ZeuS Tracker :: Monitor

The list below shows all ZeuS configs, ZeuS binaries, ZeuS dropzones and FakeURLs which are hosted on front.postmaster.services.

Live Information

ZeuS C&C:front.postmaster.services
Malware:Citadel
IP address:104.247.219.41
Host status:online
Uptime:766:31:48
Hostname:n/a
SBL:Not listed
AS number:46261
AS name:QUICKPACKET - QuickPacket, LLC
Country:- United States (US)
Level:4 (Unknown / not categorized)
Sponsoring registrar:n/a
Nameserver(s):a.root-servers.net | b.root-servers.net | c.root-servers.net | d.root-servers.net | e.root-servers.net | f.root-servers.net | g.root-servers.net | h.root-servers.net | i.root-servers.net | j.root-servers.net | k.root-servers.net | l.root-servers.net | m.root-servers.net
Date added:2018-05-24
Last checked:2018-06-12
Last updated:never
BL status:This host is being published on the ZeuS Blocklist!

ZeuS ConfigURLs on this C&C

DateaddedZeuS ConfigURLStatusVBuilderFilesizeMD5 hashHTTP StatusFile download
2018-05-24front.postmaster.services/fresh-old/at/file.phpoffline2n/a47'024c0cfd8e45b9c98f7bd1f155cfe65a6b3500- download

ZeuS BinaryURLs on this C&C

DateaddedZeuS BinaryURLStatusFilesizeMD5 hashAnubisVirustotalHTTP StatusFile download

none

ZeuS DropURLs (Dropzones) on this C&C

DateaddedDropURLStatusHTTP Status
2018-05-24front.postmaster.services/fresh-old/at/cache.phpoffline500

FakeURLs referenced by ZeuS Configs

ZeuS Config MD5FakeURLProtocol