Domain > georgetownfestival.com

More information on this domain is in AlienVault OTX

Property	Value
Email	YHLFNTDPK@WHOISPRIVACYPROTECT.COM
NameServer	NS802.MSCHOSTING.COM
Created	2010-05-12 00:00:00
Changed	2015-12-17 00:00:00
Expires	2016-05-12 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2013-09-27	103.13.122.121 (ClassC)
2023-08-27	172.67.174.168 (ClassC)
2024-11-05	103.6.196.61 (ClassC)

Port 443

HTTP/1.1 200 OKDate: Sun, 27 Aug 2023 13:27:47 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-alivex-accel-version: 0.01last-modified: Mon, 10 Oct 2022 09:05:03 GMTx-powered-by:

!DOCTYPE HTML>html langen-US>head>    meta http-equivcache-control contentno-cache, must-revalidate, post-check0, pre-check0 />    meta http-equivcache-control contentmax-age0 />    meta http-equivexpires content0 />    meta http-equivexpires contentTue, 01 Jan 1980 1:00:00 GMT />    meta http-equivpragma contentno-cache />    meta charsetUTF-8>    meta http-equivrefresh content0; urlhttps://georgetownfestival.com/2023/>    script typetext/javascript>        window.location.href  https://georgetownfestival.com/2023/    /script>    title>Page Redirection/title>/head>body>    !-- Note: dont tell people to `click` the link, just tell them that it is a link. -->    If you are not redirected automatically, follow this a        hrefhttps://georgetownfestival.com/2023/>https://georgetownfestival.com/2023//a>./body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
bd03abc172becc1cafaf1367aeb67d10	[W32.Paragol.Worm] [Artemis!BD03ABC172BE] [Trojan.Crypt.NKN] [Riskware] [WS.Reputation.1] [UnclassifiedMalware] [TR/Crypt.ZPACK.4866] [Heuristic.BehavesLike.Win32.ModifiedUPX.C] [VirTool:Win32/Injector.CL] [Spyware/Win32.Zbot] [Win32/Delf.OMQ] [Trojan.Win32.Injects] [W32/Tepfer.AAX!tr.pws] [SHeur4.BQRV] [Trojan.Win32.Delf.OMQ]
c09585e10a5faa7865fe18af370b5e14	[HW32.CDB.1929] [Artemis!C09585E10A5F] [Trojan.Crypt.NKN] [TROJ_SPNV.01IQ13] [Trojan-Spy.Win32.Zbot.qbdf] [Heuristic.BehavesLike.Win32.ModifiedUPX.C] [Backdoor:Win32/Trubsil.A] [Trojan.Win32.Injects] [W32/Tepfer.AAX!tr.pws] [VirTool.Win32.Injector.CL]

Domain > georgetownfestival.com

Is this malicious?

Files that talk to georgetownfestival.com

Whois

DNS Resolutions

Port 443