker-Online-2017-Movie-405373773148064/157.240.2.35
2017-02-21 08:41:020 - 0 - 0www.facebook.comhttps:///Fifty-Shades-Darker-Online-2017-Movie-405373773148064/157.240.2.35
2017-02-21 08:40:020 - 0 - 0newsindustryde.com/login/link.php?M=61716&N=84&L=22&F=H138.68.53.233

Last 6 reports on domain: ajmanbusinesssetup.com

Date UQ / IDS / BL URL IP
2017-02-18 13:59:390 - 0 - 79ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117
2017-02-07 20:02:420 - 0 - 2ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117
2017-02-06 20:55:280 - 0 - 51ajmanbusinesssetup.com/me/KWHHOT.exe198.54.116.117
2017-02-04 00:02:020 - 0 - 51ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117
2017-02-03 15:26:550 - 0 - 51ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117
2017-02-03 12:25:210 - 0 - 51ajmanbusinesssetup.com/21/JGZNXQ.exe198.54.116.117



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
GET /me/workNEW2017K.exe HTTP/1.1

Host: ajmanbusinesssetup.com

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; .NET CLR 1.1.4322)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 198.54.116.117
HTTP/1.1 200 OK
Content-Type: application/x-msdownload
Date: Thu, 12 Jan 2017 10:14:51 GMT
Server: Apache
Last-Modified: Wed, 11 Jan 2017 07:49:25 GMT
Accept-Ranges: bytes
Content-Length: 872226