Overview

URL scn001375.securefileshares.com/d89a77/bf35ae1c-a09a-43f3-beb1-d065a1b5258f/?
IP54.83.101.48
ASNAS14618 Amazon.com, Inc.
Location United States
Report completed2018-12-14 13:34:48 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 54.83.101.48

Date UQ / IDS / BL URL IP
2019-03-21 22:46:06 +0100
0 - 0 - 0 https://ahv3ctpms4e.invoicenotices.com/1/6e25 (...) 54.83.101.48
2019-03-20 17:57:09 +0100
0 - 0 - 0 https://s.hr-communication.com/EmployeePortal (...) 54.83.101.48
2019-03-19 15:32:43 +0100
0 - 0 - 0 https://mail.webaccess-alerts.net/u/amo3z6cco (...) 54.83.101.48
2019-03-19 07:11:50 +0100
0 - 0 - 0 mco.mycircleonline.com/invites/b71cd6/5ea9ebf (...) 54.83.101.48
2019-03-12 14:56:38 +0100
0 - 0 - 0 aap.virus-control.com/3fa2bb/4839cfb5-ce65-46 (...) 54.83.101.48
2019-03-11 19:27:53 +0100
0 - 0 - 0 webaccess-alert.com 54.83.101.48
2019-03-07 19:07:13 +0100
0 - 0 - 0 koch.yammer.microsoft.319447.com/posts/newpos (...) 54.83.101.48
2019-03-04 16:19:47 +0100
0 - 0 - 0 login.discontcomputers.com 54.83.101.48
2019-02-25 18:53:57 +0100
0 - 0 - 0 securefileshares.com/ 54.83.101.48
2019-02-23 23:50:39 +0100
0 - 0 - 0 https://nasa.itupdates.support/technology/gad (...) 54.83.101.48

Last 10 reports on ASN: AS14618 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2019-03-25 01:12:57 +0100
0 - 0 - 1 helpsavemike.ca/jsrtkwu3z7S/Status_zu_Sendung (...) 54.208.104.124
2019-03-25 01:08:02 +0100
0 - 0 - 2 search.searchfdm.com/ 184.73.252.103
2019-03-25 00:28:09 +0100
0 - 0 - 4 jobs.lennondesign.co.uk/ 52.86.198.47
2019-03-25 00:27:20 +0100
0 - 1 - 0 mixdealask-restclicks.icu/Fg9LEoQQrIo6Hkd_HfF (...) 52.72.36.238
2019-03-25 00:03:41 +0100
0 - 0 - 1 extremebolt.com/ 23.20.239.12
2019-03-24 22:53:17 +0100
0 - 0 - 2 https://cl.ly/86a66855f0c0/owfSSihsks 54.165.109.27
2019-03-24 22:40:32 +0100
0 - 0 - 0 https://atlkubota.com/qcrfdaxulhksjygd.js 52.20.31.37
2019-03-24 21:53:38 +0100
0 - 3 - 0 https://mixsoftdeal-restclicks.icu/V7re3V-cVA (...) 52.72.36.238
2019-03-24 21:31:48 +0100
0 - 0 - 0 paramonos-oha.com/ 52.22.6.59
2019-03-24 21:16:14 +0100
0 - 1 - 0 mixgreatadvance-restclicks.icu/W0IDO3z9vzKPU4 (...) 52.72.36.238

No other reports on domain: securefileshares.com



JavaScript

Executed Scripts (2)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (6)


Request Response
                                        
                                            GET /d89a77/bf35ae1c-a09a-43f3-beb1-d065a1b5258f/? HTTP/1.1 
Host: scn001375.securefileshares.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         100.24.100.138
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Date: Fri, 14 Dec 2018 12:34:15 GMT
Server: Apache
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1; mode=block
X-Request-Id: 21473f77-6fbe-459a-b0c3-3585f913b8c8
X-Runtime: 0.018391
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Status: 404 Not Found
Access-Control-Allow-Origin: http://landing.phishme.com
X-Download-Options: noopen
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   14581
Md5:    9c0c5750ba683ee5842ec5cb2c505bed
Sha1:   09d04990729266c53c881bc06572d989e1643954
Sha256: 04ae3021dd0edad1b545e159e7330a539cf3070ba7adb10be6d087bba4e81046
                                        
                                            GET /images/www/logo.png HTTP/1.1 
Host: scn001375.securefileshares.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://scn001375.securefileshares.com/d89a77/bf35ae1c-a09a-43f3-beb1-d065a1b5258f/?

