ZeuS Tracker :: C&C pharmaspan.com

The list below shows all ZeuS configs, ZeuS binaries, ZeuS dropzones and FakeURLs which are hosted on pharmaspan.com.

Live Information

ZeuS C&C:pharmaspan.com
Malware:ZeuS
IP address:109.199.98.63
Host status:online
Uptime:838:59:59
Hostname:vm1573.sgvps.net
SBL:SBL260553
AS number:32475
AS name:SINGLEHOP-INC - SingleHop
Country:- United States (US)
Level:2 (hijacked webserver)
Sponsoring registrar:DNC HOLDINGS, INC.
Nameserver(s):ns1.vm1573.sgvps.net | ns2.vm1573.sgvps.net
Date added:2015-06-28
Last checked:2018-05-07
Last updated:never
BL status:This host is being published on the ZeuS Blocklist!

ZeuS ConfigURLs on this C&C

DateaddedZeuS ConfigURLStatusVBuilderFilesizeMD5 hashHTTP StatusFile download
2015-06-28pharmaspan.com/js/MOM/config.jpgoffline2n/a65'635c4442328f75ee995fe2a903054715128500- download

ZeuS BinaryURLs on this C&C

DateaddedZeuS BinaryURLStatusFilesizeMD5 hashAnubisVirustotalHTTP StatusFile download

none

ZeuS DropURLs (Dropzones) on this C&C

DateaddedDropURLStatusHTTP Status
2015-06-28pharmaspan.com/js/MOM/gate.phpoffline500

FakeURLs referenced by ZeuS Configs

ZeuS Config MD5FakeURLProtocol