Overview

URLddl3.data.hu/get/391145/10378626/injekku_wuz.exe
IP217.65.97.3
ASNAS5483 Magyar Telekom Plc.
Location Hungary
Report completed2017-03-21 03:00:54 CET
StatusLoading report..
urlQuery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Referer
Pool
Access Levelpublic


Intrusion Detection Systems

Snort /w Sourcefire VRT No alerts detected
Suricata /w Emerging Threats Pro No alerts detected


Blacklists

Fortinet's Web Filter / fortiguard.com
Added / Verified Severity Host Comment
2017-03-212ddl3.data.hu/get/391145/10378626/injekku_wuz.exeMalware
MDL / malwaredomainlist.com No alerts detected
DNS-BH / malwaredomains.com No alerts detected
mnemonic secure DNS / mnemonic.no No alerts detected
OpenPhish / openphish.com No alerts detected
PhishTank / phishtank.com No alerts detected
Spamhaus DBL / spamhaus.org No alerts detected


Files Captured



Recent reports on same IP/ASN/Domain

Last 6 reports on IP: 217.65.97.3

Date UQ / IDS / BL URL IP
2017-04-24 16:05:390 - 0 - 1ddl3.data.hu/get/0/9649871/dofail.exe217.65.97.3
2017-04-24 16:05:340 - 0 - 1ddl3.data.hu/get/0/10044918/win32.exe217.65.97.3
2017-04-24 16:05:300 - 0 - 1ddl3.data.hu/get/0/10103494/newaolc.exe217.65.97.3
2017-04-24 15:38:350 - 0 - 1ddl3.data.hu/get/0/9663624/plugin.exe217.65.97.3
2017-04-24 15:38:300 - 0 - 1ddl3.data.hu/get/0/10154890/idm_crack.exe217.65.97.3
2017-04-24 12:12:230 - 0 - 1ddl3.data.hu/get/338673/10366668/Crack.exe217.65.97.3

Last 6 reports on ASN: AS5483 Magyar Telekom Plc.

Date UQ / IDS / BL URL IP
2017-04-24 22:58:330 - 0 - 14www.fotovelence.hu/index.html?_escaped_fragment_=/page_Home62.100.255.7
2017-04-24 19:59:440 - 0 - 0217.65.97.33217.65.97.33
2017-04-24 18:02:520 - 0 - 1bgyarmatplebania.hu/wp-content/languages/cc/2def51914499c4e55e9fc1cf84e47b2b/websc-success.php217.65.97.118
2017-04-24 17:42:070 - 0 - 2fidesz.sopron.hu/wp-content/uploads/espace-freemobile.fr/0f48ez4f8ez4f8ze4f8ezf4ez80f4ezf8ez0f4 (...)195.228.124.80
2017-04-24 16:47:480 - 0 - 1ddl2.data.hu/get/357598/10393749/W2-Prema-Hair_.pdf.jar217.65.97.52
2017-04-24 16:44:280 - 0 - 1letoltes.szoftverbazis.hu/c4BoWDu9FSd0Tm-Od3kuGQ/1459002641/utorrent-345/uTorrent.exe46.107.16.50

Last 6 reports on domain: ddl3.data.hu

Date UQ / IDS / BL URL IP
2017-04-24 16:05:390 - 0 - 1ddl3.data.hu/get/0/9663624/plugin.exe217.65.97.62
2017-04-24 16:05:390 - 0 - 1ddl3.data.hu/get/0/9649871/dofail.exe217.65.97.3
2017-04-24 16:05:370 - 0 - 1ddl3.data.hu/get/0/9640485/vuiltforce.exe217.65.97.63
2017-04-24 16:05:370 - 0 - 1ddl3.data.hu/get/0/10154890/idm_crack.exe217.65.97.63
2017-04-24 16:05:340 - 0 - 1ddl3.data.hu/get/0/10091659/mbnc.exe217.65.97.62
2017-04-24 16:05:340 - 0 - 1ddl3.data.hu/get/0/10044918/win32.exe217.65.97.3



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
GET /get/391145/10378626/injekku_wuz.exe HTTP/1.1

Host: ddl3.data.hu

User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/4.0; InfoPath.2; SV1; .NET CLR 2.0.50727; WOW64)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
 217.65.97.63
HTTP/1.1 503 Service Temporarily Unavailable
Content-Type: text/html
Server: nginx
Date: Tue, 21 Mar 2017 01:57:56 GMT
Content-Length: 608
Connection: keep-alive
Content-Disposition: attachment; filename=injekku_wuz.exe