urlquery.net - URL scanner

Overview

URL	downloadcenter.samsung.com/content/SW/201708/20170828104208391/SideSync_4.7.5.181.exe
IP	91.135.34.120
ASN	AS3307 Broadnet AS
Location	Norway
Report completed	2018-07-13 05:10:35 CEST
Status	Loading report..
urlQuery Alerts	No alerts detected

Settings

UserAgent	Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level

Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2018-07-13 05:10:02 CEST	1	91.135.34.88	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Blacklists

MDL	No alerts detected
OpenPhish	No alerts detected
PhishTank	No alerts detected
Fortinet's Web Filter	No alerts detected
DNS-BH	No alerts detected
mnemonic secure dns	No alerts detected

Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 91.135.34.120

Date	UQ / IDS / BL	URL	IP
2018-11-13 20:27:53 +0100	0 - 0 - 0	weather.service.msn.com/data.aspx?wealocation (...)	91.135.34.120
2018-11-08 11:53:06 +0100	0 - 1 - 0	downloadcenter.samsung.com/content/DR/200912/ (...)	91.135.34.120
2018-11-07 22:12:56 +0100	0 - 0 - 0	images.go.insidelpl.com/EloquaImages/clients/ (...)	91.135.34.120
2018-10-26 19:03:30 +0200	0 - 0 - 0	weather.service.msn.com/data.aspx?wealocation (...)	91.135.34.120
2018-10-15 20:13:14 +0200	0 - 0 - 0	m.c.lnkd.licdn.com/mpr/mpr/p/5/005/0a9/041/2c (...)	91.135.34.120
2018-10-10 03:48:29 +0200	0 - 0 - 1	install.scantack.net/ud	91.135.34.120
2018-10-05 09:43:11 +0200	0 - 2 - 0	downloadcenter.samsung.com/content/DR/201509/ (...)	91.135.34.120
2018-10-03 23:40:05 +0200	0 - 0 - 0	images.news.providence.org	91.135.34.120
2018-10-02 17:16:10 +0200	0 - 0 - 0	weather.service.msn.com	91.135.34.120
2018-09-24 01:21:45 +0200	0 - 1 - 0	download.tibia.com/Tibia_Setup.exe	91.135.34.120

Last 10 reports on ASN: AS3307 Broadnet AS

Date	UQ / IDS / BL	URL	IP
2018-11-17 16:08:16 +0100	0 - 0 - 0	feather.aviary.com/js/feather.js	91.135.34.97
2018-11-17 09:13:34 +0100	0 - 0 - 0	www.dhl.com/	91.135.34.129
2018-11-17 06:23:00 +0100	0 - 0 - 0	www.basicmetro.com/cNgPLofKrvicreVMeGXDXXNHuc (...)	91.135.34.33
2018-11-17 04:56:48 +0100	0 - 0 - 0	wus-streaming-video-msn-com.akamaized.net/c3a (...)	91.135.34.97
2018-11-17 01:07:08 +0100	0 - 0 - 1	www.defaultinterface.com	91.135.34.25
2018-11-17 00:05:04 +0100	0 - 0 - 0	secure.choicehotels.be	91.135.34.18
2018-11-16 23:42:10 +0100	0 - 0 - 0	click.mail.sho.com	91.135.34.33
2018-11-16 22:51:20 +0100	0 - 0 - 0	vpnhotspot.checkpoint.com	91.135.34.10
2018-11-16 22:50:27 +0100	0 - 0 - 0	choicehotels.be	91.135.34.8
2018-11-16 22:46:23 +0100	0 - 0 - 0	vpnhotspot.checkpoint.com	91.135.34.10

No other reports on domain: samsung.com

JavaScript

Executed Scripts (0)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (1)

Request	Response
GET /content/SW/201708/20170828104208391/SideSync_4.7.5.181.exe HTTP/1.1 Host: downloadcenter.samsung.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-us,en;q=0.5 Accept-Encoding: gzip,deflate Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 Keep-Alive: 115 Connection: keep-alive	91.135.34.88 HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Mon, 28 Aug 2017 01:46:00 GMT Accept-Ranges: bytes Etag: "40a4a8669f1fd31:0" Server: Microsoft-IIS/8.5 X-Powered-By: ASP.NET Content-Length: 49216296 Cache-Control: max-age=86400 Date: Fri, 13 Jul 2018 03:10:02 GMT Connection: keep-alive --- Additional Info --- Alerts: IDS: - ET POLICY PE EXE or DLL Windows file download HTTP

Request

Response

                                        
                                            GET /content/SW/201708/20170828104208391/SideSync_4.7.5.181.exe HTTP/1.1 

                                        
                                            
Host: downloadcenter.samsung.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive

                                         
                                         91.135.34.88

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/octet-stream

                                        

                                        
                                            
Last-Modified: Mon, 28 Aug 2017 01:46:00 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Etag: "40a4a8669f1fd31:0" 

                                        
                                            
Server: Microsoft-IIS/8.5 

                                        
                                            
X-Powered-By: ASP.NET 

                                        
                                            
Content-Length: 49216296 

                                        
                                            
Cache-Control: max-age=86400 

                                        
                                            
Date: Fri, 13 Jul 2018 03:10:02 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            

                                            
                                                
Alerts:

                                                

                                                
                                                
                                                
                                                      IDS:

                                                    
                                                            - ET POLICY PE EXE or DLL Windows file download HTTP