Domain > 254a.com

More information on this domain is in AlienVault OTX

Files that talk to 254a.com

MD5	A/V
5de8c552d5aa79450f9aca23bee6c566	[Trojan.Inject.HD] [Backdoor.Prosti.L] [Artemis!5DE8C552D5AA] [W32/Themida_Packed!Eldorado] [Backdoor.Trojan] [PUA.Packed.Themida-1] [Trojan.Win32.Scar.fuqm] [Sus/ComPack-M] [UnclassifiedMalware] [Win32.HLLW.Mistri.25] [Trojan.Backdoor.Prosti!IK] [Trojan/Scar.ch] [Backdoor:Win32/Prosti.L] [Trojan/Win32.Prosti] [Trojan.Backdoor.Prosti] [W32/Prosti.NDX] [Dropper.ErPack.AI]
24b24d3c5dd8aa087b7fd507fc8afa20	[Worm.Win32.Fujack!O] [W32/Fujacks.ah] [Worm.AutoRun] [Trojan-Downloader.Win32.Small] [Worm.Fujack!T8l/EwDWgE4] [W32/SelfStarterInternetTrojan!M] [W32.Fubalca] [Smalltroj.BFXG] [Trojan.Small-1570] [Worm.Win32.Fujack.av] [Trojan.Win32.Fujack.lwgy] [Trojan.DownLoader.20808] [Mal/Dropper-AB] [Worm.MyInfect.az.106496] [Win-Trojan/Xema.variant] [Virus.Win32.Heur.l] [Worm.Fujack] [Trj/CI.A] [PE:Worm.Win32.Autorun.fng!1075221508] [Trojan-PWS.Win32.OnLineGames] [W32/Fujack.AV] [Worm/Butileg.M] [Worm.Win32.Fujack.aq] [Virus.Win32.Viking.LF]
6b18a5c085c9beb8f262e09aae094060	[Worm.Win32.Fujack!O] [W32/Fujacks.ah] [Worm.AutoRun] [Trojan-Downloader.Win32.Small] [Worm.Fujack!T8l/EwDWgE4] [W32/SelfStarterInternetTrojan!M] [W32.Fubalca] [Smalltroj.BFXG] [Worm.Win32.Fujack.av] [Trojan.Win32.Fujack.lwgy] [Trojan.DownLoader.20808] [Mal/Dropper-AB] [Worm.MyInfect.az.106496] [Win-Trojan/Xema.variant] [Virus.Win32.Heur.l] [Worm.Fujack] [Trj/CI.A] [PE:Worm.Win32.Autorun.fng!1075221508] [Trojan-PWS.Win32.OnLineGames] [W32/Fujack.AV] [Worm/Butileg.M] [Worm.Win32.Fujack.AiNA] [Virus.Win32.Viking.LF]
3ccce94d979e925d13b16f7f1b99cbe6	[Type_VBS_Autorun] [VBS.Dunihi] [VBS_JENXCUS.NS] [VBS/Jenxcus-C] [UnclassifiedMalware] [VBS.Autoruner.161] [VBS/Clicker.nauzs] [Worm:VBS/Jenxcus.K] [Trojan.IEVC-3] [VBS/Autorun.BC.worm] [VBS/Kryptik.L]
f58fb6cfc42c049c1442d6ce54ea429d	[W32/new-malware!Maximus] [TR/Graftor.2081254] [Trojan.Packed.194] [Win32/DH{fGSBEiV+ICMsgRNcV04}] [Trojan-Ransom.Win32.Blocker] [Artemis!F58FB6CFC42C] [Trojan.Packed!N6hauVnIyeg] [WS.Reputation.1] [Trojan.Win32.Graftor.czubpq] [Heuristic.LooksLike.Win32.Suspicious.J] [Win32/Trojan.fad]
f0bc927feca28a458159a8c4c808a3a7	[W32/Sefnit.C] [Trojan.MulDrop4.11744] [W32/Sefnit.ZOEY-4762]
645d60825b362448151387d060593635	[W32.Clod9e1.Trojan.1d9a] [Trojan.Win32.DownLoader10.cqvkbc] [WS.Reputation.1] [HKTL_CLICKER] [Trojan.Win32.S.Clicker.649728] [UnclassifiedMalware] [Trojan.DownLoader10.26566] [SPR/Surfairy.A] [Trj/CI.A] [Trojan.SuspectCRC] [Malware_fam.NB] [Hacktool.Win32.RiskTool.77] [Win32/DH{DyAiJQ}]
de9d855c48d0801c2820d6b39ce3fb6a	[W32.Clod6b9.Trojan.0a6b] [Artemis!DE9D855C48D0] [Heur.Suspicious] [Trojan/Win32.Clicker] [Win32/FlowSpirit] [W32/FlowSpirit]
5989dc0d2666bb6425369bceb7f3810e	[W32/Sefnit.C] [Trojan.MulDrop4.11744] [W32/Sefnit.ZOEY-4762]
8f78b1665fd080ffc149f0ec7ec694cb
07a8dda271fc4d12fa2ce6f35936fec3	[Trojan.Html.Iframe.bwupbf] [TrojWare.JS.Iframe.GJ] [JS.IFrame.425] [Heuristic.LooksLike.HTML.Infected.H] [Exploit.HTML.IframeRef] [JS/Iframe.BMY!tr]
0106db8b1a382937be9d9e99155dc546	[Trojan-PSW.Win32.Tepfer!O] [Backdoor.Kelihos.F5] [Kelihos.BKDR] [Trojan.Win32.Hlux.dimrpg] [Win32.Backdoor.Hlux.Kc] [BackDoor.Slym.14056] [Backdoor:Win32/Kelihos.F] [Backdoor/Win32.Kelihos] [SScope.Malware-Cryptor.Hlux] [Backdoor.Win32.Hlux.AHwG] [Backdoor.Win32.Kelihos] [W32/Kryptik.BJWM!tr]

