Domain > amorforever.portal.lc

More information on this domain is in AlienVault OTX

Files that talk to amorforever.portal.lc

MD5	A/V
9c4a303004bfbac8ccab54674d988b16	[Heuristic.BehavesLike.Win32.Suspicious-BAY.S] [Trojan/Chifrax.fjn] [Win32/Spy.Banker.ZWK]
2ac20dd2b47929ed3bab1801043a9af8	[Spyware] [Trojan.Win32.Badur.czw] [Trojan.DownLoad3.26643] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Win32/Virut.bn] [VirTool:Win32/Obfuscator.AIG] [W32/Zbot.LI!tr]

Whois

Property	Value
Name	QE GmbH & Co. KG
Organization	QE GmbH & Co. KG
Email	info@birawu.com
Address	Martinistr. 3
Zip Code	49080
City	Osnabrueck
State	DE
Country	DE
Phone	+49.54140666180
Fax	+49.54140666189
NameServer	ns2.subdomain.com
Created	2007-11-12 12:38:30
Changed	2014-11-12 19:25:06
Expires	2015-11-12 12:38:30
Registrar	InternetX (R24-LRCC)

DNS Resolutions

Date	IP Address
2013-08-15	78.46.38.245 (ClassC)
2013-08-16	46.4.149.202 (ClassC)
2019-08-15	144.76.162.245 (ClassC)
2025-01-14	95.217.58.108 (ClassC)

Port 80

HTTP/1.0 503 Service UnavailableDate: Thu, 15 Aug 2019 23:32:15 GMTServer: Apache/2.4.10 (Debian)Retry-After: 604800Connection: closeContent-Type: text/html; charsetUTF-8

!DOCTYPE html>html langen>    head>        meta charsetutf-8>        meta http-equivX-UA-Compatible contentIEedge>        meta nameviewport contentwidthdevice-width, initial-scale1>        meta http-equivcontent-type contenttext/html; charsetutf-8>        meta namerobots contentNOINDEX, NOFOLLOW>        meta namedescription contentThe domain amorforever.portal.lc is still free>        title>amorforever.portal.lc is still free/title>        script typetext/javascript>  var _gaq  ;  _gaq.push(_setAccount, UA-35990445-8);  _gaq.push(_setDomainName, amorforever.portal.lc);  _gaq.push(_setCustomVar, 1, bereich, Free, 3);  _gaq.push(_setCustomVar, 2, Domain, portal.lc, 3);  _gaq.push(_setCustomVar, 5, Subdomain, amorforever.portal.lc, 3);  _gaq.push(_setCustomVar, 4, Domain-Target, portal.lc, 3);  _gaq.push(_gat._anonymizeIp);  _gaq.push(_trackPageview);  (function() {    var ga  document.createElement(script); ga.type  text/javascript; ga.async  true;    ga.src  (https:  document.location.protocol ? https://ssl : http://www) + .google-analytics.com/ga.js;    var s  document.getElementsByTagName(script)0; s.parentNode.insertBefore(ga, s);  })();  _gaq  ;/script>        link href/assets/custom.css relstylesheet>                !--if lt IE 9>            script srchttps://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js>/script>            script srchttps://oss.maxcdn.com/respond/1.4.2/respond.min.js>/script>        !endif-->    /head>    body>        div idwrapper>            div idmain>div idheaders>                div idheader1>                    div idlogo>                        div classwidth-50 stylefloat: left;>                            a hrefhttp://www.subdomain.com/redirect/portal.lc/ target_top>                                img srchttp://www.subdomain.com/redirect/portal.lc/static/images/logo.gif altportal.lc logo>                            /a>                        /div>                    /div>                /div>                div idbody>                    div idcontent>                        div c

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > amorforever.portal.lc

Is this malicious?

Files that talk to amorforever.portal.lc

Whois

DNS Resolutions

Port 80