Domain > gbotvisit.com

More information on this domain is in AlienVault OTX

Files that talk to gbotvisit.com

MD5	A/V
6117c892d70d0bc060c4c6f5fb7c5dae	[Trojan.JS.Iframe.ART] [Trojan.Url.IframeB.cqbqvl] [HTML:Iframe-inf] [TrojWare.JS.Iframe.CQ] [JS/iFrame.ART] [Trojan.IframeRef] [W32/Iframe.ADS!tr]
886039b5b2a5d193f87809a62accb45d	[JS/Faceliker.d] [Clicker.VX] [Trojan.Script.FBJack.cqqjjo] [TrojWare.JS.FBJack.A] [JS.Click.243] [Troj/Iframe-ET] [TrojanClicker:JS/Faceliker.C] [Trojan.JS.Clickjack] [JS/FBJack.A!tr] [JS/Clicker]

Whois

Property	Value
Email	5428ca257qccvv1h@5225b4d0pi3627q9.whoisprivacycorp.com
NameServer	NS2.SEARCHENGINEINFO.NET
Created	2008-10-20 00:00:00
Changed	2015-12-11 00:00:00
Expires	2016-10-20 00:00:00
Registrar	INTERNET DOMAIN SERV

DNS Resolutions

Date	IP Address
2019-12-13	104.28.3.40 (ClassC)
2025-07-09	172.67.130.119 (ClassC)
2025-08-03	104.21.3.75 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sun, 24 Dec 2023 19:48:15 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4132Connection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy:

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>meta http-equivrefresh content105>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: gbotvisit.com,cType: non-interactive,cNounce: 94538,cRay: 83ab5c5d698127ea,cHash: 22ec34333c52331,cUPMDTk: /?__cf_chl_tkKRyb6ii9kBQRuZIz4nJY_6zOnCu5htxHLI8UWtMQsoA-1703447295-0-gaNycGzNBGU,cFPWv: g,cTTimeMs: 1000,cMTimeMs: 105000,cTplV: 5,cTplB: cf,cK: visitor-time,fa: /?__cf_chl_f_tkKRyb6ii9kBQRuZIz4nJY_6zOnCu5htxHLI8UWtMQsoA-1703447295-0-gaNycGzNBGU,md: l7EITSYYx675.Wl_VfZOc9VdB6vtNu9W1VhW5iAP1aA-1703447295-1-AUPJVAEbcIem1I-gHqpfqsnsz39XAYxDjShR2M0JQwbaKJgp0nbUCujtl6t1ysbG5wsQF_5XoedALSxrFC-UkL8RZECKlMPOU_p0lhZ-mhRXw1aJaGgvUsxVgqtlURYty_-uz_8jugYyrhNsMDyd80K8p94bkE3j-XqYgVBelSmrwDjn25WKFxogixswDIkKIO36a6IdenePmlpKfKBU3q4l3laPwW17awCr-Br9ULCe-UTmENuHKNTk3hsZL36LOAeEj9tUSboSZq_jD5g4UXhpraIS4SurRQBQARsV0vuyUskQlaXXoTZXZsJk_x_xCBQ27-V78xhsDeNLN8SBEdv9j5nQhcSZtqG8zB7KEsxUD2C8VQ_uThVwnCYbJEjMPkiW_yf5Xv2ZGwxqcDYeBeKpw02gzkpu5Ue5s0-l0A6UueI1-ADAjh01wLuI7loWlcUq0YUDeYaYzZbrgqLhCVeCVsG1749AwVZFBiGXqKAfDLBL_mqomzNT1jROC9BkBXBPmaO1uIiYIVE16lpCvlBA5H_GxSf9uslzh8yxZ4vELavcpNxcmeG_8U5TyR9qjZWds2BJGjPeHu7kDHI0GBDg6oCnhmHkmkJwcGoPJ5uUUxN3FpqWl3MZhyAs7rFLGpsYUKUNhUQROOBi375U66MHgzHYmd7a400kJFBhZSjvBpQ98oGjGvnlek5Ib896seoPLsQ3zwxbbsf6toc3gyiS3SG9UmC8LHIb6rwmrkqsfhfc5QBy0-o9gAVFloC2wRYucNEYjkRIg34CyAL4SJfVBw8QEw807nAOXULGlUfteq34rblyG8QdGRN0T24SGP0dC0WEy_WNETGyM5NsSD1r1dXxtD2wKymm-ztJvNu6oxOXvlfFxmm2GQN2LlVkYKfMRfNMHwILybcngrEiD4h-T9G5YEtqG