                                         
                                         100.24.100.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 14 Dec 2018 12:34:15 GMT
Server: Apache
Last-Modified: Thu, 13 Dec 2018 15:57:00 GMT
Etag: "981-57ce95d69eb00"
Accept-Ranges: bytes
Content-Length: 2433
Cache-Control: max-age=0
Expires: Fri, 14 Dec 2018 12:34:15 GMT
Access-Control-Allow-Origin: http://landing.phishme.com
X-Download-Options: noopen
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 212 x 77, 8-bit colormap, non-interlaced
Size:   2433
Md5:    6348199380599aeafc87d3ee99b55d2d
Sha1:   0df73562cf2a5869f32c4507c6252c9396f78f30
Sha256: cb51a14651a66a4bffc0cf0194f50aef0c13531ccb2d4f9e0c0a12cc0e84faca
                                        
                                            GET /javascripts/jquery-1.4.1.min.js HTTP/1.1 
Host: scn001375.securefileshares.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://scn001375.securefileshares.com/d89a77/bf35ae1c-a09a-43f3-beb1-d065a1b5258f/?

                                         
                                         100.24.100.138
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 14 Dec 2018 12:34:15 GMT
Server: Apache
Last-Modified: Thu, 13 Dec 2018 15:57:00 GMT
Etag: "11551-57ce95d69eb00-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: max-age=0
Expires: Fri, 14 Dec 2018 12:34:15 GMT
Access-Control-Allow-Origin: http://landing.phishme.com
X-Download-Options: noopen
Content-Length: 24136
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   24136
Md5:    e4afdba43372f3045f8ff8273f66f012
Sha1:   a30b53bf16b1607109868c6354b64b1086ffa925
Sha256: 4a979e8eb10d3dbb8a6e4672a3a2a8f283ad906169b2e749af7aeec71243fa89
                                        
                                            GET /images/www/mountain.png HTTP/1.1 
Host: scn001375.securefileshares.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://scn001375.securefileshares.com/d89a77/bf35ae1c-a09a-43f3-beb1-d065a1b5258f/?

                                         
                                         100.24.100.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 14 Dec 2018 12:34:16 GMT
Server: Apache
Last-Modified: Thu, 13 Dec 2018 15:57:00 GMT
Etag: "1148f-57ce95d69eb00"
Accept-Ranges: bytes
Content-Length: 70799
Cache-Control: max-age=0
Expires: Fri, 14 Dec 2018 12:34:16 GMT
Access-Control-Allow-Origin: http://landing.phishme.com
X-Download-Options: noopen
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive


--- Additional Info ---
Magic:  PNG image, 932 x 368, 8-bit colormap, non-interlaced
Size:   70799
Md5:    792944e68b43576d8e18cadb7a1bb931
Sha1:   0288dea8251fd305d191042715171fd9dccbd4be
Sha256: 9ee8114b20da5400a45967cdaf6dbfb2fc0826ab3299c704496168d8e7603c65
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: scn001375.securefileshares.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         100.24.100.138
HTTP/1.1 404 Not Found
                                        
Date: Fri, 14 Dec 2018 12:34:16 GMT
Server: Apache
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1; mode=block
X-Request-Id: 8a55e8f4-60bd-46cb-ad5d-5d1fbcd94fee
X-Runtime: 0.004093
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Status: 404 Not Found
Access-Control-Allow-Origin: http://landing.phishme.com
X-Download-Options: noopen
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: scn001375.securefileshares.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         100.24.100.138
HTTP/1.1 404 Not Found
                                        
Date: Fri, 14 Dec 2018 12:34:19 GMT
Server: Apache
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
X-XSS-Protection: 1; mode=block
X-Request-Id: f2b39220-aec4-403e-8b96-73fc2e151220
X-Runtime: 0.003059
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Status: 404 Not Found
Access-Control-Allow-Origin: http://landing.phishme.com
X-Download-Options: noopen
Content-Length: 0
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive


--- Additional Info ---