Overview

URL https://www.zeusdatabase.com/
IP104.243.41.186
ASNAS20473 Choopa, LLC
Location United States
Report completed2018-11-12 15:51:02 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-12 2 www.zeusdatabase.com/ Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 104.243.41.186

Date UQ / IDS / BL URL IP
2019-02-18 15:32:41 +0100
0 - 0 - 2 cpanel.lcloud.link/ 104.243.41.186
2019-02-16 08:32:31 +0100
0 - 0 - 1 www.octapharmceutical.com 104.243.41.186
2019-02-16 08:24:57 +0100
0 - 0 - 1 www.octapharmceutical.com/byte/fre.php 104.243.41.186
2019-02-15 23:48:48 +0100
0 - 0 - 1 bellaiva.com/x/163vi2018.zip 104.243.41.186
2019-02-15 23:48:38 +0100
0 - 0 - 1 bellaiva.com/1jdx/COUNTDOWN.zip 104.243.41.186
2019-02-15 23:48:35 +0100
0 - 0 - 1 bellaiva.com/XxpH1/mailboxapp.zip 104.243.41.186
2019-02-15 01:45:26 +0100
0 - 0 - 1 bellaiva.com/XxpH1/mailboxapp.zip 104.243.41.186
2019-02-15 01:31:58 +0100
0 - 0 - 1 bellaiva.com/x/163vi2018.zip 104.243.41.186
2019-02-15 01:31:55 +0100
0 - 0 - 1 bellaiva.com/1jdx/COUNTDOWN.zip 104.243.41.186
2019-02-12 15:55:58 +0100
0 - 0 - 3 helpsecurityy.com/64eafa09 104.243.41.186

Last 10 reports on ASN: AS20473 Choopa, LLC

Date UQ / IDS / BL URL IP
2019-02-23 18:03:41 +0100
0 - 1 - 0 hurgador2.rssing.com/chan-17091621/all_p61.html 104.243.40.178
2019-02-23 17:05:58 +0100
0 - 0 - 6 mpowerglobal.co.th/ 45.76.153.229
2019-02-23 16:48:45 +0100
0 - 1 - 0 https://voucherwinner.icu/cashreward/ 45.76.125.152
2019-02-23 16:43:20 +0100
0 - 0 - 1 down.dollar2018.com/api/3e83dbdd7310b65ee22d7 (...) 208.167.239.202
2019-02-23 16:34:45 +0100
0 - 2 - 0 https://voucherwinner.icu/cashreward/ 45.76.125.152
2019-02-23 16:16:00 +0100
0 - 0 - 1 onjack.com.br/wp-content/themes/thestars/home (...) 45.77.122.234
2019-02-23 16:06:27 +0100
0 - 0 - 5 menontonbioskop.com/film-baru/mark-wahlberg-s (...) 45.77.47.37
2019-02-23 15:06:00 +0100
0 - 0 - 6 mpowerglobal.co.th/ 45.76.153.229
2019-02-23 14:49:14 +0100
0 - 0 - 1 bdlqp.com/ 45.76.71.206
2019-02-23 14:03:09 +0100
0 - 0 - 1 www.20192019888.com/WH2019/Service.bin 45.77.147.57

No other reports on domain: zeusdatabase.com



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (6)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         80.239.159.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Mon, 12 Nov 2018 08:55:25 GMT
Etag: 42E2501026561F599E37C1BC0D9CAE9CEE7A7293
X-OCSP-Responder-ID: rmdccaocsp25
Content-Length: 472
Cache-Control: public, no-transform, must-revalidate, max-age=582896
Expires: Mon, 19 Nov 2018 08:45:24 GMT
Date: Mon, 12 Nov 2018 14:50:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   472
Md5:    f6e3005ecd42216ee4832bf9e2572795
Sha1:   42e2501026561f599e37c1bc0d9cae9cee7a7293
Sha256: 21ea08b04c18581e58fd5a90a50f00738f5d822c389e16e3ce10b7da57d83e4c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         80.239.159.24
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 08 Nov 2018 21:27:34 GMT
Etag: 388A999929FCBEF82714F2D556B81DAD209F6E36
X-OCSP-Responder-ID: rmdccaocsp23
Content-Length: 728
Cache-Control: public, no-transform, must-revalidate, max-age=282385
Expires: Thu, 15 Nov 2018 21:16:53 GMT
Date: Mon, 12 Nov 2018 14:50:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   728
Md5:    0ff252b0c60b76319a5b3e6138088b19
Sha1:   388a999929fcbef82714f2d556b81dad209f6e36
Sha256: 817ec5a964ba119a0d028f7e94ae9a78fa60be2c3140ab562c565e91bcffbb29
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         80.239.159.56
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Apache
Last-Modified: Thu, 08 Nov 2018 21:27:34 GMT
Etag: 52B08DA27AC7C6115961987B2C4F7E9CBF19E849
X-OCSP-Responder-ID: rmdccaocsp27
Content-Length: 471
Cache-Control: public, no-transform, must-revalidate, max-age=282423
Expires: Thu, 15 Nov 2018 21:17:31 GMT
Date: Mon, 12 Nov 2018 14:50:28 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   471
Md5:    55c8029448bdeb7cddbdc180bf969536
Sha1:   52b08da27ac7c6115961987b2c4f7e9cbf19e849
Sha256: 1e7fc0a17968ce2ec6d603191a76a66ee9a0970041cb9b10d9891e43dbd0ef84
                                        
                                            GET / HTTP/1.1 
Host: www.zeusdatabase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.243.41.186
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
X-Powered-By: PHP/5.6.38
Content-Length: 37
Content-Encoding: gzip
Vary: Accept-Encoding
Date: Mon, 12 Nov 2018 14:50:29 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,37,38,39"
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   37
Md5:    4aa01b1d63e78b458b430fffea412d1b
Sha1:   d1b0e3150479b31298eec018abf159e8aad8e24f
Sha256: db9b8742eaa9baf3cba49e9c5801a50f30a83e8838b15a7f0c68a49643e0787c

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.zeusdatabase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.243.41.186
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 1148
Date: Mon, 12 Nov 2018 14:50:29 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,37,38,39"
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1148
Md5:    60ac8e889a1c2af330432bf793164a14
Sha1:   3a92d2a4e959dfdffb53d106689682efcf23178b
Sha256: 70c65bd0e084398a87baa298c1fafa52afff402096cb350d563d309565c07e83
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.zeusdatabase.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         104.243.41.186
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
Pragma: no-cache
Content-Length: 1148
Date: Mon, 12 Nov 2018 14:50:32 GMT
Accept-Ranges: bytes
Server: LiteSpeed
Alt-Svc: quic=":443"; ma=2592000; v="35,37,38,39"
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   1148
Md5:    60ac8e889a1c2af330432bf793164a14
Sha1:   3a92d2a4e959dfdffb53d106689682efcf23178b
Sha256: 70c65bd0e084398a87baa298c1fafa52afff402096cb350d563d309565c07e83