ZeuS Tracker :: C&C noonepa.tk

The list below shows all ZeuS configs, ZeuS binaries, ZeuS dropzones and FakeURLs which are hosted on noonepa.tk.

Live Information

ZeuS C&C:noonepa.tk
Malware:Citadel
IP address:
Host status:offline
Uptime:838:59:59
Hostname:n/a
SBL:Not listed
AS number:
AS name:
Country: 
Level:4 (Unknown / not categorized)
Sponsoring registrar:n/a
Nameserver(s):n/a
Date added:2013-12-26
Last checked:2018-05-07
Last updated:2015-07-10
BL status:This host is being published on the ZeuS Blocklist!

ZeuS ConfigURLs on this C&C

DateaddedZeuS ConfigURLStatusVBuilderFilesizeMD5 hashHTTP StatusFile download
2013-12-26noonepa.tk/ugonil/control/power/file.phpoffline2n/a5'34431496debcf7e71d7185b3cfa6cf2a5ef500- download
2013-12-26noonepa.tk/linda/control/power/file.phpoffline2n/a5'344c136b2298c31c7e71d3ba28532051fe7500- download
2013-12-26noonepa.tk/adil/control/power/file.phpoffline2n/a5'34474b55687187efd25c86c3fb3ce7db300500- download
2013-12-26noonepa.tk/anayo/control/power/file.phpoffline2n/a5'344a8db58d903fd1a0aefa88b48d43bbae1500- download

ZeuS BinaryURLs on this C&C

DateaddedZeuS BinaryURLStatusFilesizeMD5 hashAnubisVirustotalHTTP StatusFile download

none

ZeuS DropURLs (Dropzones) on this C&C

DateaddedDropURLStatusHTTP Status
2013-12-26noonepa.tk/ugonil/control/power/gate.phpoffline500
2013-12-26noonepa.tk/linda/control/power/gate.phpoffline500
2013-12-26noonepa.tk/adil/control/power/gate.phpoffline500
2013-12-26noonepa.tk/anayo/control/power/gate.phpoffline500

FakeURLs referenced by ZeuS Configs

ZeuS Config MD5FakeURLProtocol

Historical information

Domain History

ChangedateHostIP addressAS numberAS nameCountry
2015-07-10noonepa.tk0
-
2013-12-27noonepa.tk108.162.197.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-27noonepa.tk108.162.196.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-27noonepa.tk108.162.197.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-27noonepa.tk108.162.196.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-27noonepa.tk108.162.197.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-27noonepa.tk108.162.196.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-27noonepa.tk108.162.197.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-27noonepa.tk108.162.196.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-26noonepa.tk108.162.197.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-26noonepa.tk108.162.196.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-26noonepa.tk108.162.197.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-26noonepa.tk108.162.196.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-26noonepa.tk108.162.197.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-26noonepa.tk108.162.196.3013335CLOUDFLARENET - CloudFlare, Inc.
-
2013-12-26noonepa.tk108.162.197.3013335CLOUDFLARENET - CloudFlare, Inc.
-

# of rows: 16