Domain > any-s.net

More information on this domain is in AlienVault OTX

Files that talk to any-s.net

MD5	A/V
29bc940ee9a3eac0149ed07dd5753710	[W32.AndromPlwbahC.Trojan] [TrojanDownloader.Cutwail.r3] [Trojan.Injector!WWqNbSPGUtU] [Backdoor.Trojan] [Cutwail.DCN] [TROJ_SPNV.01KP14] [Trojan.Win32.Cutwail.fal] [Win32.Trojan.Cutwail.Htmq] [UnclassifiedMalware] [BackDoor.Andromeda.559] [BehavesLike.Win32.Dropper.nh] [Troj/MSIL-AZF] [W32/Backdoor.DYFX-3160] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail] [RDN/Spybot.bfr!o] [TScope.Trojan.MSIL] [Trj/Chgt.N] [Trojan.Win32.Cutwail] [MSIL/GLQ!tr] [MSIL5.BVOW] [Trojan.Win32.Cutwail.ATJx]
548ed1c75d8e9419f3cecc0f5dcfa218	[Trojan.Inject.IA] [Patched] [Trojan.DownLoad.64914] [Win32/Wigon.PI] [W32/Cutwail.DPV!tr] [Trojan.Win32.Cutwail.dpv] [Trojan.Cutwail]
9ab0a68d8ad9e102ccd7fd0a067ecd9d	[W32.HfsAutoA.BDEF] [Trojan.Crypt.NKN] [W32/Trojan3.MQR] [Backdoor.Win32.Androm.fptk] [Trojan.Win32.Andromeda.djycfa] [Virus.Win32.Heur.c] [PE:Malware.XPACK-HIE/Heur!1.9C48] [BackDoor.Andromeda.404] [BehavesLike.Win32.PWSZbot.cc] [Mal/VB-AOE] [W32/Trojan.MZKU-6435] [Trojan/Win32.Androm] [Trojan.Win32.Injector.bBQXM] [Backdoor.Win32.Androm] [VBCrypt.IOJ]
90ba8b4cd89a5fd23bb0c3f17a759ba5	[Trojan.Inject.r3] [Trojan.Injector!xSxmY/oTY4I] [Trojan.Win32.Inject.tfmg] [Trojan.Win32.Inject.dhtgak] [Win32.Trojan.Inject.Hssg] [UnclassifiedMalware] [Trojan.DownLoad.64914] [Trojan.Inject.Win32.108354] [BehavesLike.Win32.Dropper.nh] [Troj/Msil-ANY] [W32/Trojan.GRSK-5893] [Trojan/Win32.Inject] [TrojanDownloader:Win32/Cutwail] [Win-Trojan/MDA.630F094C] [RDN/Spybot.bfr!o] [Trojan.Inject] [Trj/Chgt.J] [Evilware.Outbreak] [W32/Inject.TFMG!tr] [MSIL5.APAS] [Trojan.Win32.Inject.aJp] [Win32/Trojan.9d7]
54c65013e0c6395f49c1bee35327f8fe	[Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan/Wigon.pi] [Trojan.Inject.IA] [Trojan.Win32.DownLoad.dnpdpk] [New] [Suspicious.Cloud.5] [Trojan.Win32.Cutwail.dpv] [Trojan.Wigon!ntSxypTAolk] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.DownLoad.64914] [Patched] [Trojan/Cutwail.if] [W32/Cutwail.NLQ!tr] [Win32.Troj.Cutwail.d.(kcloud)] [Trojan.Inject.IA] [Backdoor/Win32.Pushdo] [Trojan.Cutwail] [Trojan.Inject.IA]

Whois

Property	Value
Email	ken@any-s.net
NameServer	NS2.DNS.NE.JP
Created	2002-03-19 00:00:00
Changed	2015-02-22 00:00:00
Expires	2016-03-19 00:00:00
Registrar	JAPAN REGISTRY SERVI

DNS Resolutions

Date	IP Address
2014-09-02	202.181.99.47 (ClassC)
2018-04-30	72.52.4.122 (ClassC)
2018-05-03	61.205.122.234 (ClassC)
2019-06-20	54.65.172.3 (ClassC)
2019-06-24	52.25.92.0 (ClassC)
2020-04-22	108.186.180.121 (ClassC)
2020-09-08	3.234.181.234 (ClassC)
2020-11-01	96.126.123.244 (ClassC)
2020-11-01	45.33.23.183 (ClassC)
2020-11-21	45.79.19.196 (ClassC)
2021-02-03	45.33.2.79 (ClassC)
2021-03-09	45.56.79.23 (ClassC)
2021-05-02	198.58.118.167 (ClassC)
2022-05-01	72.14.178.174 (ClassC)
2022-05-08	45.33.30.197 (ClassC)
2025-01-22	108.170.12.50 (ClassC)
2025-03-18	185.104.28.27 (ClassC)
2025-08-12	103.224.182.253 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Thu, 20 Jun 2019 01:55:13 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

!doctype html>html langjp>head>	meta charsetUTF-8>	meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1, user-scalableno>	title>any-s.net is Expired or Suspended./title>	link relstylesheet typetext/css hrefstyle.css>	!--if gte IE 9>	style typetext/css>		.gradient {			filter: none;		}	/style>	!endif-->/head>!--body classblackboard>-->body classtokyo1>a hrefhttps://www.colorfulbox.jp/?adrefnsexp_ad&argumentDLHtsrgz&dmaia5b5a809168886 target_blank classbnrLink>img srchttps://www.colorfulbox.jp/common/img/bnr/colorfulbox_bnr01.png alt画像>/a>div classinvalid>	h1>		img srcimg/img01.png alt画像>		p>ドメインが無効な状態です。/p>	/h1>	div>		p classtxt01>「 span>any-s.net/span> 」のページは、ドメインが無効な状態です。br>ウェブサイト管理者の方はa hrefhttps://www.value-domain.com/modall.php target_blank relnofollow>こちらから変更・更新/a>を行ってください。/p>		p classtxt02>「 any-s.net 」is Expired or Suspended. a hrefhttps://www.value-domain.com/modall.php target_blank relnofollow>The WHOIS is here./a>/p>	/div>/div>footer>a hrefhttps://www.value-domain.com/ target_blank relnofollow>img srcimg/logo.png altバリュードメイン>/a>/footer>script src/FitText.js-master/jquery.min.js>/script>script src/FitText.js-master/jquery.fittext.js>/script>script typetext/javascript>//	$(body.blackboard .host).fitText(2.2, { minFontSize: 10px, maxFontSize: 100px });//	$(body.blackboard .after-host).fitText(3, { minFontSize: 10px, maxFontSize: 100px });//	$(body.sketchbook header).fitText(3.2, { minFontSize: 10px, maxFontSize: 80px });//	$(body.tokyo header).fitText(5, { minFontSize: 10px, maxFontSize: 80px });	$(body header).fitText(5.6, { minFontSize: 8px, maxFontSize: 24px });/script>!--if lt IE 9>script src/FitText.js-master/html5.js>/script>!endif-->script>  (function(i,s,o,g,r,a,m){iGoogleAnalyticsObjectr;irir||function(){  (ir.qir.q||).push(arguments)},ir.l1*new Date();as.createElement(o),  ms.getElementsByTagName(o)0;a.async1;a.srcg;m.pa

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > any-s.net

Is this malicious?

Files that talk to any-s.net

Whois

DNS Resolutions

Port 80