Overview

URL gorillawalker.com/weird-mysteries-volume-1-pre-code-classics.pdf
IP104.27.178.146
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2019-05-21 21:49:26 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-05-21 2 gorillawalker.com/weird-mysteries-volume-1-pre-code-classics.pdf Malware
2019-05-21 2 www.gorillawalker.com/weird-mysteries-volume-1-pre-code-classics.pdf Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.178.146

Date UQ / IDS / BL URL IP
2019-06-10 13:51:14 +0200
0 - 0 - 1 www.gorillawalker.com/ 104.27.178.146
2019-06-07 20:22:08 +0200
0 - 0 - 1 www.gorillawalker.com/imaginative-writing-the (...) 104.27.178.146
2019-06-07 20:22:08 +0200
0 - 0 - 1 www.gorillawalker.com/nihon-no-uta-chugoku-no (...) 104.27.178.146
2019-06-07 20:22:02 +0200
0 - 0 - 1 www.gorillawalker.com/acrilico-naturalezas-mu (...) 104.27.178.146
2019-06-07 20:22:01 +0200
0 - 0 - 1 www.gorillawalker.com/harmonica-blues-m-thode (...) 104.27.178.146
2019-06-07 20:22:00 +0200
0 - 0 - 1 www.gorillawalker.com/mechanical-vibrations-3 (...) 104.27.178.146
2019-06-07 20:21:47 +0200
0 - 0 - 1 www.gorillawalker.com/more-physics-with-matla (...) 104.27.178.146
2019-06-07 20:21:44 +0200
0 - 0 - 1 www.gorillawalker.com/the-improvisation-book- (...) 104.27.178.146
2019-06-07 20:18:25 +0200
0 - 0 - 1 www.gorillawalker.com/last-hope-hitman.pdf 104.27.178.146
2019-06-07 20:18:25 +0200
0 - 0 - 1 www.gorillawalker.com/gold-und-silber-tuba-pa (...) 104.27.178.146

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2019-06-25 10:44:19 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/good-trouble (...) 104.16.120.127
2019-06-25 10:44:11 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/putlocker-go (...) 104.16.122.127
2019-06-25 10:44:03 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/watch-good-t (...) 104.16.120.127
2019-06-25 10:43:55 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/full-episode (...) 104.16.121.127
2019-06-25 10:43:33 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/watch-good-t (...) 104.16.124.127
2019-06-25 10:43:24 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/good-trouble (...) 104.16.121.127
2019-06-25 10:43:20 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/watch-good-t (...) 104.16.124.127
2019-06-25 10:43:19 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/full-series- (...) 104.16.123.127
2019-06-25 10:43:12 +0200
0 - 0 - 0 https://medium.com/@bokuwakami01/good-trouble (...) 104.16.123.127
2019-06-25 10:26:22 +0200
0 - 0 - 0 https://www.rjavan.me 104.26.2.84

Last 10 reports on domain: gorillawalker.com

Date UQ / IDS / BL URL IP
2019-06-10 13:51:14 +0200
0 - 0 - 1 www.gorillawalker.com/ 104.27.178.146
2019-06-07 20:22:12 +0200
0 - 0 - 1 www.gorillawalker.com/pain-source-book.pdf 104.27.179.146
2019-06-07 20:22:11 +0200
0 - 0 - 1 www.gorillawalker.com/el-mapa-para-alcanzar-e (...) 104.27.179.146
2019-06-07 20:22:08 +0200
0 - 0 - 1 www.gorillawalker.com/imaginative-writing-the (...) 104.27.178.146
2019-06-07 20:22:08 +0200
0 - 0 - 1 www.gorillawalker.com/nihon-no-uta-chugoku-no (...) 104.27.178.146
2019-06-07 20:22:06 +0200
0 - 0 - 1 www.gorillawalker.com/witchblade-volume-6.pdf 104.27.179.146
2019-06-07 20:22:02 +0200
0 - 0 - 1 www.gorillawalker.com/acrilico-naturalezas-mu (...) 104.27.178.146
2019-06-07 20:22:01 +0200
0 - 0 - 1 www.gorillawalker.com/harmonica-blues-m-thode (...) 104.27.178.146
2019-06-07 20:22:01 +0200
0 - 0 - 1 www.gorillawalker.com/harry-the-dirty-dog.pdf 104.27.179.146
2019-06-07 20:22:00 +0200
0 - 0 - 1 www.gorillawalker.com/mechanical-vibrations-3 (...) 104.27.178.146


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (4)


Request Response
                                        
                                            GET /weird-mysteries-volume-1-pre-code-classics.pdf HTTP/1.1 
Host: gorillawalker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.178.146
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Date: Tue, 21 May 2019 19:48:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d2271bd3ab7c0dd2ae29d7f9275244b2c1558468134; expires=Wed, 20-May-20 19:48:54 GMT; path=/; domain=.gorillawalker.com; HttpOnly
Location: http://www.gorillawalker.com/weird-mysteries-volume-1-pre-code-classics.pdf
X-Frame-Options: DENY
CF-Cache-Status: MISS
Expires: Tue, 21 May 2019 23:48:54 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4da912109d06d119-TXL


--- Additional Info ---
Magic:  HTML document text
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /weird-mysteries-volume-1-pre-code-classics.pdf HTTP/1.1 
Host: www.gorillawalker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d2271bd3ab7c0dd2ae29d7f9275244b2c1558468134

                                         
                                         104.27.178.146
HTTP/1.1 200 OK
Content-Type: application/pdf
                                        
Date: Tue, 21 May 2019 19:48:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=86400
Pragma: no-cache
Expires: Wed, 22 May 2019 19:48:54 GMT
Last-Modified: Tue, 21 May 2019 22:48:54 GMT
Content-Disposition: inline; filename="Weird_Mysteries_Volume_1_Pre-Code_Classics.pdf"
X-Frame-Options: DENY
Content-Encoding: gzip
CF-Cache-Status: MISS
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4da912115f092d93-TXL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15520
Md5:    7542f654d598b02b99d4fe015edab9bb
Sha1:   853e869faf17066aac5e68c63ee30a9bf2623dfa
Sha256: 8b08433380a36bd11fa6544297421e74db64339512da25e42cc49cbd48df7eec

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.gorillawalker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d2271bd3ab7c0dd2ae29d7f9275244b2c1558468134

                                         
                                         104.27.178.146
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 21 May 2019 19:48:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: HIT
Expires: Tue, 21 May 2019 23:48:56 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4da912200db92d93-TXL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   115
Md5:    c79273e9b9de357e24b445594f31d7f8
Sha1:   e27e10e96ca7708dbad2cd41a416ffcab6a94600
Sha256: 941433f5957dd44b3ec474726aadfc556c41e94c1a6969d8fef8a931414f6baf
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.gorillawalker.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d2271bd3ab7c0dd2ae29d7f9275244b2c1558468134

                                         
                                         104.27.178.146
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 21 May 2019 19:48:59 GMT
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: HIT
Expires: Tue, 21 May 2019 23:48:59 GMT
Cache-Control: public, max-age=14400
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4da91232dd092d93-TXL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   115
Md5:    c79273e9b9de357e24b445594f31d7f8
Sha1:   e27e10e96ca7708dbad2cd41a416ffcab6a94600
Sha256: 941433f5957dd44b3ec474726aadfc556c41e94c1a6969d8fef8a931414f6baf