Overview

URL gandmco.com/
IP98.124.251.65
ASNAS21740 eNom, Incorporated
Location United States
Report completed2019-05-17 17:16:44 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-05-17 2 gandmco.com/ Malware
2019-05-17 2 www.gandmco.com/ Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 98.124.251.65

Date UQ / IDS / BL URL IP
2019-03-02 10:56:05 +0100
0 - 0 - 1 www.zabilogha.ehost-services204.com/fr/www.ba (...) 98.124.251.65
2019-03-02 09:57:00 +0100
0 - 0 - 1 zabilogha.ehost-services204.com/fr/www.banque (...) 98.124.251.65
2018-11-30 03:17:58 +0100
0 - 0 - 1 9ninewright.net/KJedg376t2 98.124.251.65
2018-11-29 04:33:11 +0100
0 - 0 - 1 gandmco.com/ 98.124.251.65
2018-08-09 11:06:47 +0200
0 - 0 - 2 hexacam.com/njhgftrf3/njhgftrf3/njhgftrf3/njh (...) 98.124.251.65
2018-06-19 18:47:46 +0200
0 - 0 - 2 9ninewright.net/slehGTexc 98.124.251.65
2018-06-19 18:46:04 +0200
0 - 0 - 1 www.9ninewright.net/slehGTexc 98.124.251.65
2018-02-05 13:53:33 +0100
0 - 0 - 1 www.alexandradickman.com 98.124.251.65
2018-01-31 17:35:37 +0100
0 - 0 - 1 www.alexandradickman.com/pupirka.png,Pattern 98.124.251.65
2018-01-21 20:42:45 +0100
0 - 0 - 1 www.alexandradickman.com/873gfhi3f3r 98.124.251.65

Last 10 reports on ASN: AS21740 eNom, Incorporated

Date UQ / IDS / BL URL IP
2019-06-10 15:52:06 +0200
0 - 0 - 1 jerkybuy.com/transacciones/83.58.109.913516/c (...) 98.124.199.46
2019-06-09 14:21:22 +0200
0 - 0 - 1 englishgarden.net/index.php 98.124.199.107
2019-06-09 13:37:25 +0200
0 - 0 - 1 pipersoperahouse.net/cast/bookmark 98.124.199.102
2019-06-09 11:26:35 +0200
0 - 0 - 3 weldmaster.com/zyq/bigtyme/nD 98.124.199.24
2019-06-09 11:23:21 +0200
0 - 0 - 3 weldmaster.com/gp 98.124.199.24
2019-06-07 08:05:50 +0200
0 - 0 - 4 kelownatownhomes.com/g76ub76 98.124.199.89
2019-06-05 08:06:09 +0200
0 - 0 - 6 suncoastot.com/webpage/forms/SCHOOLAGE_CHECKL (...) 98.124.252.176
2019-06-04 14:10:51 +0200
0 - 0 - 1 hal9000.ehost-services142.com/n53s3pog/hyimeh7.exe 69.64.156.54
2019-06-03 00:43:35 +0200
0 - 0 - 1 zkaoo.com/download/update/update.exe 98.124.199.125
2019-06-02 19:58:16 +0200
0 - 1 - 0 ncdrive.com/wow.exe 98.124.199.68

Last 3 reports on domain: gandmco.com

Date UQ / IDS / BL URL IP
2018-11-29 04:33:11 +0100
0 - 0 - 1 gandmco.com/ 98.124.251.65
2017-10-06 03:32:52 +0200
0 - 0 - 2 gandmco.com/9ghf45jhg 98.124.251.65
2017-10-05 19:25:47 +0200
0 - 0 - 1 www.gandmco.com/9ghf45jhg,Pattern 98.124.251.65


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (9)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         98.124.251.65
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:13 GMT
Content-Length: 178
Connection: keep-alive
Location: http://www.gandmco.com/


--- Additional Info ---
Magic:  HTML document text
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET / HTTP/1.1 
Host: www.gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         98.124.251.65
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:14 GMT
Content-Length: 1116
Connection: keep-alive
Last-Modified: Thu, 22 Feb 2018 18:45:49 GMT
Etag: "df7-565d173dcf994"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1116
Md5:    e7c768ac9b8d981dc702721c9291768c
Sha1:   fe31b2750dd4cbe464c8a9edd1e8e69a2e12dcd1
Sha256: cb21ed1729fbc46e09df61a1eb707aec2d7fd56b0c1e122ecacb9d3a015430b8

