Overview

URL wjladvisors.com/wp-content/plugins/gxp/98d.exe
IP50.87.150.63
ASNAS46606 Unified Layer
Location United States
Report completed2019-04-15 23:08:25 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-04-15 2 wjladvisors.com/wp-content/plugins/gxp/98d.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 5 reports on IP: 50.87.150.63

Date UQ / IDS / BL URL IP
2019-02-27 06:47:10 +0100
0 - 0 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63
2018-12-04 00:53:07 +0100
0 - 0 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63
2018-12-03 05:12:07 +0100
0 - 0 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63
2018-12-03 00:15:17 +0100
0 - 3 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63
2018-12-02 21:22:17 +0100
0 - 2 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63

Last 10 reports on ASN: AS46606 Unified Layer

Date UQ / IDS / BL URL IP
2019-04-26 00:32:24 +0200
0 - 1 - 0 www.downloadtechtools.com/trial/cs/dxl-to-pst.exe 192.254.233.6
2019-04-26 00:32:16 +0200
0 - 0 - 2 missinternationalgrandlatina.com/PayPal 69.195.124.136
2019-04-26 00:31:18 +0200
0 - 1 - 1 www.123dl.org/dl/setup-outlook-ost-to-pdf-con (...) 162.144.34.232
2019-04-26 00:31:12 +0200
0 - 1 - 2 123dl.org/dl/setup-outlook-ost-to-pdf-convert (...) 162.144.34.232
2019-04-26 00:30:51 +0200
0 - 1 - 0 www.crystaloffice.com/maple.exe 192.254.189.196
2019-04-26 00:30:48 +0200
0 - 0 - 4 jumpstartthemovie.com/zu3q/foto-de-namorada-d (...) 198.57.247.144
2019-04-26 00:27:51 +0200
0 - 0 - 8 pinuphairstyles.com/wp-content/uploads/copper (...) 74.220.219.207
2019-04-26 00:27:50 +0200
0 - 0 - 2 pinuphairstyles.com/wp-includes/certificates/ (...) 74.220.219.207
2019-04-26 00:27:46 +0200
0 - 0 - 1 plan-itproductions.net/wp-content/plugins/ser (...) 192.254.234.93
2019-04-26 00:26:02 +0200
0 - 1 - 0 www.credilla.org/dl/ost-to-pst.exe 50.87.145.149

Last 5 reports on domain: wjladvisors.com

Date UQ / IDS / BL URL IP
2019-02-27 06:47:10 +0100
0 - 0 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63
2018-12-04 00:53:07 +0100
0 - 0 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63
2018-12-03 05:12:07 +0100
0 - 0 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63
2018-12-03 00:15:17 +0100
0 - 3 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63
2018-12-02 21:22:17 +0100
0 - 2 - 1 wjladvisors.com/wp-content/plugins/gxp/98d.exe 50.87.150.63


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /wp-content/plugins/gxp/98d.exe HTTP/1.1 
Host: wjladvisors.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         50.87.150.63
HTTP/1.1 200 OK
Content-Type: application/x-msdownload
                                        
Server: nginx/1.14.1
Date: Mon, 15 Apr 2019 21:07:54 GMT
Content-Length: 1869824
Connection: keep-alive
Last-Modified: Thu, 30 Aug 2018 13:12:35 GMT
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PE32 executable for MS Windows (GUI) Intel 80386 32-bit
Size:   1869824
Md5:    3208fd3a2632bc658adac9218d0e9425
Sha1:   8b6fa2d5fdeb70c3718a99959be8b7cd9210f594
Sha256: 53221a6cfd4356d00beeff5be4d92c9a316cd164ae30034641b31290241b37bd

Alerts:
  Blacklists:
    - fortinet: Malware