Domain > bayou.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to bayou.com

MD5	A/V
0d4fa9360c4139d1a33a6203f510f886	[HW32.CDB.07a1] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cymqun] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.cri] [Backdoor.Hlux!tlFvhPzYgZ0] [Win32.Backdoor.Hlux.Glz] [Backdoor.Win32.Hlux.DUHE] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Trojan.Crypt] [W32/Hlux.CCCY!tr.bdr] [Crypt_s.GRA] [Backdoor.Win32.Hlux.aNkU]

Whois

Property	Value
NameServer	NSB.IDSNO.NET
Created	1994-07-07 00:00:00
Changed	2015-06-09 00:00:00
Expires	2016-07-06 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2023-10-23	207.29.219.108 (ClassC)
2024-05-22	15.197.142.173 (ClassC)
2024-06-04	3.33.152.147 (ClassC)
2024-12-21	15.197.225.128 (ClassC)
2025-01-24	3.33.251.168 (ClassC)

HTTP/1.0 200 OKServer: DManagerMIME-version: 1.0WWW-Authenticate: Basic realmsurgemail.huntbrothers.comDate: Sun, 27 Aug 2023 02:40:59 GMTContent-type: text/htmlSet-Cookie: webmail_lang-bayou.comEngli

!doctype html>!-- Start of login.htm -->!-- delayed after doctype-->html>head>  meta http-equivContent-Type contenttext/html; charsetUTF-8/>  meta nameviewport contentwidthdevice-width, initial-scale1.0 />link idthe_css relstylesheet typetext/css href/surgeweb/5911671622/custom/login.css/>script>function stopEvent(e) {	if(!e) return;	//e.cancelBubble is supported by IE - this will kill the bubbling process.	e.cancelBubble  true;	e.returnValue  false;	//e.stopPropagation works only in Firefox.	if (e.stopPropagation) {		e.stopPropagation();		e.preventDefault();	}}function keys_altonly(e){	return e.altKey && !(e.shiftKey || e.metaKey);}function keys_2vert(e){	return (e.shiftKey && e.ctrlKey) || (e.shiftKey && e.altKey) || (e.shiftKey && e.metaKey);}function keys_2horiz(e){	return (e.ctrlKey&&(e.altKey || e.metaKey)) || (e.altKey&&e.metaKey);}function report_string(){	return

If you were expecting your browser to be supported please report this string to your support staff:
+			>> +navigator.userAgent;}function check_mode(e){	var unsup  allow;	if (document.main.interface_ex.valueajax && !valid_browser){		if(unsupallow){			alert(You are using surgeweb with an untested or unsupported browser. Server policy allows this and it may work or more likely, it may result in very broken behaviour. ( allow / disallow forced login with surgeweb admin setting unsupported_browser )+report_string());		}else{			var action  unknown unsupported_browser value.;			var url;			var stop_evt;			switch(unsup){				case webmail:					action  switching interface to older webmail.;					url  /scripts/webmail.exe?cmdlogin&framestrue&user+document.main.username_ex.value+&pass+document.main.password.value;					stop_evt  true;					break;				case basic:					action  switching interface to surgeweb basic.;					document.main.interface_ex.value  html;					break;				case deny:					action  login denied.;					stop_evt  true;					break;			}			alert(Sorry server policy only allows explicitly supported browsers, +action+report_string());			if (url) window.locat

Subdomains

Date	Domain	IP
www.bayou.com	2023-10-23	173.212.61.96

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bayou.com

Is this malicious?

Files that talk to bayou.com

Whois

DNS Resolutions

Port 80

Subdomains