Overview

URL https://chocolatey.org/api/v2/package/NSSM/2.24.101.20180116
IP104.20.73.28
ASNAS13335 CloudFlare, Inc.
Location United States
Report completed2018-10-06 05:42:00 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-10-06 2 packages.chocolatey.org/NSSM.2.24.101.20180116.nupkg Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.20.73.28

Date UQ / IDS / BL URL IP
2019-01-17 16:06:55 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2019-01-07 12:35:33 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2018-12-12 00:45:12 +0100
0 - 0 - 0 chocolatey.org 104.20.73.28
2018-12-11 07:50:31 +0100
0 - 0 - 0 chocolatey.org 104.20.73.28
2018-10-09 08:45:01 +0200
0 - 0 - 0 chocolatey.org 104.20.73.28
2018-09-28 04:39:46 +0200
0 - 0 - 0 packages.chocolatey.org 104.20.73.28
2018-07-23 18:04:33 +0200
0 - 0 - 0 chocolatey.org 104.20.73.28
2018-06-13 22:56:22 +0200
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2018-06-12 21:14:23 +0200
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2018-05-30 15:57:30 +0200
0 - 0 - 0 packages.chocolatey.org/curl.7.60.0.nupkg 104.20.73.28

Last 10 reports on ASN: AS13335 CloudFlare, Inc.

Date UQ / IDS / BL URL IP
2019-01-22 21:08:11 +0100
0 - 0 - 0 drugwatch.com 104.25.76.104
2019-01-22 21:01:42 +0100
2 - 0 - 6 saltworld.net/forums/index.php?s=dc4bd33811ce (...) 104.31.79.224
2019-01-22 20:55:28 +0100
0 - 0 - 3 leared.tk/59537344/ 104.31.91.16
2019-01-22 20:54:36 +0100
0 - 0 - 1 imprsn.com/clk/151628/302742968/4o857p51-sq8q (...) 104.18.54.186
2019-01-22 20:53:21 +0100
0 - 0 - 20 hvordanduafinstallerermalware.org/ 104.18.40.62
2019-01-22 20:48:13 +0100
0 - 1 - 0 lp.tokopediatop.pw/ 104.18.62.20
2019-01-22 20:45:24 +0100
0 - 2 - 0 webcompanion.com/download/download 104.17.112.51
2019-01-22 20:24:53 +0100
0 - 0 - 23 https://pay-btc.info/ 104.28.16.223
2019-01-22 20:20:28 +0100
0 - 0 - 4 upgrade01.sitey.me/ 104.18.134.142
2019-01-22 20:03:57 +0100
0 - 0 - 15 rensmarbacarl.tk/ 104.31.66.164

Last 10 reports on domain: chocolatey.org

Date UQ / IDS / BL URL IP
2019-01-17 16:06:55 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2019-01-07 12:35:33 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1 104.20.73.28
2018-12-31 17:50:50 +0100
0 - 0 - 0 chocolatey.org 104.20.74.28
2018-12-17 11:24:16 +0100
0 - 0 - 0 https://chocolatey.org 104.20.74.28
2018-12-13 17:29:57 +0100
0 - 0 - 0 https://chocolatey.org/install 104.20.74.28
2018-12-12 00:45:12 +0100
0 - 0 - 0 chocolatey.org 104.20.73.28
2018-12-11 07:50:31 +0100
0 - 0 - 0 chocolatey.org 104.20.73.28
2018-11-09 19:39:41 +0100
0 - 0 - 0 https://chocolatey.org/install.ps1%27%29%29%22 104.20.74.28
2018-10-30 23:54:39 +0100
0 - 0 - 0 chocolatey.org 104.20.74.28
2018-10-09 08:45:01 +0200
0 - 0 - 0 chocolatey.org 104.20.73.28


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (3)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 06 Oct 2018 03:41:27 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=114865, public, no-transform, must-revalidate
Last-Modified: Sat, 06 Oct 2018 01:16:38 GMT
Expires: Sun, 07 Oct 2018 13:16:38 GMT
Etag: "07d92468256607e3a7c7a5fcd2a07c725a3083a6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1776
Connection: close


--- Additional Info ---
Magic:  data
Size:   1776
Md5:    83a3fca9bdec1e5b497bd5ead9ac8624
Sha1:   07d92468256607e3a7c7a5fcd2a07c725a3083a6
Sha256: 386de9b103f9b0684fed389d5db4cd68ebde0bfe3d6b7b6342946b464c4b8db2
                                        
                                            GET /api/v2/package/NSSM/2.24.101.20180116 HTTP/1.1 
Host: chocolatey.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.20.74.28
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Date: Sat, 06 Oct 2018 03:41:28 GMT
Content-Length: 177
Connection: keep-alive
Set-Cookie: __cfduid=da79ff1b22a8ca3d5f4e2642a3181e2bf1538797287; expires=Sun, 06-Oct-19 03:41:27 GMT; path=/; domain=.chocolatey.org; HttpOnly
Cache-Control: private
Location: https://packages.chocolatey.org/NSSM.2.24.101.20180116.nupkg
Strict-Transport-Security: max-age=12960000
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 46551cc86e444291-OSL


--- Additional Info ---
Magic:  HTML document text
Size:   177
Md5:    886dc48007131e037989831ff75d9f86
Sha1:   ef1fff935ae7cba898cf8970cd22da935d8bffc6
Sha256: dcf654f008e83da4b079bc4a6235e5fe2d7b67d64143941beaf0b3f8df783c44
                                        
                                            GET /NSSM.2.24.101.20180116.nupkg HTTP/1.1 
Host: packages.chocolatey.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: __cfduid=da79ff1b22a8ca3d5f4e2642a3181e2bf1538797287

                                         
                                         104.20.74.28
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Date: Sat, 06 Oct 2018 03:41:28 GMT
Content-Length: 417537
Connection: keep-alive
x-amz-id-2: Zoj+6G7mP/dWne2TbL0ElhYQGoeiqC7pH6jxlK042FByBrC2d4puIm4mDOattddum2ps36aWFNM=
x-amz-request-id: 4AD92A640E3E0DF2
Last-Modified: Tue, 16 Jan 2018 16:34:46 GMT
Etag: "4997e9319a7cea960e731b7bdf25dec1"
CF-Cache-Status: REVALIDATED
Expires: Sat, 06 Oct 2018 07:41:28 GMT
Cache-Control: public, max-age=14400
Accept-Ranges: bytes
Strict-Transport-Security: max-age=12960000
X-Content-Type-Options: nosniff
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 46551ccb6a874273-OSL


--- Additional Info ---
Magic:  Zip archive data, at least v1.0 to extract
Size:   417537
Md5:    4997e9319a7cea960e731b7bdf25dec1
Sha1:   19249dc0dec2c07a38b8d719a48aceee191a1b24
Sha256: 6c6b1e287fb2ac6b04cfd32be2b9ed54a283cf0847fab2326e1b3961b512d340

Alerts:
  Blacklists:
    - fortinet: Malware