Domain > gtbplc.com

More information on this domain is in AlienVault OTX

Property	Value
NameServer	NS30.DOMAINCONTROL.COM
Created	2000-07-26 00:00:00
Changed	2015-04-20 00:00:00
Expires	2017-07-26 00:00:00
Registrar	WILD WEST DOMAINS, L

DNS Resolutions

Date	IP Address
2014-07-05	50.62.147.145 (ClassC)
2024-11-04	199.59.243.227 (ClassC)

HTTP/1.1 200 OKDate: Mon, 04 Nov 2024 03:07:40 GMTContent-Type: text/html; charsetutf-8Content-Length: 1034X-Request-Id: 9d152cc4-e571-4dd7-b4c2-255aadb4342bCache-Control: no-store, max-age0Accept-Ch: sec-ch-prefers-color-schemeCritical-Ch: sec-ch-prefers-color-schemeVary: sec-ch-prefers-color-schemeX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_tWzC7CcH88y4H5PTA3ukWd0Ci0ljycPowcbNdZSGvfXjIEVScPEyGZlw+41c00YbtPeKUhrly14j/zuD2PyMeQSet-Cookie: parking_session9d152cc4-e571-4dd7-b4c2-255aadb4342b; expiresMon, 04 Nov 2024 03:22:40 GMT; path/Connection: close

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_tWzC7CcH88y4H5PTA3ukWd0Ci0ljycPowcbNdZSGvfXjIEVScPEyGZlw+41c00YbtPeKUhrly14j/zuD2PyMeQ langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiOWQxNTJjYzQtZTU3MS00ZGQ3LWI0YzItMjU1YWFkYjQzNDJiIiwicGFnZV90aW1lIjoxNzMwNjg5NjYwLCJwYWdlX3VybCI6Imh0dHA6Ly9ndGJwbGMuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6Imd0YnBsYy5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bEqeelVZK.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 04 Nov 2024 03:07:40 GMTContent-Type: text/html; charsetutf-8Content-Length: 1034X-Request-Id: 18fdac61-174e-4095-aaf9-e8c51e740e50Cache-Control: no-store, max-age0Accept-Ch: sec-ch-prefers-color-schemeCritical-Ch: sec-ch-prefers-color-schemeVary: sec-ch-prefers-color-schemeX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_tWzC7CcH88y4H5PTA3ukWd0Ci0ljycPowcbNdZSGvfXjIEVScPEyGZlw+41c00YbtPeKUhrly14j/zuD2PyMeQSet-Cookie: parking_session18fdac61-174e-4095-aaf9-e8c51e740e50; expiresMon, 04 Nov 2024 03:22:40 GMT; path/Connection: close

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_tWzC7CcH88y4H5PTA3ukWd0Ci0ljycPowcbNdZSGvfXjIEVScPEyGZlw+41c00YbtPeKUhrly14j/zuD2PyMeQ langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMThmZGFjNjEtMTc0ZS00MDk1LWFhZjktZThjNTFlNzQwZTUwIiwicGFnZV90aW1lIjoxNzMwNjg5NjYwLCJwYWdlX3VybCI6Imh0dHBzOi8vZ3RicGxjLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJndGJwbGMuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/bnBDIXHkk.js>/script>/body>/html>

Subdomains

Date	Domain	IP
hercules.gtbplc.com	2014-07-05	41.203.112.58

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
3223f61af50aa26a1c3bb96fe1779011	[HW32.CDB.D56b] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux.Win32.9065] [Trojan.Win32.Kryptik.czfnsp] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.dueu] [Backdoor.Hlux!DdFHfWii/ns] [UnclassifiedMalware] [TR/Kryptik.oenzk] [Backdoor:Win32/Kelihos] [Trojan/Win32.FakeAV] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.cri] [Trojan.Crypt3] [W32/Kryptik.CBOM!tr] [Crypt3.ORV] [Backdoor.Win32.Hlux.Acmu] [Win32/Trojan.7bf]

Domain > gtbplc.com

Is this malicious?

Files that talk to gtbplc.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains