Domain > hamptons.com

More information on this domain is in AlienVault OTX

Files that talk to hamptons.com

MD5	A/V
165f5084043893cc35334b568d0f6ec0	[HW32.CDB.73df] [Packed.Win32.Katusha.3!O] [Win32.Malware!Drop] [Backdoor.Hlux!tc7SLh6zR0c] [WS.Reputation.1] [Kryptik.CCFN] [UnclassifiedMalware] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Backdoor.Win32.Kelihos] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.aBgj] [Win32/Trojan.337]

DNS Resolutions

Date	IP Address
2024-11-07	141.193.213.21 (ClassC)
2025-01-03	141.193.213.20 (ClassC)
2025-10-18	104.21.29.214 (ClassC)
2026-01-21	172.67.171.220 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sat, 26 Aug 2023 20:47:17 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-P

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: hamptons.com,cType: managed,cNounce: 75835,cRay: 7fceedd7492c309a,cHash: 7fe6ade8b9bef80,cUPMDTk: /?__cf_chl_tkbnahYLCwRp3StsEgFZoXQMeVLcJjJilrAmVcCdoClys-1693082837-0-gaNycGzNBdA,cFPWv: g,cTTimeMs: 1000,cMTimeMs: 0,cTplV: 5,cTplB: cf,cK: ,fa: /?__cf_chl_f_tkbnahYLCwRp3StsEgFZoXQMeVLcJjJilrAmVcCdoClys-1693082837-0-gaNycGzNBdA,md: LKIZFXRHAjXjd6Xxk8QSHuG1UedhACulkzDpahehgmM-1693082837-0-AbK2Af0rucnNDHTp-KO3cnyTkRs3mjLUNWTSOmPp5lBJ7td5pGP_62vwHjMhUt5zgjkDFEuemIiH0OWSafwyeY1oMrMrvFefO1ZSErQ2Z13_vQMgd_vBuU0LefA5arM0ElmlN0U9UgDqVdxJdNURR7e0MIwptAwxbQnNPTUmMbMixkRYPA1ByK--CEhYcEnQIwDiBFxWhoFjt6n4sive5IVohqgqLag5uwGXqvlf2-tRBiK8tU_bpweNqlTwY5KbDeRzRGA1-s5MAkpev-BkzYX0LXiYsuFvr1MnzW5lsl8Cnv-yNXdAIeFeqScxxMiNZeXkvrXcGLT993cIBFfOW5wQ6r3_cn90U9rCrLmHaX73T1QOugRhI8y08PETyt4wp5GIzpF0wXqJK0l65Is_jbfCXUBe_qSByneG84Ytj3oo4dLr8cXoEiKihxvZNXyfn3Yk6L1JqR9gh3qseURI22QVGlIAF8uFKNxf5k-HKNHrzirCwQ1xtOOC-w1kFJQZU3IIDX6R1rZF4yq2tPsFscm82G04tMDKhTunrkDBuGivsFBQItDz1buAG6YnnwQCrrjn5T_N9nxo7IhPjaVzLBS0-5OSKeDdfvmPjCNP5UJWETNuxAQ8QD4u9hHrCrjo-jXwUn-Vc9EOpbG6SZ73dMKMcuILOvLuGuaLyqwnX1mm3DanvblKAXLN8Gda1Q1q2DUTjDMMtE6Uvl1Qcv7G9n_bvpPGUh6dwMc-8DD-8Rk1xI-QjN63ZMm_to0OH5LThee0tCjx2sAIGv_DPUSWEv3lGFe0hzVfOM4-GAB_2Jl05PhY9-cVz36mKa65l6oHKOscT_BWWPh8J7qUMwDWqYBgrg1XxIXssemnPsfVksPdwDRoylpbqK6HlNUZgTtdfUsie7pZBCdzotDqCUDiCDJveTpZ1X_2EOOI-YXLeT7zrKIYU_bSh1KhvDMkuKMad3CX6hNJI6LjE_7iA3TP70MAn4T7I

Port 443

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: hamptons.com,cType: managed,cNounce: 74076,cRay: 7fceedd7aec9eb83,cHash: 5caa842541530a5,cUPMDTk: /?__cf_chl_tkx7uRprR_m.XYVFtYcdWEdxvUHvhY3HDcvMqIKZgjI7I-1693082837-0-gaNycGzNCPs,cFPWv: g,cTTimeMs: 1000,cMTimeMs: 0,cTplV: 5,cTplB: cf,cK: ,fa: /?__cf_chl_f_tkx7uRprR_m.XYVFtYcdWEdxvUHvhY3HDcvMqIKZgjI7I-1693082837-0-gaNycGzNCPs,md: x0DqDplUQ0RlM2ilbaFAoXr3V7s2rpP6Nzr3xJoo7ns-1693082837-0-AcXZMOP2-s0TJb-QZxF1PN5iKdYHn0U6icrlWmlrymgJjkk8UZD_Px6kUQGoXfwvjikLFUpX9ICmdvXn0jlOlPFdKIg3T6jbLMGECZGXAqyrzwj76VAcH4_iSEshgXLBE5cF6fTvIY2r5LInraHLnXEFmeyM6Q_E5s2zaoHqsaKc5cEDWQ9b9hUXaz1orXqD6NciNj63H5TvCwxRAty3YlRYsJUK8xtpzsBb6etoKA267K7pO0Xp0OlvABkPcDawV_AkgOnGeB3Mbec0WSfVAtBok5CUeGV9fodvNSzeQjzJIR580HC8qmRVWbYXURkvfUrraK1I99EipvAqnoa1O2RoNu0W1luAK_inDq96cwMgGJ6o21Lc1ljlhf2BQdPs-Uvzo8p9kpKnAKlbwVzydMhsysOdWv3g2n7cs7PszS2moU-4lnfCEUaRdXTPbMozU021IEEppJmWjBqSFH-A16Sknsi2g0EGT6LQYRQ6cmTAF3bsQ1ASD_FkUd1O894hh1eHGeO-ACM9Zd0KTXOa1Z_KX8GLirOOyuHRoEE5oS2fmRjPX3Dfb1xZFjRbelcjT1mhpbsMf_zdgUE8bpmnuZ-fUov_2xjx_o9Ex7ZCEjamoFtVHhNrMIDUSYzfNcBmjYeISLBb39KX0ZVJZqXXYtAswUuG1KUDHqZ52tlFbw1Cqzg7SckJXSzgVJVCHJO-6QtXARLwjOwsQsWtFmoGSr9LBb03FCh_ZYRcai6oULbppbHyIuz5gexadv20pk6dWf6uIVUmB66_bBqMLSFrDUmN760q8Y1Rig6iVMSxP92RZmRGodu6CsyeC5u1L2QECB6t4eyF6PjHlRG6yCugQIO1GV3_jB2FmkFWP1kPzExDO6tNYet1O_R5qyi4H5HGqohmU_3R_OBNWC2F0ZqJy3OM82obdok4VAs1k4b-y9s62mShpyYrbR3bUwJKfCgUrgD2-3CqSCrO9Rqd5W5LeHnIQ3lDC

Subdomains

Date	Domain	IP
mx3.hamptons.com	2014-07-01	216.200.145.235
www.hamptons.com	2025-04-04	172.67.171.220

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hamptons.com

Is this malicious?

Files that talk to hamptons.com

DNS Resolutions

Port 80

Port 443

Subdomains