Overview

URL https://www.zeusdatabase.com/
IP104.243.41.186
ASNAS20473 Choopa, LLC
Location United States
Report completed2018-11-12 15:51:02 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-12 2 www.zeusdatabase.com/ Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.243.41.186

Date UQ / IDS / BL URL IP
2019-05-16 01:13:40 +0200
0 - 0 - 2 charley-online.com/back/2019/index.php 104.243.41.186
2019-05-06 11:03:08 +0200
0 - 0 - 3 dmvhomehealthcare.com/weee/OURTIME.zip 104.243.41.186
2019-04-18 03:25:44 +0200
0 - 0 - 29 atlasakakusnews.com/ 104.243.41.186
2019-04-16 15:48:46 +0200
0 - 0 - 3 ebay-motors.vehicle-lists.com/pjj 104.243.41.186
2019-04-03 23:17:15 +0200
0 - 0 - 4 https://wldl9hba.com/wapp 104.243.41.186
2019-03-30 07:05:22 +0100
0 - 0 - 3 upgrd.net/bigshuju 104.243.41.186
2019-03-30 06:09:21 +0100
0 - 0 - 3 upgrd.net/rll 104.243.41.186
2019-03-26 19:00:37 +0100
0 - 1 - 0 dingbangassociates.com/wp-includes/wTDJQ-6dV4 (...) 104.243.41.186
2019-03-21 04:30:15 +0100
0 - 0 - 3 husdz.com/PO53..exe 104.243.41.186
2019-03-20 23:32:01 +0100
0 - 0 - 3 husdz.com/PO53..exe 104.243.41.186

Last 10 reports on ASN: AS20473 Choopa, LLC

Date UQ / IDS / BL URL IP
2019-05-21 19:36:33 +0200
0 - 0 - 1 trafficlinksite.com/sgrtjytw/DiskScanro.exe 45.63.8.68
2019-05-21 19:25:26 +0200
0 - 0 - 1 jeyuilov2.com/flashplayer_goldedition.exe 45.77.63.96
2019-05-21 19:25:10 +0200
0 - 0 - 1 jeyuilov2.com/FlashPlayer_goldedition.exe 45.77.63.96
2019-05-21 19:02:53 +0200
0 - 2 - 0 https://voucherwinner.icu/cashreward/ 45.76.125.152
2019-05-21 18:13:19 +0200
0 - 0 - 1 weneednewtalent.com/ 66.55.143.20
2019-05-21 16:43:31 +0200
0 - 0 - 0 https://www.enaure.co/javas.js?v\=2 45.77.199.55
2019-05-21 16:39:51 +0200
0 - 1 - 0 sego365.xyz/ 45.76.242.94
2019-05-21 15:13:25 +0200
0 - 0 - 0 45.76.124.112 45.76.124.112
2019-05-21 15:10:50 +0200
0 - 2 - 0 https://voucherwinner.icu/cashreward/ 45.76.125.152
2019-05-21 14:22:16 +0200
0 - 0 - 0 www.ailingyi.com/tianmingshenxiang/231129.html 45.32.253.41

No other reports on domain: zeusdatabase.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (6)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         80.239.159.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 12 Nov 2018 08:55:25 GMT
Etag: 42E2501026561F599E37C1BC0D9CAE9CEE7A7293
X-OCSP-Responder-ID: rmdccaocsp25
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=582896
Expires: Mon, 19 Nov 2018 08:45:24 GMT
Date: Mon, 12 Nov 2018 14:50:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    f6e3005ecd42216ee4832bf9e2572795
Sha1:   42e2501026561f599e37c1bc0d9cae9cee7a7293
Sha256: 21ea08b04c18581e58fd5a90a50f00738f5d822c389e16e3ce10b7da57d83e4c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         80.239.159.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 08 Nov 2018 21:27:34 GMT
Etag: 388A999929FCBEF82714F2D556B81DAD209F6E36
X-OCSP-Responder-ID: rmdccaocsp23
Content-Length: 728
Cache-Control: public, no-transform, must-revalidate, max-age=282385
Expires: Thu, 15 Nov 2018 21:16:53 GMT
Date: Mon, 12 Nov 2018 14:50:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   728
Md5:    0ff252b0c60b76319a5b3e6138088b19
Sha1:   388a999929fcbef82714f2d556b81dad209f6e36
Sha256: 817ec5a964ba119a0d028f7e94ae9a78fa60be2c3140ab562c565e91bcffbb29
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.56
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 08 Nov 2018 21:27:34 GMT
Etag: 52B08DA27AC7C6115961987B2C4F7E9CBF19E849
X-OCSP-Responder-ID: rmdccaocsp27
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=282423
Expires: Thu, 15 Nov 2018 21:17:31 GMT
Date: Mon, 12 Nov 2018 14:50:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    55c8029448bdeb7cddbdc180bf969536
Sha1:   52b08da27ac7c6115961987b2c4f7e9cbf19e849
Sha256: 1e7fc0a17968ce2ec6d603191a76a66ee9a0970041cb9b10d9891e43dbd0ef84
                                        
                                            GET / HTTP/1.1 
Host: www.zeusdatabase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.243.41.186
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Powered-By: PHP/5.6.38
Content-Length: 37
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 12 Nov 2018 14:50:29 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,37,38,39"
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   37
Md5:    4aa01b1d63e78b458b430fffea412d1b
Sha1:   d1b0e3150479b31298eec018abf159e8aad8e24f
Sha256: db9b8742eaa9baf3cba49e9c5801a50f30a83e8838b15a7f0c68a49643e0787c

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.zeusdatabase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.243.41.186
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 1148
Date: Mon, 12 Nov 2018 14:50:29 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,37,38,39"
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1148
Md5:    60ac8e889a1c2af330432bf793164a14
Sha1:   3a92d2a4e959dfdffb53d106689682efcf23178b
Sha256: 70c65bd0e084398a87baa298c1fafa52afff402096cb350d563d309565c07e83
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.zeusdatabase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.243.41.186
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 1148
Date: Mon, 12 Nov 2018 14:50:32 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,37,38,39"
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1148
Md5:    60ac8e889a1c2af330432bf793164a14
Sha1:   3a92d2a4e959dfdffb53d106689682efcf23178b
Sha256: 70c65bd0e084398a87baa298c1fafa52afff402096cb350d563d309565c07e83