Overview

URL https://www.zatrackingap.com/sc/RPhzkxjkrKjgnyiLzopssghwxsmGxqxWgioJoXyrlOgmhgiigjLtikoksxhlyuwMwy
IP104.27.161.120
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2017-09-14 09:44:16 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2017-09-14 2 www.zatrackingap.com/sc/RPhzkxjkrKjgnyiLzopssghwxsmGxqxWgioJoXyrlOgmhgiigjL (...) Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.27.161.120

Date UQ / IDS / BL URL IP
2018-01-09 05:02:55 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/ynyMWgkowoLgi (...) 104.27.161.120
2018-01-07 04:59:26 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/pnyMWgkowoLgi (...) 104.27.161.120
2018-01-05 16:51:13 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/KxqxWgioJoXgy (...) 104.27.161.120
2017-12-13 23:58:29 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/ixqWgxioJoigo (...) 104.27.161.120
2017-12-05 04:20:24 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/vnyMWgkowoLgi (...) 104.27.161.120
2017-12-05 04:17:52 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/hnyMWgkowoLgi (...) 104.27.161.120
2017-12-03 21:07:43 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/KxqxWgioJoXgy (...) 104.27.161.120
2017-11-28 02:28:18 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/JPhzkxjkrKjgn (...) 104.27.161.120
2017-11-26 13:01:30 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/glzmwyKKgjhgj (...) 104.27.161.120
2017-11-26 12:39:12 +0100
0 - 0 - 1 https://www.zatrackingap.com/sc/PlzmwyKKWgggj (...) 104.27.161.120

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2018-02-20 08:48:46 +0100
0 - 0 - 0 https://ncclubs.com/ 104.31.82.227
2018-02-20 08:45:17 +0100
0 - 0 - 1 https://openload.co/embed/10SluHcwnBA/ 104.16.168.50
2018-02-20 08:45:06 +0100
0 - 0 - 18 www.hnygpx.com/html/yjds/ 162.159.209.61
2018-02-20 08:44:59 +0100
2 - 0 - 1 www.speedvid.net/embed-kt6tevwi7qqr.html 104.27.147.21
2018-02-20 08:44:59 +0100
2 - 0 - 1 www.speedvid.net/embed-6glbferw8tq3.html 104.27.147.21
2018-02-20 08:44:59 +0100
2 - 0 - 1 www.speedvid.net/embed-dsiaq84bzabz.html 104.27.147.21
2018-02-20 08:44:57 +0100
2 - 0 - 1 www.speedvid.net/embed-62hggtdm8nrw.html 104.27.147.21
2018-02-20 08:44:50 +0100
2 - 0 - 1 www.speedvid.net/embed-3o8asfak78o0.html 104.27.147.21
2018-02-20 08:44:48 +0100
2 - 0 - 1 www.speedvid.net/embed-spe35ufr071l.html 104.27.146.21
2018-02-20 08:44:48 +0100
2 - 0 - 1 www.speedvid.net/embed-a9r2dkngpd7a.html 104.27.146.21

No other reports on domain: zatrackingap.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (4)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:43:35 GMT
Server: Apache
Last-Modified: Tue, 12 Sep 2017 20:16:38 GMT
Expires: Tue, 19 Sep 2017 20:16:38 GMT
Etag: C9E16FFC98D427C22D471E3DAFDE253082C2B399
Cache-Control: max-age=476582,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp31
Content-Length: 280
Connection: close


--- Additional Info ---
Magic:  data
Size:   280
Md5:    6c86b5e0059d130d6d2afaaf2dbadb34
Sha1:   c9e16ffc98d427c22d471e3dafde253082c2b399
Sha256: 27c55388596d2129430da60d8519f660a76c9a6d2e98d8ad4fab4d4839885eb7
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca4.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 14 Sep 2017 07:43:35 GMT
Server: Apache
Last-Modified: Mon, 11 Sep 2017 21:19:01 GMT
Expires: Mon, 18 Sep 2017 21:19:01 GMT
Etag: C9A884D93E4B996BF11A0272A62C45D7B41EAF15
Cache-Control: max-age=393925,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp18
Content-Length: 312
Connection: close


--- Additional Info ---
Magic:  data
Size:   312
Md5:    f0c2dcca1c41639b6c93d96a7f6e374f
Sha1:   c9a884d93e4b996bf11a0272a62c45d7b41eaf15
Sha256: f67438d81aa4a35aaf2d67ba2956d1a3f4fe3bb74f54be473fef2228358de918
                                        
                                            GET /sc/RPhzkxjkrKjgnyiLzopssghwxsmGxqxWgioJoXyrlOgmhgiigjLtikoksxhlyuwMwy HTTP/1.1 
Host: www.zatrackingap.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.27.160.120
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 14 Sep 2017 07:43:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=daa1e05f7af524e6b658a14e03010b1d51505375015; expires=Fri, 14-Sep-18 07:43:35 GMT; path=/; domain=.zatrackingap.com; HttpOnly
Vary: Accept-Encoding
P3P: CP="ALL IND DSP COR ADM CONo CUR CUSo IVAo IVDo PSA PSD TAI TELo OUR SAMo CNT COM INT NAV ONL PHY PRE PUR UNI"
X-Map-Context: za
X-Served-By: c-04
Server: cloudflare-nginx
CF-RAY: 39e1b7589d75427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   129
Md5:    55331ac1185089c6c79fcafc16046c69
Sha1:   08737549ff04cf19d31dd837e819861ed220dd17
Sha256: 95a1bddc160180b8496fd46cc9c31fbd543801ea9022bbc631f175c005275cc4

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.zatrackingap.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=daa1e05f7af524e6b658a14e03010b1d51505375015

                                         
                                         104.27.160.120
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Date: Thu, 14 Sep 2017 07:43:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 03 Nov 2016 13:58:01 GMT
Etag: W/"581b4269-10be"
X-Map-Context: za
X-Served-By: c-02
Expires: Thu, 21 Sep 2017 07:43:36 GMT
Cache-Control: public, max-age=604800
CF-Cache-Status: REVALIDATED
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 39e1b75a4e73427f-OSL
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   67
Md5:    b601ac8e297400966def179e511dffc8
Sha1:   a69036f5575ebd9b2e064f2d2f3ad7ed3d2e7904
Sha256: 6c9902647370908f4c2efb197d971d7897b44955b50ceea2fd19dbdef8b09c0d