Port 443

HTTP/1.1 403 ForbiddenDate: Sun, 24 Dec 2023 19:48:15 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4947Connection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy:

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>meta http-equivrefresh content105>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: gbotvisit.com,cType: non-interactive,cNounce: 86929,cRay: 83ab5c5dd94a6813,cHash: a463428dbe9bba9,cUPMDTk: /?__cf_chl_tkK4nqHEaTZoiRnvLvxwT7Ww214u03RvVibJCxdVWuSUI-1703447295-0-gaNycGzNB5A,cFPWv: g,cTTimeMs: 1000,cMTimeMs: 105000,cTplV: 5,cTplB: cf,cK: visitor-time,fa: /?__cf_chl_f_tkK4nqHEaTZoiRnvLvxwT7Ww214u03RvVibJCxdVWuSUI-1703447295-0-gaNycGzNB5A,md: nlf0WQClmQ6vgr66vIIBAOubt8fNLg7QPzOxK7ReGDs-1703447295-1-ASH5Wdzja61yY6jBKSKrGrfDkaBekFpwe0ClYmECmdRLSTcoDRHp05MdxYdtBVcglSKKv-3euElRui9unTwdMsOThGeL-9LDwXSY7hMSW4f5iOCnlSgUz6jpWht1N9JNCL4lju5_LPVy-B0j3fJmvKElbVuXGPy0Vpd0QCoKIERw8ZeB_Sl38rHE8dspxx2yUKKWyku2RdPTyoUqlRzdVCUoKTWJkOuWZz_mMT3uNNa7hqGxg3PamhWKoZ4NO4ei5I0xOcalk2tIaC0558rdHXrOdrkHtPqUbWhmcXI7tgIqIwNVjgGsj2DW3S3pYMtFJAFBVQDOE1FZi7QlCRQ3zC_dJsH8SrQleok7wJNxu4POupz_IuGvcVm9mSplr30UFIgMb0Q3PJeySHFQwfmNzQH-JaFU2pHfwxJ0I-vnp2hQgTjdH2EiloLj-t5txh6jvQdOBq_50dBhpFOUDNZmDBfpcS3QErZ1U_sqhug5MBcB5XG3zpMgwH0qG4QMlDp2VbHc8o9RnQBtnGtF1jXhc5QHcJBVbp15eDzVCmXND4Ci6qn_rMKuZj_mBoDvrPrOltQaRP2zgqxmKoMSOPI-vfDt21ptrgsgx3xmmBQMD1ulNSQ6_YQNER4ZaqFhdLGfivpoviRfjYKHVQtsJjZj8dYIXbWEwICoSdaT-PoyGD2gNceJPJAUejzO5H2_RpSheLJZZ_CKlsOZI5M5KFkoTdawyEI1vM9JOv06LqlSzBbnM0IPg8nAtIP_Elt0NJjBJ-WRrEB4JwOZlf0JuQtL8eRfmK7oJJ9tuDmq2aT_FYtWT3ALKa3N5YZs1f4UvVr-rIGMQOIKHYWhN8fB13A4-dHj0BwW7XphZ81qAZY5gh1cpRBqumKLVBX5cnLQbVZQ8IimsAtgPQLuNE21HfqYoFA5b3XomLbBY

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gbotvisit.com

Is this malicious?

Files that talk to gbotvisit.com

Whois

DNS Resolutions

Port 80

Port 443