Domain > csaok.com

More information on this domain is in AlienVault OTX

Files that talk to csaok.com

MD5	A/V
4b93f892d9249b70508ee222e37ee1c6	[HW32.CDB.E823] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxbvtz] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.txbj] [Trojan.PWS.Tepfer!TcJrQOwJyhs] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.CAUP] [Trojan.Crypt_s] [W32/Tepfer.CAUP!tr.pws] [Crypt_s.GMK]

DNS Resolutions

Date	IP Address
2014-05-30	64.64.20.160 (ClassC)
2021-05-23	104.21.41.51 (ClassC)
2023-08-14	104.18.3.70 (ClassC)
2023-08-26	104.18.34.78 (ClassC)
2024-07-25	104.18.11.39 (ClassC)
2024-08-02	104.18.10.39 (ClassC)
2024-08-09	104.18.39.16 (ClassC)
2025-01-08	141.193.213.10 (ClassC)
2025-01-16	141.193.213.11 (ClassC)

Port 443

HTTP/1.1 200 OKDate: Mon, 07 Aug 2023 10:21:10 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: public, max-age31536000Last-Modified: Fri, 30 Dec

!DOCTYPE html>html langen>head>script data-dlPageInformation>window.doctorlogic  window.doctorlogic || {};window.doctorlogic.PageInformation  {  IsProductionUrl: true,  SiteId: 166,  FilingName: NuveenErik,  PageName: home,  PrimaryKey: null,  FriendlyUrl: https://csaok.com/,  HostileUrl: https://csaok.com/Home/Index,  Channels:     {      Id: 1,      Label: LocalSEO    },    {      Id: 2,      Label: DirectTraffic    },    {      Id: 3,      Label: PaidSearch    },    {      Id: 4,      Label: Referral    },    {      Id: 5,      Label: Organic    },    {      Id: 6,      Label: CallExtensionGoogleAdWords    },    {      Id: 7,      Label: CallExtensionBingAds    },    {      Id: 8,      Label: ThirdPartyAds    },    {      Id: 10,      Label: SocialAds    }  ,  OrganicReferrers:     http://www.daum.net/?q,    http://www.eniro.se/?search_word,    http://www.naver.com/?query,    http://www.yahoo.com/?p,    http://www.msn.com/?q,    http://www.bing.com/?q,    http://www.aol.com/?query,    http://www.aol.com/?encquery,    http://www.lycos.com/?query,    http://www.ask.com/?q,    http://www.altavista.com/?q,    http://search.netscape.com/?query,    http://www.cnn.com/SEARCH/?query,    http://www.about.com/?terms,    http://www.mamma.com/?query,    http://www.alltheweb.com/?q,    http://www.voila.fr/?rdata,    http://search.virgilio.it/?qs,    http://www.bing.com/?q,    http://www.baidu.com/?wd,    http://www.alice.com/?qs,    http://www.yandex.com/?text,    http://www.najdi.org.mk/?q,    http://www.aol.com/?q,    http://www.mamma.com/?query,    http://www.seznam.cz/?q,    http://www.search.com/?q,    http://www.wp.pl/?szukaj,    http://online.onetcenter.org/?qt,    http://www.szukacz.pl/?q,    http://www.yam.com/?k,    http://www.pchome.com/?q,    http://www.kvasir.no/?q,    http://sesam.no/?q,    http://www.ozu.es/?q,    http://www.terra.com/?query,    http://www.mynet.com/?q,    http://www.ekolay.net/?q,    http://www.rambler.ru/?words,    http://www.google.com/,    http://www.google.ac/,    http://www.google.ad/,

Subdomains

Date	Domain	IP
files.csaok.com	2024-08-07	23.46.228.177
assets.csaok.com	2024-06-16	104.18.11.39

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > csaok.com

Is this malicious?

Files that talk to csaok.com

DNS Resolutions

Port 80

Port 443

Subdomains