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /background.jpg HTTP/1.1 
Host: www.gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gandmco.com/

                                         
                                         98.124.251.65
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:14 GMT
Content-Length: 2897
Connection: keep-alive
Last-Modified: Thu, 22 Feb 2018 18:45:49 GMT
Etag: "b51-565d173d25301"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   2897
Md5:    94aa0bc23a265ceaee801c9c3b176c3c
Sha1:   8e2a15250c2adec09d179819442e7fafb6e3bc07
Sha256: 436432f13ba0c23d62195d0e245dcc48bf25e09f4a41dfd98d27e301a24e65c1
                                        
                                            GET /iso9001.gif HTTP/1.1 
Host: www.gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gandmco.com/

                                         
                                         98.124.251.65
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:14 GMT
Content-Length: 4087
Connection: keep-alive
Last-Modified: Thu, 22 Feb 2018 18:45:50 GMT
Etag: "ff7-565d173e8193f"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 125 x 49
Size:   4087
Md5:    52fc621d7b1460bd40cb5b0ff72de637
Sha1:   c2de80629b10f062cd0652e9a84111d522f4fe20
Sha256: ff0a001b007fb82a32a2ba1f5f5f3ce3db5a51d3d4c363323e25ec63c522192d
                                        
                                            GET /logo2.gif HTTP/1.1 
Host: www.gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gandmco.com/

                                         
                                         98.124.251.65
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:14 GMT
Content-Length: 2049
Connection: keep-alive
Last-Modified: Thu, 22 Feb 2018 18:45:53 GMT
Etag: "801-565d1740b29d8"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 295 x 54
Size:   2049
Md5:    fe4fc8a273b165bbdd798e7992a50065
Sha1:   6d8a0bedfc6c1d574a2fbac722b5bf5f86b9c7fd
Sha256: d94d3985143aae9d287fc6bf32b8fcfc34e59d2a7026c2fae19cecd7f59bbd66
                                        
                                            GET /logo3.gif HTTP/1.1 
Host: www.gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gandmco.com/

                                         
                                         98.124.251.65
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:14 GMT
Content-Length: 2758
Connection: keep-alive
Last-Modified: Thu, 22 Feb 2018 18:45:54 GMT
Etag: "ac6-565d1742001cd"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 127 x 136
Size:   2758
Md5:    f45ba10863cb698266acee81d2ef2543
Sha1:   2cac6cb0603005e2a83623a304e3fc6bb470da7f
Sha256: 20a417fad7a5d0ddc5c80ce4d869970b50983cdac2eaf6180a39fc4dded951ee
                                        
                                            GET /61485.gif HTTP/1.1 
Host: www.gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.gandmco.com/

                                         
                                         98.124.251.65
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:14 GMT
Content-Length: 24186
Connection: keep-alive
Last-Modified: Thu, 22 Feb 2018 18:45:48 GMT
Etag: "5e7a-565d173c7a49e"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 322 x 218
Size:   24186
Md5:    c981a8337d0be7b3c953276e2bc2cd2c
Sha1:   c4cc3e76c7b803550681fb6459d8406690a1096e
Sha256: dde38b169053b12c78d509df7b4eb9fe93c0b1dc4355930b455343a314cdfc59
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         98.124.251.65
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:15 GMT
Content-Length: 551
Connection: keep-alive
Last-Modified: Wed, 25 Aug 2010 07:55:32 GMT
Etag: "3bd-48ea134b50500"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   551
Md5:    c3540058ec543a5b98474a3684f2e4d1
Sha1:   fcb3307a3ac27bc9662cce3169f8405d12f34197
Sha256: 9259e6d9e52e7d86ccda979dd894fca2654cd16c205f179e43231176798aef4e
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.gandmco.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
If-Modified-Since: Wed, 25 Aug 2010 07:55:32 GMT
If-None-Match: "3bd-48ea134b50500"

                                         
                                         98.124.251.65
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Server: nginx
Date: Fri, 17 May 2019 15:16:18 GMT
Content-Length: 551
Connection: keep-alive
Last-Modified: Wed, 25 Aug 2010 07:55:32 GMT
Etag: "3bd-48ea134b50500"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   551
Md5:    c3540058ec543a5b98474a3684f2e4d1
Sha1:   fcb3307a3ac27bc9662cce3169f8405d12f34197
Sha256: 9259e6d9e52e7d86ccda979dd894fca2654cd16c205f179e43231176798aef4e