Domain > cywellness.com

More information on this domain is in AlienVault OTX

Files that talk to cywellness.com

MD5	A/V
c32ad8d6217ec43344e1765892c319d5	[W97M/Downloader.apq] [PP97M/Downlaoder.AG] [W2KM_CRYPLOD.AM] [W97M/Downloader.apq] [Troj/DocDl-AFF] [PP97M/Downlaoder.AG] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan] [TrojanDownloader:O97M/Donoff]
485bdeba63ac9da4ef385683c66a4b82	[Trojan.Ransom.AKE] [Trojan/W32.Cryptodef.134656] [Ransom.Cryptowall.A4] [Trojan.Ransom.AKE] [Trojan.CryptoLocker] [Trojan.Filecoder.Win32.559] [Trojan/Filecoder.co] [Trojan.Win32.Cryptodef.dxnson] [Suspicious.MH690.A] [Win32/Filecoder.CO] [TROJ_CRYPWALL.SMJC] [Trojan-Ransom.Win32.Cryptodef.cku] [Trojan.Ransom.AKE] [Trojan.Cryptodef!] [Trojan.Ransom.AKE] [Troj/Ransom-AGU] [Trojan.Ransom.AKE] [Trojan.Encoder.514] [TROJ_CRYPWALL.SMJC] [Ransom-CWall-FXG!485BDEBA63AC] [W32/RANSOM.AGU!tr] [Trojan[Ransom]/Win32.Cryptodef] [Trojan.Ransom.AKE] [Ransom:Win32/Crowti.A] [Trojan/Win32.Crowti] [Ransom-CWall-FXG!485BDEBA63AC] [BScope.TrojanRansom.Cryptowall] [Trj/RansomCrypt.D] [Trojan.Win32.Filecoder] [Trojan.Ransom.AKE] [Crypt4.CGMN]

Whois

Property	Value
Email	j-hensley@live.com
NameServer	NS6482.HOSTGATOR.COM
Created	2014-09-10 00:00:00
Changed	2015-09-13 00:00:00
Expires	2016-09-10 00:00:00
Registrar	LAUNCHPAD.COM, INC.

DNS Resolutions

Date	IP Address
2024-06-07	199.59.243.225 (ClassC)
2025-08-10	199.59.243.228 (ClassC)

HTTP/1.1 200 OKdate: Tue, 27 Feb 2024 18:06:24 GMTcontent-type: text/html; charsetutf-8content-length: 1046x-request-id: 29507714-794e-4e86-9a41-ddff42abd70ecache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_nhU9yJhyX/xaox9Oap2jWg9kbp15gAHnhFxMxf7utT4RRUas9TWT0xR15FJe/pFCtBPXeYHawK26QpvFGy8gdw langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMjk1MDc3MTQtNzk0ZS00ZTg2LTlhNDEtZGRmZjQyYWJkNzBlIiwicGFnZV90aW1lIjoxNzA5MDU3MTg0LCJwYWdlX3VybCI6Imh0dHA6Ly9jeXdlbGxuZXNzLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJjeXdlbGxuZXNzLmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bRxonjPNY.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Tue, 27 Feb 2024 18:06:24 GMTContent-Type: text/html; charsetutf-8Content-Length: 1046X-Request-Id: 33a32311-2480-4150-b675-5747186dc8f0Cache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_nhU9yJhyX/xaox9Oap2jWg9kbp15gAHnhFxMxf7utT4RRUas9TWT0xR15FJe/pFCtBPXeYHawK26QpvFGy8gdw langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMzNhMzIzMTEtMjQ4MC00MTUwLWI2NzUtNTc0NzE4NmRjOGYwIiwicGFnZV90aW1lIjoxNzA5MDU3MTg1LCJwYWdlX3VybCI6Imh0dHBzOi8vY3l3ZWxsbmVzcy5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0IjoiY3l3ZWxsbmVzcy5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bCOmIfFEp.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cywellness.com

Is this malicious?

Files that talk to cywellness.com

Whois

DNS Resolutions

Port 80

Port 443