Overview

URL gurmekan.net/Scan072.zip
IP94.73.151.62
ASNAS34619 CIZGI TELEKOMUNIKASYON ANONIM SIRKETI
Location Turkey
Report completed2018-12-28 09:30:01 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-28 2 gurmekan.net/Scan072.zip Malware
DNS-BH  No alerts detected
mnemonic secure dns
Added / Verified Severity Host Comment
2018-12-27 2 gurmekan.net Blacklisted


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 94.73.151.62

Date UQ / IDS / BL URL IP
2019-03-31 03:31:33 +0200
 0 - 0 - 1 almanatravel.com/ 94.73.151.62
2019-03-22 17:59:24 +0100
 0 - 0 - 1 demardistanbul.com/libraries/legacy/request/A (...) 94.73.151.62
2018-12-29 00:42:54 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 08:55:23 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 07:43:49 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 03:33:09 +0100
 0 - 0 - 1 bursalilarinsaat.com/images/Akt724.zip 94.73.151.62
2018-12-28 00:54:35 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-27 23:56:39 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-06 06:56:39 +0100
 0 - 0 - 31 merichome.com/system/logs/7647gd7b43f43.exe 94.73.151.62
2018-08-09 13:01:33 +0200
 0 - 0 - 19 merichome.com/ 94.73.151.62

Last 10 reports on ASN: AS34619 CIZGI TELEKOMUNIKASYON ANONIM SIRKETI

Date UQ / IDS / BL URL IP
2019-07-01 03:22:08 +0200
 0 - 0 - 2 kolejmontlari.com/scan/Invoice_Notice/McDHi-h (...) 94.73.150.116
2019-06-25 21:25:25 +0200
 0 - 0 - 0 mkbulut.com 94.73.146.145
2019-06-25 15:28:01 +0200
 0 - 0 - 0 https://www.parisgezgini.com 185.22.187.221
2019-06-19 13:27:16 +0200
 0 - 0 - 0 azra.com.tr 94.73.144.167
2019-06-19 02:52:33 +0200
 0 - 0 - 0 https://www.azra.com.tr 94.73.144.167
2019-06-18 08:22:09 +0200
 0 - 0 - 0 degisimasansor.com 94.73.147.29
2019-06-12 19:59:44 +0200
 0 - 0 - 1 www.beckmann.com.tr 94.73.146.118
2019-06-10 18:53:36 +0200
 0 - 0 - 1 yureklimotel.com/plugins/editors/jce/tiny_mce (...) 94.73.150.60
2019-06-10 17:15:40 +0200
 0 - 0 - 4 oyasinsaat.com.tr/86hHYU6 94.73.148.80
2019-06-10 16:52:27 +0200
 0 - 0 - 1 mersanmermer.com/v2/granit.html 94.73.170.188

Last 2 reports on domain: gurmekan.net

Date UQ / IDS / BL URL IP
2018-12-28 00:54:35 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62
2018-12-27 23:56:39 +0100
 0 - 0 - 1 gurmekan.net/Scan072.zip 94.73.151.62


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
 
                                        
                                            GET /Scan072.zip HTTP/1.1 

                                        
                                            
Host: gurmekan.net 

                                        
                                    
                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                    
                                         
                                         94.73.151.62

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/zip 

                                        
                                    
                                        

                                        
                                            
Last-Modified: Tue, 25 Dec 2018 05:57:54 GMT 

                                        
                                            
Content-Length: 3175 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Date: Fri, 28 Dec 2018 08:29:27 GMT 

                                        
                                            
Server: LiteSpeed 

                                        
                                            
Connection: Keep-Alive 

                                        
                                            
 

                                        
                                        

                                            

                                            --- Additional Info ---

                                            
                                                Magic:  Zip archive data, at least v2.0 to extract

                                                Size:   3175

                                                Md5:    e79a36acf50d6006fd57d78111b28482

                                                Sha1:   5d233831c53633ef4c4e622081f40931bbc71b2c

                                                Sha256: c641b9adebe61cabf44b2ceeeb5fcaa11442134b3b4638c8ec464eaa8821e367

                                            

                                            
                                                
Alerts:

                                                

                                                
                                                      Blacklists:

                                                    
                                                            - fortinet: Malware

                                                    
                                                            - mnemonic_dns: Blacklisted