Whois

Property	Value
Name	PERFECT PRIVACY, LLC
Email	j82v39pj7zu@networksolutionsprivateregistration.com
Address	12808 Gran Bay Parkway West
Zip Code	32258
City	Jacksonville
State	FL
Country	US
Phone	+1.5707088780
NameServer	NS6.IPONWEB.NET
Created	2010-03-10 13:27:30
Changed	2015-01-29 00:56:13
Expires	2019-03-10 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-12-11	54.77.0.33 (ClassC)
2015-02-11	54.76.88.128 (ClassC)
2015-02-24	54.72.93.121 (ClassC)
2024-12-22	208.91.197.132 (ClassC)
2025-01-09	205.178.189.129 (ClassC)

HTTP/1.1 200 OKDate: Thu, 21 Mar 2024 10:07:08 GMTServer: ApacheSet-Cookie: vsid931vr458561229682056811; expiresTue, 20-Mar-2029 10:07:09 GMT; Max-Age157680000; path/; domain254a.com; HttpOnlyX-Adbloc

!DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01//EN http://www.w3.org/TR/html4/strict.dtd>html>head>link relpreconnect hrefhttps://delivery.consentmanager.net> link relpreconnect hrefhttps://cdn.consentmanager.net>                    script>window.cmp_stayiniframe  1; window.cmp_dontloadiniframe  true; if(!gdprAppliesGlobally in window){window.gdprAppliesGloballytrue}if(!(cmp_id in window)||window.cmp_id1){window.cmp_id0}if(!(cmp_cdid in window)){window.cmp_cdid21fdca2281833}if(!(cmp_params in window)){window.cmp_params}if(!(cmp_host in window)){window.cmp_hosta.delivery.consentmanager.net}if(!(cmp_cdn in window)){window.cmp_cdncdn.consentmanager.net}if(!(cmp_proto in window)){window.cmp_protohttps:}if(!(cmp_codesrc in window)){window.cmp_codesrc1}window.cmp_getsupportedLangsfunction(){var bDE,EN,FR,IT,NO,DA,FI,ES,PT,RO,BG,ET,EL,GA,HR,LV,LT,MT,NL,PL,SV,SK,SL,CS,HU,RU,SR,ZH,TR,UK,AR,BS;if(cmp_customlanguages in window){for(var a0;awindow.cmp_customlanguages.length;a++){b.push(window.cmp_customlanguagesa.l.toUpperCase())}}return b};window.cmp_getRTLLangsfunction(){var aAR;if(cmp_customlanguages in window){for(var b0;bwindow.cmp_customlanguages.length;b++){if(r in window.cmp_customlanguagesb&&window.cmp_customlanguagesb.r){a.push(window.cmp_customlanguagesb.l)}}}return a};window.cmp_getlangfunction(j){if(typeof(j)!boolean){jtrue}if(j&&typeof(cmp_getlang.usedlang)string&&cmp_getlang.usedlang!){return cmp_getlang.usedlang}var gwindow.cmp_getsupportedLangs();var c;var flocation.hash;var elocation.search;var alanguages in navigator?navigator.languages:;if(f.indexOf(cmplang)!-1){c.push(f.substr(f.indexOf(cmplang)+8,2).toUpperCase())}else{if(e.indexOf(cmplang)!-1){c.push(e.substr(e.indexOf(cmplang)+8,2).toUpperCase())}else{if(cmp_setlang in window&&window.cmp_setlang!){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d0;da.length;d++){c.push(ad)}}}}}if(language in navigator){c.push(navigator.language)}if(userLanguage in navigator){c.push(navigator.userLanguage)}var h;for(var d0;dc.length;d++){var bcd.toUppe

Subdomains

Date	Domain	IP
cdn.254a.com	2013-10-23	205.251.253.178
r.254a.com	2014-01-17	54.246.85.177
s.254a.com	2023-10-13	104.254.148.252
www.254a.com	2024-11-05	205.178.189.129

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 254a.com

Is this malicious?

Files that talk to 254a.com

Whois

DNS Resolutions

Port 80

Subdomains