Overview

URL gurmekan.net/Scan072.zip
IP94.73.151.62
ASNAS34619 CIZGI TELEKOMUNIKASYON ANONIM SIRKETI
Location Turkey
Report completed2018-12-28 09:30:01 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-28 2 gurmekan.net/Scan072.zip Malware
DNS-BH  No alerts detected
mnemonic secure dns
Added / Verified Severity Host Comment
2018-12-27 2 gurmekan.net Blacklisted


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 94.73.151.62

Date UQ / IDS / BL URL IP
2018-12-29 00:42:54 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 08:55:23 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 07:43:49 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 03:33:09 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 00:54:35 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-27 23:56:39 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-06 06:56:39 +0100
 0 - 0 - 31 merichome.com/system/logs/7647gd7b43f43.exe 94.73.151.62
2018-08-09 13:01:33 +0200
 0 - 0 - 19 merichome.com/ 94.73.151.62
2018-05-28 22:09:13 +0200
 0 - 0 - 2 polatciftcilerresidence.com/index.php/library (...) 94.73.151.62
2018-05-28 22:08:57 +0200
 0 - 0 - 2 polatciftcilerresidence.com/index.php/library (...) 94.73.151.62

Last 10 reports on ASN: AS34619 CIZGI TELEKOMUNIKASYON ANONIM SIRKETI

Date UQ / IDS / BL URL IP
2019-02-20 17:41:53 +0100
 0 - 0 - 20 palyacomerkezi.net/Invoice-Number-81721248 89.19.30.126
2019-02-20 17:26:12 +0100
 0 - 0 - 2 marmaraeskrim.com/wp-content/plugins/wpopal-t (...) 94.73.147.76
2019-02-20 12:02:01 +0100
 0 - 0 - 2 teknovia.com.tr/ACCOUNT/Invoice-7296315 94.73.150.129
2019-02-19 20:33:55 +0100
 0 - 0 - 1 www.beraysenbas.com/alert/zakladki-skorost-v- (...) 94.73.151.70
2019-02-19 18:02:18 +0100
 0 - 0 - 2 markerdunyasi.com/scan/Invoice-number-8512319828/ 94.73.149.212
2019-02-19 17:51:53 +0100
 0 - 0 - 1 kopuzlar.com/style/css/en/ex/index.htm 94.73.151.44
2019-02-19 17:44:43 +0100
 0 - 0 - 2 denizsulama.com/hz.exe 94.73.151.178
2019-02-19 16:36:35 +0100
 0 - 0 - 0 pby.com.tr 94.73.146.152
2019-02-19 12:35:13 +0100
 0 - 0 - 1 https://www.hnzyapi.com/ 94.73.151.38
2019-02-19 05:46:12 +0100
 0 - 0 - 6 goksuemlakadana.com/555 94.73.148.138

Last 2 reports on domain: gurmekan.net

Date UQ / IDS / BL URL IP
2018-12-28 00:54:35 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-27 23:56:39 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
 
                                        
                                            GET /Scan072.zip HTTP/1.1 

                                        
                                            
Host: gurmekan.net 

                                        
                                    
                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                    
                                         
                                         94.73.151.62

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/zip 

                                        
                                    
                                        

                                        
                                            
Last-Modified: Tue, 25 Dec 2018 05:57:54 GMT 

                                        
                                            
Content-Length: 3175 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Date: Fri, 28 Dec 2018 08:29:27 GMT 

                                        
                                            
Server: LiteSpeed 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        

                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Zip archive data, at least v2.0 to extract

                                                Size:   3175

                                                Md5:    e79a36acf50d6006fd57d78111b28482

                                                Sha1:   5d233831c53633ef4c4e622081f40931bbc71b2c

                                                Sha256: c641b9adebe61cabf44b2ceeeb5fcaa11442134b3b4638c8ec464eaa8821e367

                                            

                                            
                                                
Alerts:

                                                

                                                
                                                      Blacklists:

                                                    
                                                            - fortinet: Malware

                                                    
                                                            - mnemonic_dns: Blacklisted