Domain > ecu-sec.hacked.jp

More information on this domain is in AlienVault OTX

Files that talk to ecu-sec.hacked.jp

MD5	A/V
f501567c1db95828d278e12551446cb0	[Trojan.VBS.UKD] [Trojan.VBS.UKD] [Trojan.VBS.UKD] [Trojan.VBS.UKD] [Trojan.VBS.UKD] [Trojan.VBS.UKD] [Troj/Dloadr-EAL] [Trojan.VBS.UKD] [Worm:VBS/Jenxcus.K] [Trojan.VBS.UKD] [Win32/Trojan.Downloader.016]
7415faef2d164505e450e181b6d69d0d	[W32.MassiveVBS.TC.Worm] [Worm.VBS.Dunihi.BC] [Worm.VBS.Dunihi.BC] [VBS.Worm.Jenxcus.A] [VBS/Autorun.worm.aapj] [Worm.VBS.Dunihi.BC] [VBS/Dunihi.A] [VBS.Dunihi] [VBS_DUNIHI.SM2] [Worm.VBS.Dunihi.BC] [Worm.VBS.Dinihou.a] [Trojan.Script.Hworm.cbxvbd] [Worm.VBS.Dunihi.BC] [TrojWare.VBS.Downloader.Zaprap.A] [Worm.VBS.Dunihi.BC] [Trojan.Hworm.1] [Worm.Dinihou.VBS.1] [VBS_DUNIHI.SM2] [BehavesLike.JS.Autorun.lv] [VBS/Dinihou-G] [VBS/Dunihi.A] [Worm.VBS.afc] [Worm.VBS.Dunihi.BC] [Worm:VBS/Jenxcus.K] [VBS/Dunihi] [Worm.VBS.Dunihi.BC] [Worm.VBS.Dinihou.y] [Unk.Win32.Script.400578] [Trojan-Downloader.VB.Houdini] [VBS/Obfuscated.F!tr] [virus.vbs.download.20]

Whois

Property	Value
Name	Tim Schumacher
Organization	Tim Schumacher
Email	ich@kaoskinder.de
Zip Code	166-0002
Phone	4916096245101
NameServer	ns2.afraid.org
Created	2009-08-03 00:00:00
Changed	2015-08-31 16:05:08
Expires	2016-08-31 00:00:00

DNS Resolutions

Date	IP Address
2015-12-14	74.137.235.45 (ClassC)
2016-01-06	190.155.96.8 (ClassC)
2016-01-19	74.138.104.8 (ClassC)
2016-01-27	190.155.96.18 (ClassC)
2016-04-04	74.137.235.50 (ClassC)
2016-06-15	127.0.0.2 (ClassC)
2024-11-03	150.95.255.38 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Sat, 28 Sep 2019 06:36:57 GMTServer: Apache/2.4.6 (CentOS) PHP/5.4.16X-Powered-By: PHP/5.4.16Content-Length: 2155Connection: closeContent-Type: text/html; charsetUTF-8

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langja langja>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />meta http-equivContent-Style-Type contenttext/css />meta http-equivContent-Script-Type contenttext/javascript />title>ecu-sec.hacked.jp – このドメインはお名前.comで取得されています。/title>link hrefhttp://error.gmo.jp/contents/setstyle.css relstylesheet typetext/css />/head>body>link hrefhttps://www.onamae.com/common/css/global_navi.css relstylesheet>div classonamae-global>	div classonamae-global__header>		div classonamae-global__header__inner>			p classonamae-global__header__ttl>a href/?btn_id?btn_idd-regist_20150804_B_logo>img src//cache.img.gmo.jp/onamae/images/logo.svg altドメインとるならお名前.com>/a>/p>		/div>	/div>/div>div idmain>p classlead>このドメインは、お名前.comで取得されています。/p>p classlink>a hrefhttp://www.onamae.com/?banner_id645_dfltweb>お名前.comのトップページへ/a>/p>div idsrcArea>iframe srchttp://www.onamae.com/parking.html?_decu-sec.hacked.jp scrollingno namemyFrame frameborder0 idparkingIframe styleborder: 0px; width: 100%; height: 680px;>/iframe>/div>/div>div idfooter>p classcopy>Copyright © 2019 GMO Internet, Inc. All Rights Reserved./p>/div>!-- Google Tag Manager -->noscript>iframe src//www.googletagmanager.com/ns.html?idGTM-PXWVMTheight0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>script>(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src//www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);})(window,document,script,dataLayer,GTM-PXWVMT);/script>!-- End Google Tag Manager -->/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ecu-sec.hacked.jp

Is this malicious?

Files that talk to ecu-sec.hacked.jp

Whois

DNS Resolutions

Port 80