Overview

URL stefaniclinic.co.ke/adobe.zip
IP67.225.139.208
ASNAS32244 Liquid Web, Inc.
Location United States
Report completed2019-05-16 06:37:24 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-05-16 2 stefaniclinic.co.ke/adobe.zip Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 67.225.139.208

Date UQ / IDS / BL URL IP
2019-05-21 15:51:48 +0200
0 - 0 - 1 kingdomrealityministries.org/iQQS-4VJA_gUbgZM (...) 67.225.139.208
2019-05-16 04:49:46 +0200
0 - 0 - 1 stefaniclinic.co.ke/adobe.zip 67.225.139.208
2019-04-26 09:36:53 +0200
0 - 0 - 13 www.cwaconsultants.co.ke/index.php/2017/09/27 (...) 67.225.139.208
2019-04-24 22:26:34 +0200
0 - 0 - 24 starrentals.co.ke/ 67.225.139.208
2019-04-17 22:17:20 +0200
0 - 0 - 2 kingdomrealityministries.org/wp-content/uploa (...) 67.225.139.208
2019-04-08 22:40:57 +0200
0 - 0 - 41 https://kombeoadventure.com/Office19/?email=p (...) 67.225.139.208
2019-04-04 16:43:08 +0200
0 - 0 - 1 stefaniclinic.co.ke/adobe.zip 67.225.139.208
2019-03-19 05:21:30 +0100
0 - 0 - 1 stefaniclinic.co.ke/adobe.zip 67.225.139.208
2019-03-18 16:02:27 +0100
0 - 0 - 41 kombeoadventure.com/Off13/b10d8eb2385ce27f703 (...) 67.225.139.208
2019-03-18 11:11:31 +0100
0 - 0 - 2 townlink.co.ke/shujuku 67.225.139.208

Last 10 reports on ASN: AS32244 Liquid Web, Inc.

Date UQ / IDS / BL URL IP
2019-05-22 11:18:18 +0200
0 - 0 - 2 mobilenotary.com/Rechnung-2017-05-180768702 64.91.224.192
2019-05-22 11:11:50 +0200
0 - 0 - 1 windows-7-themes.com/site_tempfiles/09/cheetah.exe 72.52.179.175
2019-05-22 11:03:04 +0200
0 - 2 - 0 www.enkord.com/download.php?file=zodiac_tower (...) 72.52.209.1
2019-05-22 10:35:14 +0200
0 - 0 - 1 https://www.insmarkstore.com/software/wawsamp (...) 50.28.57.194
2019-05-22 01:41:45 +0200
0 - 0 - 1 cpveconomy.com/dropbox/onedrive1.zip 50.28.55.165
2019-05-22 01:38:27 +0200
0 - 1 - 0 files.dddload.net/static/Setup_ImgBurn_2.5.8.0.exe 50.28.15.212
2019-05-22 01:11:13 +0200
0 - 0 - 1 https://www.rebekahgarrett.com/about-2 50.28.67.70
2019-05-22 01:07:21 +0200
0 - 0 - 1 windows-7-themes.com/site_tempfiles/15/future (...) 72.52.179.175
2019-05-22 01:05:32 +0200
0 - 0 - 1 registryquick.net/page/RegistryQuick_setup.exe 67.227.226.240
2019-05-22 00:45:34 +0200
0 - 0 - 1 triphones894.apanorama.ws/vpp 72.52.178.23

Last 5 reports on domain: stefaniclinic.co.ke

Date UQ / IDS / BL URL IP
2019-05-16 04:49:46 +0200
0 - 0 - 1 stefaniclinic.co.ke/adobe.zip 67.225.139.208
2019-04-04 16:43:08 +0200
0 - 0 - 1 stefaniclinic.co.ke/adobe.zip 67.225.139.208
2019-03-19 05:21:30 +0100
0 - 0 - 1 stefaniclinic.co.ke/adobe.zip 67.225.139.208
2019-03-10 05:15:23 +0100
0 - 0 - 1 stefaniclinic.co.ke/adobe.zip 67.225.139.208
2019-01-29 09:24:13 +0100
2 - 0 - 2 https://stefaniclinic.co.ke/mkk/adobe%20new/ 67.225.139.208


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (3)


Request Response
                                        
                                            GET /adobe.zip HTTP/1.1 
Host: stefaniclinic.co.ke
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.225.139.208
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 16 May 2019 04:36:52 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Cache-Control: max-age=3600
Expires: Thu, 16 May 2019 05:36:52 GMT
Content-Length: 4
Keep-Alive: timeout=2, max=500


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   4
Md5:    cb492b7df9b5c170d7c87527940eff3b
Sha1:   66928e6cbb59c3a3bce606959ef4a865fe04e642
Sha256: dba5166ad9db9ba648c1032ebbd34dcd0d085b50023b839ef5c68ca1db93a563

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: stefaniclinic.co.ke
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.225.139.208
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 16 May 2019 04:36:53 GMT
Server: Apache
Cache-Control: max-age=3600
Expires: Thu, 16 May 2019 05:36:53 GMT
Content-Length: 4
Keep-Alive: timeout=2, max=499
Connection: Keep-Alive


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   4
Md5:    cb492b7df9b5c170d7c87527940eff3b
Sha1:   66928e6cbb59c3a3bce606959ef4a865fe04e642
Sha256: dba5166ad9db9ba648c1032ebbd34dcd0d085b50023b839ef5c68ca1db93a563
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: stefaniclinic.co.ke
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         67.225.139.208
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 16 May 2019 04:36:56 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Cache-Control: max-age=3600
Expires: Thu, 16 May 2019 05:36:56 GMT
Content-Length: 4
Keep-Alive: timeout=2, max=500


--- Additional Info ---
Magic:  ASCII text, with CRLF line terminators
Size:   4
Md5:    cb492b7df9b5c170d7c87527940eff3b
Sha1:   66928e6cbb59c3a3bce606959ef4a865fe04e642
Sha256: dba5166ad9db9ba648c1032ebbd34dcd0d085b50023b839ef5c68ca1db93a563