Domain > answerdirect.net

More information on this domain is in AlienVault OTX

Files that talk to answerdirect.net

MD5	A/V
603616cd47e54b7d7f76820989130918	[Win32/Tnega.ILARAKC] [Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Troj]
8390e2e83066a0dc77665803bb093197	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!8390E2E83066] [Troj/Wonton-FE]
53742e4adfef62485929ba29c24b416a	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!53742E4ADFEF] [Mal/Zbot-SJ]
159cb9eddccb8b124eecad12fa2771e7	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Mal/Zbot-SJ]
6605ac8ee09006aeaa6c7957dcbd43e2	[W32/Trojan.YNRU-1822] [Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!6605AC8EE090] [Troj/Wonton-FE]
69c6a7684b7f1b71c6acfa9d041dd6db	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!69C6A7684B7F]
a58053a9976ee80aa9b15cd432b88c76	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!A58053A9976E] [Mal/Zbot-SJ]
d82fe7ca99bfcf07aeb0ac57922c4b5f	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!D82FE7CA99BF] [Troj/Wonton-FE]
a8bf402fbf3950f5df58f909cd501916	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!A8BF402FBF39] [Troj/Wonto]
1790ba0268af28a17717de9ede7425f4	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!1790BA0268AF] [Troj/Wonton-FE]
202321302fb9af434f9820f64ae417f1	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!202321302FB9] [Mal/Zbot-SJ]
4bd73c92fddfde51477f0146d2c04d0c	[Trojan.Win32.Dynamer] [Troj/Bckdr-RRM]
05e39141eaf21d4d2d14bdbb05294e79	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!05E39141EAF2] [Troj/Wonto]
7255f22f7c187ec17f30e3515dbd52ee	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Trojan-FEMT!7255F22F7C18] [Mal/Zbot-SJ]

Whois

Property	Value
NameServer	NS2.PF1HOSTING.NET
Created	2003-02-28 00:00:00
Changed	2015-03-01 00:00:00
Expires	2016-02-28 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-05-09	69.73.130.134 (ClassC)
2019-09-05	69.73.182.127 (ClassC)
2024-06-15	188.114.96.1 (ClassC)
2024-06-15	188.114.97.1 (ClassC)
2025-12-03	172.67.163.200 (ClassC)
2026-01-14	104.21.15.189 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Thu, 05 Sep 2019 15:09:38 GMTServer: ApacheVary: User-AgentLast-Modified: Fri, 16 Apr 2010 07:57:47 GMTAccept-Ranges: bytesContent-Length: 2803Content-Type: text/html

html xmlnshttp://www.w3.org/1999/xhtml xml:langen langen>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1 />title>Answer Direct/title>META namedescription content24 Hour live Answering Service.>META namekeywords contentSmall business answering service, 24 hr secretary, Internet answering service, 24 hr medical answering service, Professional answer service CA, bilingual answer service, SF 24 hr phone service, Reliable answering service, Medical 24 hour messenger service, 800 answer service, Year round secretary, After hours receptionist, Call answering service, Toll free answering service, Live 24 hr answering service, Live after hours messenger services, Medical answer service, Customized answer service CA, Live bilingual answer service, Answering service, Appointment scheduling, Catalog Orders, Order taking>script languagejavascript>AC_FL_RunContent  0;/script>script srcAC_RunActiveContent.js languagejavascript>/script>/head>body bgcolor#000000>!--urls used in the movie-->!--text used in the movie-->!--p alignleft>font facetahoma size12 color#ffffff letterSpacing0.000000 kerning0>loading... /font>/p>p alignleft>/p>-->!-- saved from url(0013)about:internet -->script languagejavascript>	if (AC_FL_RunContent  0) {		alert(This page requires AC_RunActiveContent.js.);	} else {		AC_FL_RunContent(			codebase, http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version8,0,0,0,			width, 100%,			height, 100%,			src, 18959,			quality, high,			pluginspage, http://www.macromedia.com/go/getflashplayer,			align, middle,			play, true,			loop, true,			scale, showall,			wmode, window,			devicefont, false,			id, 18959,			bgcolor, #000000,			name, 18959,			menu, true,			allowFullScreen, false,			allowScriptAccess,sameDomain,			movie, 18959,			salign, 			); //end AC code	}/script>noscript>object classidclsid:d27cdb6e-ae6d-11cf-96b8-444553540000 codebasehttp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version8,0,0,0 width100% height100% id18959 alignmiddle>  param nameallowScript

Port 443

HTTP/1.1 200 OKDate: Thu, 05 Sep 2019 15:09:38 GMTServer: ApacheVary: User-AgentLast-Modified: Fri, 16 Apr 2010 07:57:47 GMTAccept-Ranges: bytesContent-Length: 2803Content-Type: text/html

Subdomains

Date	Domain	IP
www.answerdirect.net	2019-09-21	69.73.182.127

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]