Overview

URL gurmekan.net/Scan072.zip
IP94.73.151.62
ASNAS34619 CIZGI TELEKOMUNIKASYON ANONIM SIRKETI
Location Turkey
Report completed2018-12-28 09:30:01 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-28 2 gurmekan.net/Scan072.zip Malware
DNS-BH  No alerts detected
mnemonic secure dns
Added / Verified Severity Host Comment
2018-12-27 2 gurmekan.net Blacklisted


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 94.73.151.62

Date UQ / IDS / BL URL IP
2019-03-31 03:31:33 +0200
 0 - 0 - 1 almanatravel.com/ 94.73.151.62
2019-03-22 17:59:24 +0100
 0 - 0 - 1 demardistanbul.com/libraries/legacy/request/A (...) 94.73.151.62
2018-12-29 00:42:54 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 08:55:23 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 07:43:49 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 03:33:09 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 00:54:35 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-27 23:56:39 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-06 06:56:39 +0100
 0 - 0 - 31 merichome.com/system/logs/7647gd7b43f43.exe 94.73.151.62
2018-08-09 13:01:33 +0200
 0 - 0 - 19 merichome.com/ 94.73.151.62

Last 10 reports on ASN: AS34619 CIZGI TELEKOMUNIKASYON ANONIM SIRKETI

Date UQ / IDS / BL URL IP
2019-04-23 13:00:03 +0200
 0 - 0 - 6 moiselektronik.com/css/ayVwW-HS9rtXdqI5gbMXN_ (...) 94.73.144.214
2019-04-23 09:38:23 +0200
 0 - 0 - 13 acbilgisayar.com.tr/ 85.159.66.106
2019-04-23 08:01:30 +0200
 0 - 0 - 1 missbelt-turkiye.site/cdn-cgi/scripts/d07b147 (...) 94.73.146.109
2019-04-23 07:56:04 +0200
 0 - 0 - 33 3dcnc.net/portfolio-view/kapaklar 94.73.146.81
2019-04-23 07:53:45 +0200
 0 - 0 - 1 yolcuinsaatkesan.com/PqFKD-YfS2COvoO3tsRNB_jA (...) 94.73.149.212
2019-04-22 19:08:42 +0200
 0 - 0 - 14 ordeelektrik.com/index.php/index.php/index.ph (...) 94.73.147.2
2019-04-22 15:31:37 +0200
 0 - 0 - 1 https://www.isyeriacilisi.com/anahtar-kelime/ (...) 94.73.150.184
2019-04-22 13:37:41 +0200
 0 - 0 - 0 www.odemistenerede.com 94.73.145.234
2019-04-22 11:36:26 +0200
 0 - 0 - 14 melihtorlak.com/2010/09/20/how-clay-matthews- (...) 94.73.150.82
2019-04-22 07:14:14 +0200
 0 - 0 - 35 www.majoristanbul.com/ 94.73.147.19

Last 2 reports on domain: gurmekan.net

Date UQ / IDS / BL URL IP
2018-12-28 00:54:35 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-27 23:56:39 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
 
                                        
                                            GET /Scan072.zip HTTP/1.1 

                                        
                                            
Host: gurmekan.net 

                                        
                                    
                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                    
                                         
                                         94.73.151.62

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/zip 

                                        
                                    
                                        

                                        
                                            
Last-Modified: Tue, 25 Dec 2018 05:57:54 GMT 

                                        
                                            
Content-Length: 3175 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Date: Fri, 28 Dec 2018 08:29:27 GMT 

                                        
                                            
Server: LiteSpeed 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        

                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Zip archive data, at least v2.0 to extract

                                                Size:   3175

                                                Md5:    e79a36acf50d6006fd57d78111b28482

                                                Sha1:   5d233831c53633ef4c4e622081f40931bbc71b2c

                                                Sha256: c641b9adebe61cabf44b2ceeeb5fcaa11442134b3b4638c8ec464eaa8821e367

                                            

                                            
                                                
Alerts:

                                                

                                                
                                                      Blacklists:

                                                    
                                                            - fortinet: Malware

                                                    
                                                            - mnemonic_dns: Blacklisted