Domain > darkprofits.com

More information on this domain is in AlienVault OTX

Files that talk to darkprofits.com

MD5	A/V
3a9bf1de21767a68246e95d1796e4491	[W32.Mimail.M] [W32/Mimail.m@MM] [Worm.Mimail.Win32.23] [W32/Mimail.M@MM] [Trojan.Win32.Mimail.endt] [W32/Mimail.M@mm] [W32.Mimail.M@mm] [Win32/Mimail.P] [Worm.Mimail.M-unp] [Email-Worm.Win32.Mimail.m] [I-Worm.Mimail.M] [I-Worm.Win32.Mimail.22668[h]] [W32.W.Mimail.m!c] [W32/Mimail-M] [Worm.Win32.Mimail.P] [Win32.HLLM.Foo] [BehavesLike.Win32.Backdoor.mm] [W32/Mimail.RRIR-2883] [I-Worm/Mimail.m] [WORM/Mimail.M2] [Worm[Email]/Win32.Mimail] [Worm:Win32/Mimail.M@mm] [Win32/Mimail.worm.22668] [Worm.Mimail] [Worm.Win32.Mimail.af] [I-Worm.Mimail.P] [Win32.Worm-email.Mimail.Lmbj] [Email-Worm.Win32.Mimail.U] [W32/Mimail.fam@mm] [I-Worm/Mimail.M]
3d906c3174d208146532e57f7a382cf6	[Win32/Mimail.C] [Win32.Mimail.C] [W32/Mimail.c@MM] [W32/Mimail.C@MM] [I-Worm.Mimail.C] [W32/Mimail.C@mm] [Win32/Mimail.C] [Trojan.Win32.Mimail.endj] [I-Worm.Win32.Mimail.28192[h]] [W32/Mimail-C] [Worm.Win32.Mimail.C] [Win32.HLLM.Foo] [Worm.Mimail.Win32.22] [BehavesLike.Win32.StartPage.mm] [W32/Mimail.DJCZ-4024] [I-Worm/Mimail.c] [WORM/Mimail.C1] [Worm[Email]/Win32.Mimail] [Worm:Win32/Mimail.C@mm] [Win32/Mimail.worm.26656.B] [Worm.Mimail] [I-Worm.Mimail.C] [Email-Worm.Win32.Mimail.U] [I-Worm/Mimail.C] [Worm.Win32.Mimail.AxB]

DNS Resolutions

Date	IP Address
2014-02-12	207.189.109.121 (ClassC)
2024-04-09	45.33.18.44 (ClassC)
2024-07-06	198.58.118.167 (ClassC)
2024-08-26	45.79.19.196 (ClassC)
2024-09-02	45.33.2.79 (ClassC)
2024-09-13	45.56.79.23 (ClassC)
2024-10-24	45.33.23.183 (ClassC)
2025-01-13	45.33.30.197 (ClassC)
2025-01-22	72.14.178.174 (ClassC)
2025-04-06	45.33.20.235 (ClassC)
2025-04-10	173.255.194.134 (ClassC)
2025-08-02	74.207.241.245 (ClassC)
2025-10-01	66.175.216.36 (ClassC)
2026-01-30	157.230.161.221 (ClassC)

HTTP/1.1 200 OKServer: openrestyDate: Sun, 16 Jul 2023 17:21:43 GMTContent-Type: text/htmlContent-Length: 119097Last-Modified: Fri, 14 Jul 2023 14:54:16 GMTConnection: keep-aliveVary: Accept-EncodingE

!DOCTYPE html>!--  Last Published: Wed Apr 24 2019 21:58:29 GMT+0000 (UTC)  -->html data-wf-page5ca64202783a9b91a5c5d9e1 data-wf-site5c6caaa7255b5b35837464b2>head>  meta charsetutf-8>  title>DARKPROFITS.COM is available for sale or other proposals/title>  meta contentA unique opportunity to secure DARKPROFITS.COM for your brand namedescription>  meta contentDARKPROFITS.COM may be available for sale or other proposals propertyog:title>  meta contentA unique opportunity to secure DARKPROFITS.COM for your brand propertyog:description>  meta contentsummary nametwitter:card>  meta contentwidthdevice-width, initial-scale1 nameviewport>  meta namerobots contentnoindex>meta contentwidthdevice-width, initial-scale1 nameviewport>link hrefhttps://assets.superlander.com/css/generic-normalize.css relstylesheet typetext/css>link hrefhttps://assets.superlander.com/css/generic-webflow.css relstylesheet typetext/css>link hrefhttps://assets.superlander.com/css/generic-landers.webflow.css relstylesheet typetext/css>link hrefhttps://assets.superlander.com/css/newform.css relstylesheet typetext/css>link hrefhttps://assets.superlander.com/css/faqs.webflow.css relstylesheet typetext/css>  script srchttps://ajax.googleapis.com/ajax/libs/webfont/1.4.7/webfont.js typetext/javascript>/script>  script srchttps://code.jquery.com/jquery-1.10.2.js>/script>  script srchttps://ajax.aspnetcdn.com/ajax/jquery.validate/1.11.1/jquery.validate.min.js>/script>  script typetext/javascript>WebFont.load({  google: {    families: PT Sans:400,400italic,700,700italic,Droid Serif:400,400italic,700,700italic,Oswald:200,300,400,500,600,700,Montserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic,Cormorant:300,regular,italic,500,600,700,Libre Franklin:100,200,300,regular,italic,500,600,700,800,900,Dosis:200,300,regular,500,600,700,800  }});/script>  !-- if lt IE 9>script srchttps://cdnjs.cloudflare.com/ajax/libs/html5shiv/3.7.3/html5shiv.min.js typetext/javascript>/script>!endif -->

Subdomains

Date	Domain	IP
www.darkprofits.com	2023-12-26	96.126.123.244

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > darkprofits.com

Is this malicious?

Files that talk to darkprofits.com

DNS Resolutions

Port 80

Port 443

Subdomains