Overview

URL https://chocolatey.org/install.ps1
IP104.20.73.28
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-06-13 22:56:22 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.20.73.28

Date UQ / IDS / BL URL IP
2019-04-22 20:06:41 +0200
0 - 0 - 0 https://chocolatey.org 104.20.73.28
2019-04-02 20:22:34 +0200
0 - 0 - 0 chocolatey.org/api/v2/FindPackagesById?id='op (...) 104.20.73.28
2019-03-14 13:25:00 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2019-03-11 09:53:35 +0100
0 - 0 - 0 packages.chocolatey.org/notepadplusplus.insta (...) 104.20.73.28
2019-02-02 23:17:05 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2019-01-23 18:18:25 +0100
0 - 0 - 0 chocolatey.org 104.20.73.28
2019-01-17 16:06:55 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2019-01-07 12:35:33 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2018-12-12 00:45:12 +0100
0 - 0 - 0 chocolatey.org 104.20.73.28
2018-12-11 07:50:31 +0100
0 - 0 - 0 chocolatey.org 104.20.73.28

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2019-05-23 05:52:40 +0200
0 - 1 - 0 os-downloads.com/downloadscab/WinRAR_Setup.exe 104.31.73.160
2019-05-23 05:38:01 +0200
0 - 0 - 2 hackinstagram.net/padfiles/Setup_Instagram_Ha (...) 104.24.102.33
2019-05-23 05:35:48 +0200
0 - 5 - 1 oklasome.ml/ 104.31.78.156
2019-05-23 05:33:19 +0200
0 - 0 - 1 www.istraffic.com/beacon/xptodasdadsasdasdasd 104.27.164.71
2019-05-23 05:32:11 +0200
0 - 0 - 4 rbyuv.com/interjishu 104.27.152.67
2019-05-23 05:29:02 +0200
0 - 0 - 3 cusealphas.com/antiiliako-sprey-chicco-spf50- (...) 104.18.61.231
2019-05-23 05:27:07 +0200
0 - 2 - 5 xampleslog.cf/shp 104.27.138.71
2019-05-23 05:25:39 +0200
0 - 0 - 1 csc-server.ru/ChangerVersions/ALL/54.zip 104.27.131.49
2019-05-23 05:25:38 +0200
0 - 0 - 1 csc-server.ru/ChangerVersions/ALL/71.zip 104.27.130.49
2019-05-23 05:25:15 +0200
0 - 2 - 5 romulusmi.gq/lincus/docusign%202 104.24.111.245

Last 10 reports on domain: chocolatey.org

Date UQ / IDS / BL URL IP
2019-04-22 20:06:41 +0200
0 - 0 - 0 https://chocolatey.org 104.20.73.28
2019-04-02 20:22:34 +0200
0 - 0 - 0 chocolatey.org/api/v2/FindPackagesById?id='op (...) 104.20.73.28
2019-03-26 20:25:27 +0100
0 - 0 - 0 https://chocolatey.org 104.20.74.28
2019-03-23 02:57:51 +0100
0 - 0 - 0 chocolatey.org/install.ps1 104.20.74.28
2019-03-14 13:25:00 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2019-03-11 09:53:35 +0100
0 - 0 - 0 packages.chocolatey.org/notepadplusplus.insta (...) 104.20.73.28
2019-03-10 13:24:36 +0100
0 - 0 - 0 Chocolatey.org 104.20.74.28
2019-03-06 23:25:49 +0100
0 - 0 - 0 chocolatey.org/api/v2/FindPackagesById?id='op (...) 104.20.74.28
2019-02-28 12:28:11 +0100
0 - 0 - 0 chocolatey.org 104.20.74.28
2019-02-02 23:17:05 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (3)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Wed, 13 Jun 2018 20:55:51 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=119237, public, no-transform, must-revalidate
Last-Modified: Wed, 13 Jun 2018 19:47:44 GMT
Expires: Fri, 15 Jun 2018 07:47:44 GMT
Etag: "0405aa681a998d3b200807122910436ab8a9a721"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    ca6c2de75eead8b37f6f47b050b4d464
Sha1:   0405aa681a998d3b200807122910436ab8a9a721
Sha256: 8bf019343b7a50ee1b8eb93da226fadb126052d871ab2b496f91560162b90bea
                                        
                                            GET /install.ps1 HTTP/1.1 
Host: chocolatey.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.20.74.28
HTTP/1.1 200 OK
Content-Type: text/plain
                                        
Date: Wed, 13 Jun 2018 20:55:51 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d08415cc4185dcad09d8635b5ec37bd5e1528923351; expires=Thu, 13-Jun-19 20:55:51 GMT; path=/; domain=.chocolatey.org; HttpOnly
Vary: Accept-Encoding
Cache-Control: public, max-age=604800
Last-Modified: Wed, 13 Jun 2018 05:50:32 GMT
Etag: W/"c643da70da2d41:0"
Content-Encoding: gzip
CF-Cache-Status: HIT
Expires: Wed, 20 Jun 2018 20:55:51 GMT
Strict-Transport-Security: max-age=12960000
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a775e5ba89426d-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   10497
Md5:    e43690b9094f25bf62ff9ef977c95bb8
Sha1:   1b24c4ad5e61c37f4cf6cd36c278d64f53bfcc7f
Sha256: 095007ef14073573e774c99677c0bbc6a64ee4d6736214ecc9e6e4305db74eb3
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: chocolatey.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=d08415cc4185dcad09d8635b5ec37bd5e1528923351

                                         
                                         104.20.74.28
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Wed, 13 Jun 2018 20:55:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=604800
Last-Modified: Mon, 11 Jun 2018 18:29:11 GMT
Etag: W/"42d6b517b21d41:0"
CF-Cache-Status: HIT
Vary: Accept-Encoding
Expires: Wed, 20 Jun 2018 20:55:52 GMT
Strict-Transport-Security: max-age=12960000
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 42a775e66b03426d-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   191
Md5:    5ecc5ad5ea0234035969409a24a15f46
Sha1:   8e80b6c5ae8acc9c4f92f2f42942875a5ca528e9
Sha256: e53f8ed2ca672f7b0ce257cb960d2623d8fa40e70ec8cf1a2619890a0179d598