Overview

URL g2anet.com/
IP206.188.193.54
ASNAS55002 Defense.Net, Inc
Location United States
Report completed2018-12-05 16:39:08 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-05 2 g2anet.com/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 3 reports on IP: 206.188.193.54

Date UQ / IDS / BL URL IP
2017-11-10 21:52:52 +0100
0 - 0 - 0 groupexcq.com 206.188.193.54
2017-09-15 07:06:19 +0200
0 - 0 - 1 checkyouraccountstatus.com/ 206.188.193.54
2017-07-17 11:55:34 +0200
0 - 1 - 0 www.kellydds.com/ 206.188.193.54

Last 10 reports on ASN: AS55002 Defense.Net, Inc

Date UQ / IDS / BL URL IP
2018-12-16 23:22:53 +0100
0 - 1 - 0 www.phantech.com/InfoRecallUpgrade.exe 206.188.193.99
2018-12-16 22:54:49 +0100
2 - 0 - 4 000mkq3.rxportalhosting.com/wp-amazon-ses-smt (...) 206.188.192.53
2018-12-16 22:45:21 +0100
0 - 1 - 0 www.phantech.com/InfoRecallUpgrade.exe 206.188.193.99
2018-12-16 22:37:34 +0100
0 - 0 - 4 bcpzonarusegura.com/ 206.188.193.238
2018-12-16 22:34:17 +0100
0 - 1 - 0 www.phantech.com/InfoRecallUpgrade.exe 206.188.193.99
2018-12-16 21:34:21 +0100
0 - 1 - 0 www.phantech.com/InfoRecallUpgrade.exe 206.188.193.99
2018-12-16 21:09:24 +0100
0 - 1 - 0 www.phantech.com/InfoRecallUpgrade.exe 206.188.193.99
2018-12-16 21:03:24 +0100
0 - 0 - 1 fileante.com/download/KerbalSpaceProgramSetup.exe 206.188.192.139
2018-12-16 19:51:58 +0100
0 - 0 - 1 fileante.com/download/KerbalSpaceProgramSetup.exe 206.188.192.139
2018-12-16 17:58:52 +0100
0 - 1 - 0 www.phantech.com/InfoRecallUpgrade.exe 206.188.193.99

No other reports on domain: g2anet.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (3)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: g2anet.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         206.188.193.54
HTTP/1.1 403 Forbidden
Content-Type: text/html
                                        
Server: openresty/1.11.2.4
Date: Wed, 05 Dec 2018 15:38:35 GMT
Content-Length: 175
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   175
Md5:    9c8bfb3bae323423731df6f1efa35d1f
Sha1:   311893fad8ec878619adf7a5072b3e5e2f46b7c9
Sha256: 9fe6e5c6baacc2166c6c675d4188905e16b3b49d86e052d58a155e15f381e06a

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: g2anet.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         206.188.193.54
HTTP/1.1 403 Forbidden
Content-Type: text/html
                                        
Server: openresty/1.11.2.4
Date: Wed, 05 Dec 2018 15:38:35 GMT
Content-Length: 175
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   175
Md5:    9c8bfb3bae323423731df6f1efa35d1f
Sha1:   311893fad8ec878619adf7a5072b3e5e2f46b7c9
Sha256: 9fe6e5c6baacc2166c6c675d4188905e16b3b49d86e052d58a155e15f381e06a
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: g2anet.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         206.188.193.54
HTTP/1.1 403 Forbidden
Content-Type: text/html
                                        
Server: openresty/1.11.2.4
Date: Wed, 05 Dec 2018 15:38:38 GMT
Content-Length: 175
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text
Size:   175
Md5:    9c8bfb3bae323423731df6f1efa35d1f
Sha1:   311893fad8ec878619adf7a5072b3e5e2f46b7c9
Sha256: 9fe6e5c6baacc2166c6c675d4188905e16b3b49d86e052d58a155e15f381e06a