Domain > bestfwdservice.com

More information on this domain is in AlienVault OTX

Files that talk to bestfwdservice.com

MD5	A/V
adee9199a48bfdb42dbca328854165b0	[W32.InjectDropperA.PE] [Win32.Viking.AR] [Virus/W32.Viking.B] [Packed.Win32.Toggaf.4!O] [W32/Fujacks.ay] [Trojan.FakeMS] [Trojan.Win32.CorruptedFile.bfffwi] [W32.Loorp.A!inf] [Smallworm.AEDB] [Win32/Viking.D] [PE_JEEFO.D] [Win32.Viking.AR] [Win32.Viking.TZ] [Win32.Viking.AR] [W32/FuzVir-A] [Win32.Viking.AR] [Win32.HLLW.Autoruner.8224] [W32/Fujacks.DR] [PE_JEEFO.D] [Heuristic.LooksLike.Win32.SuspiciousPE.J] [Win32/PatchFile.ck] [Virus:Win32/Viking.NK] [Win32.Viking.AR] [Win32/Piloyd] [Virus.Win32.Koklek] [Trojan-Downloader.Win32.Small] [W32/Fujacks.BF!tr] [Win32/Fujacks.S]
643e4242624e103b74c91d9d28742649
da27ffd53c725dac30dbc721b6a287ff
deb34a04e32cd444b9e071a55ef77aa3	[htm.redirector.eb.22]
89ddb3437b98d31adc38421aa8b35767	[htm.redirector.eb.22]
f018792840c70c6b1d3a6983fba5e760	[Win32.Troj.Undef.(kcloud)]
b29d1757f5aa3558a5d907cb466f83e3

Whois

Property	Value
NameServer	NS2.ROOKDNS.COM
Created	2015-05-19 00:00:00
Changed	2015-05-19 00:00:00
Expires	2016-05-19 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2020-12-30	141.8.224.25 (ClassC)
2021-11-08	66.81.199.53 (ClassC)
2024-08-29	103.224.182.246 (ClassC)
2025-08-23	103.224.212.205 (ClassC)
2025-11-14	66.81.203.132 (ClassC)
2025-12-30	66.81.203.197 (ClassC)
2026-02-18	66.81.203.7 (ClassC)

HTTP/1.1 200 OKDate: Sat, 27 Jul 2019 02:24:26 GMTServer: ApacheSet-Cookie: gvc931vr3117398670100774; expiresThu, 25-Jul-2024 02:24:27 GMT; Max-Age157680000; path/; domainbestfwdservice.com; HttpOnlyX

html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKrfIMFkSaoTSqKmC+BrghK0CpDHc0MuVzmMHin8LIORhpXbped+iYhSnZurWnEO0zcKcVIrzp026LVc5pMB9bUCAwEAAQ_RJPIPrgug29oRJBU3iCp5S3wHUyGVx0TgmQzfuX+K0mO9wtV8mJ/0WHGtv5OWfpZxUtAEm4TXm1oaFuqPrv/kw>head>				  meta http-equivContent-Type contenttext/html; charsetUTF-8>				  meta nameviewport contentwidthdevice-width>meta http-equivX-UA-Compatible contentIEEmulateIE7>script typetext/javascript>try{document.cookie  isframesetenabled1; path/;;}catch(exception){}/script>script typetext/javascript srchttp://d258j801nsw1p7.cloudfront.net/rmgjsc/zcFilters.js?1>/script>script typetext/javascript>try{document.cookie  browser_width+window.innerWidth || document.body.clientWidth;document.cookie  browser_height+window.innerHeight  || document.body.clientHeight;}catch(exception){}/script>/head>frameset rows100%,* frameborderno border0 framespacing0>	frame srchttp://bestfwdservice.com/?gaAYlxz9xUdieVksJnZ8mogW6CRYs%2BnBKvwQYVnQ6IzEj1TL3n8T5IeIxIxt2CC%2BL2z%2B7fqtROelVNcSkzfxNejVxw%2B6i9zxpCfeooxR5xR%2B7ZUsdzBam50jKVtcPj2MF8VCN6Fg2NqDLyA8OO1qnLxRyCF4EhjByTglGREbD5MnQ%3D&gerf%2BbEbCixMP818dXd%2Fq6DiEdnb7wxCwGtJNkkgJm6W0TY%3D&guroa1Ivrzlyqy5zk4evHfM47mw6ZRO5vUojEAsIAeeWpfOiwSBLaUgkunsamuEPHB9L&>/frameset>noframes>	body bgcolor#ffffff text#000000>	a hrefhttp://bestfwdservice.com/rg-erdr.php?_rpot nhFexEw&_rdm/f95Qi49fNmWJf.JvV&p5f95%7C%40%7C5f95%7C%40%7C%2Ff95Qi49fNmWJf.JvV%7C%40%7CfB%7C%40%7C%7C%40%7CzGEFAHAAA%7C%40%7Czbb%7C%40%7C39%7C%40%7C19c4NW4cGTtFZFGHAzFGGZGG%7C%40%7Ct+nETEETj%7C%40%7CT+7hEEpub&gaAYlxz9xUdieVksJnZ8mogW6CRYs%2BnBKvwQYVnQ6IzEj1TL3n8T5IeIxIxt2CC%2BL2z%2B7fqtROelVNcSkzfxNejVxw%2B6i9zxpCfeooxR5xR%2B7ZUsdzBam50jKVtcPj2MF8VCN6Fg2NqDLyA8OO1qnLxRyCF4EhjByTglGREbD5MnQ%3D&tnfrm>Click here to proceed/a>.	/body>/noframes>/html>

Subdomains

Date	Domain	IP
33.bestfwdservice.com	2025-09-28	66.81.203.132

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bestfwdservice.com

Is this malicious?

Files that talk to bestfwdservice.com

Whois

DNS Resolutions

Port 80

Subdomains