Overview

URL gamesevil.com/desertmonster/desertmonster.exe
IP54.204.234.181
ASNAS14618 Amazon.com, Inc.
Location United States
Report completed2018-12-02 01:28:36 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-12-02 2 gamesevil.com/desertmonster/desertmonster.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 54.204.234.181

Date UQ / IDS / BL URL IP
2019-03-29 01:30:45 +0100
0 - 0 - 1 watakal.com/IlOysTgNjFrGtHtEAwVo/index.php 54.204.234.181
2019-02-02 05:52:22 +0100
0 - 0 - 1 2142889128.getwalmartgift.cx/eMSIr 54.204.234.181
2019-01-27 23:24:56 +0100
0 - 0 - 0 5626856492.ianf.us/yeInc 54.204.234.181
2019-01-26 14:55:28 +0100
0 - 0 - 0 2102886561.li3c.us/dxBQk 54.204.234.181
2018-12-13 16:22:34 +0100
0 - 0 - 0 9154972924.quickfunds.to/fRcHp 54.204.234.181
2018-12-06 14:54:25 +0100
0 - 0 - 0 6193619213.freescore.to/QzAoN 54.204.234.181
2018-12-06 14:54:06 +0100
0 - 0 - 0 5205592236.findloan.to/1JeDU 54.204.234.181
2018-12-04 16:18:16 +0100
0 - 0 - 0 2137651425.clickloans.to/arbzc 54.204.234.181
2018-12-02 15:32:19 +0100
0 - 0 - 1 gamesevil.com/3dneonrace/3dneonrace.exe 54.204.234.181
2018-11-30 21:24:53 +0100
0 - 0 - 0 5157831373.walmartrewards.to 54.204.234.181

Last 10 reports on ASN: AS14618 Amazon.com, Inc.

Date UQ / IDS / BL URL IP
2019-07-01 11:25:11 +0200
0 - 0 - 0 https://fbdownldr.net/filter/adult 54.152.121.74
2019-07-01 10:12:53 +0200
0 - 0 - 0 norugu.com 23.21.45.153
2019-07-01 09:52:24 +0200
0 - 0 - 0 https://contentcrowd.docsend.com/view/xsfinuu (...) 54.243.74.96
2019-07-01 06:42:58 +0200
0 - 0 - 0 qukusut.com 54.197.233.70
2019-07-01 04:13:20 +0200
0 - 0 - 0 auctcaccele.online 52.0.217.44
2019-06-30 23:56:35 +0200
0 - 0 - 0 https://butheptesitrew.pro 54.164.186.25
2019-06-30 21:31:18 +0200
0 - 0 - 0 https://httpslink.com/11gs 54.243.81.117
2019-06-30 20:13:42 +0200
0 - 0 - 2 bit.do/eV7Ei 54.83.52.76
2019-06-30 17:39:19 +0200
0 - 0 - 0 affbuzzads.com/ 54.88.152.23
2019-06-30 15:17:41 +0200
0 - 0 - 0 https://www.signalsaz.com/events/events/watch (...) 52.22.215.215

Last 10 reports on domain: gamesevil.com

Date UQ / IDS / BL URL IP
2019-04-23 21:53:12 +0200
0 - 0 - 1 gamesevil.com/monsterhummer/monsterhummer.exe 204.11.56.48
2019-04-19 04:05:21 +0200
0 - 0 - 1 gamesevil.com/adamas/adamas.exe 204.11.56.48
2019-03-21 00:24:50 +0100
0 - 0 - 1 gamesevil.com/bouncingmario/bouncingmario.exe 204.11.56.48
2019-03-12 07:27:03 +0100
0 - 0 - 1 gamesevil.com/blazingballs/blazingballs.exe 204.11.56.48
2019-03-10 23:54:26 +0100
0 - 0 - 1 gamesevil.com/savemario/savemario.exe 204.11.56.48
2018-12-31 01:18:16 +0100
0 - 0 - 1 gamesevil.com/savemario/savemario.exe 91.195.240.94
2018-12-06 01:21:01 +0100
0 - 0 - 1 gamesevil.com/monsterhummer/monsterhummer.exe 91.195.240.94
2018-12-02 15:32:19 +0100
0 - 0 - 1 gamesevil.com/3dneonrace/3dneonrace.exe 54.204.234.181
2018-07-14 02:58:30 +0200
0 - 0 - 1 gamesevil.com/savemario/savemario.exe 54.204.234.181
2017-12-31 12:36:53 +0100
0 - 0 - 1 gamesevil.com/savemario/savemario.exe 69.64.147.242


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (3)


Request Response
                                        
                                            GET /desertmonster/desertmonster.exe HTTP/1.1 
Host: gamesevil.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.204.234.181
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 33
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 02 Dec 2018 00:34:08 GMT
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33
Md5:    adc9e4ab37608b1352128c895bc608f6
Sha1:   2290aded787f44238f7632967e161b00b1fb3c91
Sha256: c85e4e6284ef066e9b9b323ad69226e416caa07ada076548193c3310c177c1ed

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: gamesevil.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.204.234.181
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 33
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 02 Dec 2018 00:34:08 GMT
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33
Md5:    adc9e4ab37608b1352128c895bc608f6
Sha1:   2290aded787f44238f7632967e161b00b1fb3c91
Sha256: c85e4e6284ef066e9b9b323ad69226e416caa07ada076548193c3310c177c1ed
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: gamesevil.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         54.204.234.181
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Length: 33
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Sun, 02 Dec 2018 00:34:11 GMT
Accept-Ranges: bytes
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33
Md5:    adc9e4ab37608b1352128c895bc608f6
Sha1:   2290aded787f44238f7632967e161b00b1fb3c91
Sha256: c85e4e6284ef066e9b9b323ad69226e416caa07ada076548193c3310c177c1ed