Domain > captlfix.com

More information on this domain is in AlienVault OTX

Files that talk to captlfix.com

MD5	A/V
29bc940ee9a3eac0149ed07dd5753710	[W32.AndromPlwbahC.Trojan] [TrojanDownloader.Cutwail.r3] [Trojan.Injector!WWqNbSPGUtU] [Backdoor.Trojan] [Cutwail.DCN] [TROJ_SPNV.01KP14] [Trojan.Win32.Cutwail.fal] [Win32.Trojan.Cutwail.Htmq] [UnclassifiedMalware] [BackDoor.Andromeda.559] [BehavesLike.Win32.Dropper.nh] [Troj/MSIL-AZF] [W32/Backdoor.DYFX-3160] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail] [RDN/Spybot.bfr!o] [TScope.Trojan.MSIL] [Trj/Chgt.N] [Trojan.Win32.Cutwail] [MSIL/GLQ!tr] [MSIL5.BVOW] [Trojan.Win32.Cutwail.ATJx]
9ab0a68d8ad9e102ccd7fd0a067ecd9d	[W32.HfsAutoA.BDEF] [Trojan.Crypt.NKN] [W32/Trojan3.MQR] [Backdoor.Win32.Androm.fptk] [Trojan.Win32.Andromeda.djycfa] [Virus.Win32.Heur.c] [PE:Malware.XPACK-HIE/Heur!1.9C48] [BackDoor.Andromeda.404] [BehavesLike.Win32.PWSZbot.cc] [Mal/VB-AOE] [W32/Trojan.MZKU-6435] [Trojan/Win32.Androm] [Trojan.Win32.Injector.bBQXM] [Backdoor.Win32.Androm] [VBCrypt.IOJ]
90ba8b4cd89a5fd23bb0c3f17a759ba5	[Trojan.Inject.r3] [Trojan.Injector!xSxmY/oTY4I] [Trojan.Win32.Inject.tfmg] [Trojan.Win32.Inject.dhtgak] [Win32.Trojan.Inject.Hssg] [UnclassifiedMalware] [Trojan.DownLoad.64914] [Trojan.Inject.Win32.108354] [BehavesLike.Win32.Dropper.nh] [Troj/Msil-ANY] [W32/Trojan.GRSK-5893] [Trojan/Win32.Inject] [TrojanDownloader:Win32/Cutwail] [Win-Trojan/MDA.630F094C] [RDN/Spybot.bfr!o] [Trojan.Inject] [Trj/Chgt.J] [Evilware.Outbreak] [W32/Inject.TFMG!tr] [MSIL5.APAS] [Trojan.Win32.Inject.aJp] [Win32/Trojan.9d7]

Whois

Property	Value
Name	PERFECT PRIVACY, LLC
Email	t46kd9cx7xy@networksolutionsprivateregistration.com
Address	12808 Gran Bay Parkway West
Zip Code	32258
City	Jacksonville
State	FL
Country	US
Phone	+1.5707088780
NameServer	NS88.WORLDNIC.COM
Created	2000-01-31 03:53:10
Changed	2015-01-28 22:58:55
Expires	2021-01-31 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2013-10-13	174.120.36.19 (ClassC)
2014-11-01	108.174.150.14 (ClassC)
2014-12-03	108.174.150.14 (ClassC)
2015-02-18	206.188.193.252 (ClassC)
2015-05-07	-
2024-09-13	198.185.159.144 (ClassC)
2024-09-28	198.49.23.144 (ClassC)
2024-10-09	198.185.159.145 (ClassC)
2024-11-07	198.49.23.145 (ClassC)

HTTP/1.1 400 Bad RequestCache-Control: no-cache, must-revalidateContent-Length: 77564Content-Type: text/html; charsetUTF-8Date: Tue, 06 Feb 2024 11:27:44 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragm

!DOCTYPE html>head>  title>400 Bad Request/title>  meta nameviewport contentwidthdevice-width, initial-scale1>  style typetext/css>  body {    background: white;  }  main {    position: absolute;    top: 50%;    left: 50%;    transform: translate(-50%, -50%);    text-align: center;    min-width: 95vw;  }  main h1 {    font-weight: 300;    font-size: 4.6em;    color: #191919;    margin: 0 0 11px 0;  }  main p {    font-size: 1.4em;    color: #3a3a3a;    font-weight: 300;    line-height: 2em;    margin: 0;  }  main p a {    color: #3a3a3a;    text-decoration: none;    border-bottom: solid 1px #3a3a3a;  }  body {    font-family: Clarkson, sans-serif;    font-size: 12px;  }  #status-page {    display: none;  }  footer {    position: absolute;    bottom: 22px;    left: 0;    width: 100%;    text-align: center;    line-height: 2em;  }  footer span {    margin: 0 11px;    font-size: 1em;    font-weight: 300;    color: #a9a9a9;    white-space: nowrap;  }  footer span strong {    font-weight: 300;    color: #191919;  }  @media (max-width: 600px) {    body {      font-size: 10px;    }  }  @font-face {    font-family: Clarkson;    font-weight: 400;    src: local(?), url(data:application/x-font-woff;base64,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

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > captlfix.com

Is this malicious?

Files that talk to captlfix.com

Whois

DNS Resolutions

Port 80