Domain > colonialprop.com

More information on this domain is in AlienVault OTX

Files that talk to colonialprop.com

MD5	A/V
c7bf064346fafe4fc55b43abcfe96b00	[HW32.CDB.E6f3] [Backdoor.Kelihos.r3] [Backdoor.Hlux!zUFIktBYK3s] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfw] [Trojan.Win32.S.PSW-Tepfer.835600.AM] [UnclassifiedMalware] [BackDoor.Slym.14049] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.QQUO-1304] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUC] [Trojan.Win32.Kryptik.BZIX]
0dd56a0b8ea7bedb57cebf9aacdac40f	[Malware.Packer.HGX1] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [W32/Kryptik.AXUE!tr]
3ff79e59f23983931c7f8b78ff705df1	[HW32.CDB.6c99] [Kryptik.CCFN] [Win32/Kelihos.SeNdHLB] [Backdoor.Win32.Hlux.dlkp] [Backdoor.Hlux!oUNizOsy5vo] [TrojWare.Win32.Kryptik.CASU] [Trojan.Packed.26544] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.At] [Trojan-Downloader.Win32.Waledac] [W32/Hlux.AGWI!tr] [Win32/Trojan.337]
56b02dc8b8072c1f787058a56eae64f0	[HW32.CDB.9b1c] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwhrmp] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djkd] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHE] [Trojan.Win32.Kryptik.BZIX] [Win32/Trojan.ef7]

Whois

Property	Value
Name	MAA
Organization	MAA
Email	no.valid.email@worldnic.com
Address	2101 6th Avenue North
Zip Code	35203
City	Birmingham
State	AL
Country	US
Phone	+1.2057958108
NameServer	NS1.TWTELECOM.NET
Created	1995-11-06 05:00:00
Changed	2015-01-28 23:22:52
Expires	2015-11-05 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2013-05-17	64.90.194.183 (ClassC)
2014-04-25	66.162.163.11 (ClassC)
2024-05-31	199.59.243.225 (ClassC)
2024-08-30	199.59.243.226 (ClassC)
2025-08-05	199.59.243.228 (ClassC)

HTTP/1.1 200 OKdate: Mon, 13 Nov 2023 14:33:28 GMTcontent-type: text/html; charsetutf-8content-length: 1021x-request-id: 78ad497d-5463-44a0-8faf-aed1166107bacache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_c8UaZzVOwt5RqdEphrY/er4zw+B5m4AVesLpM1JfnG0iWHxx81iqJMkl9WWVLztrsfU4h2LOk5tTb6AzrjAuKw langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiNzhhZDQ5N2QtNTQ2My00NGEwLThmYWYtYWVkMTE2NjEwN2JhIiwicGFnZV90aW1lIjoxNjk5ODg2MDA4LCJwYWdlX3VybCI6Imh0dHA6Ly9jb2xvbmlhbHByb3AuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6ImNvbG9uaWFscHJvcC5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bZEuySGbt.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 13 Nov 2023 14:33:28 GMTContent-Type: text/html; charsetutf-8Content-Length: 1021X-Request-Id: 8ee7f356-e1b2-4687-9c15-231b6952b3e6Cache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_c8UaZzVOwt5RqdEphrY/er4zw+B5m4AVesLpM1JfnG0iWHxx81iqJMkl9WWVLztrsfU4h2LOk5tTb6AzrjAuKw langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiOGVlN2YzNTYtZTFiMi00Njg3LTljMTUtMjMxYjY5NTJiM2U2IiwicGFnZV90aW1lIjoxNjk5ODg2MDA5LCJwYWdlX3VybCI6Imh0dHBzOi8vY29sb25pYWxwcm9wLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJjb2xvbmlhbHByb3AuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/brgiNAZYu.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > colonialprop.com

Is this malicious?

Files that talk to colonialprop.com

Whois

DNS Resolutions

Port 80

Port 443