Domain > heavengarden.net

More information on this domain is in AlienVault OTX

Files that talk to heavengarden.net

MD5	A/V
13c9e9a7039668b9b63b7b635268b7a8	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan-FEMT!13C9E9A70396] [Troj/Wonton-FE]
139bdffc4f687aa5caaaef1cbe675176	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan.Zbot.WHE] [Troj/Wonton-FE]
2c22f8d214a87438021aa38412a9336f	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan-FEMT!2C22F8D214A8] [Troj/Wonton-FE]
233159fed8cdfa203718a4e17daf3593	[Trojan-DownloaderW32/Verse.A] [Win32/Cryptor] [Trojan.FBLock] [Trojan.HBCrypter] [W32/Worm-FEY!233159FED8CD] [TrojanSpyWin32/Nivdort.Y] [TSPY_NIVDORT.SMA]
5747f3c32dc9dd45af318c4ab15b3b43	[Trojan-DownloaderW32/Verse.A] [Win32/Cryptor] [Trojan.FBLock] [Trojan.HBCrypter] [PWSZbot-FCTZ!5747F3C32DC9] [TrojanSpyWin32/Nivdort.X] [TSPY_NIVDORT.SMA]
6b7a3b968db575f80b6383c9ddee6887	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock] [Trojan-FEMT!6B7A3B968DB5] [Troj/Wonton-FE]
9717192e6057a84128056adbb1cfe084
dbea13c7ad7f021dd4f9c1b26b4dcaee
19ca60902493fe112dbed370bb7d63ad

Whois

Property	Value
Email	serdardurak@gmail.com
NameServer	NS3.NETTEYIZ.GEN.TR
Created	2012-03-18 00:00:00
Changed	2015-03-21 00:00:00
Expires	2016-03-18 00:00:00
Registrar	PDR LTD. D/B/A PUBLI

DNS Resolutions

Date	IP Address
2014-11-14	159.253.36.78 (ClassC)
2015-05-27	185.86.80.3 (ClassC)
2018-09-13	112.213.91.61 (ClassC)
2025-05-31	216.239.36.21 (ClassC)
2025-06-28	216.239.34.21 (ClassC)
2025-07-21	216.239.32.21 (ClassC)
2025-08-04	216.239.38.21 (ClassC)

Port 80

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8x-ua-compatible: IEedgeCache-Control: no-cache, no-store, max-age0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue,

!doctype html>html langen-US dirltr itemscope itemtypehttps://schema.org/LocalBusiness>head>base hrefhttp://business.google.com/>meta namereferrer contentorigin>script data-id_gd nonceaBSfjSZHIaRkpxfL3NwDsA>window.WIZ_global_data  {DpimGf:false,E5zAXe:https://workspace.google.com,EP1ykd:/_/*,/local/business,/local/business/*,/localinventory,/localinventory/*,/posts/l/:listingId,/restaurants,/restaurants/*,/website/_/*,/website/demo,/website/demo/,/website/demo/*,FdrFJe:-1442382146897916720,Im6cmf:/_/GeoMerchantPrestoSiteUi,LVIXXb:1,LoQv7e:true,MT7f9b:,MuJWjd:false,NpZeBb:%.@.3,QrtxK:,S06Grb:,S6lZl:112291507,T44sLd:,TSDtV:%.@.null,45449605,null,false,null,null,null,aPDse,45532408,20,null,null,null,null,i1GOPc,45449611,null,false,null,null,null,visWib,45449606,null,true,null,null,null,fKfWJb,45449600,null,false,null,null,null,u9L1lf,45449599,null,true,null,null,null,EPs7mc,45459555,null,false,null,null,null,Imeoqb,45449607,null,false,null,null,null,
n8wqe,45449614,null,false,null,null,null,owC1e,45449609,null,false,null,null,null,sH6IRc,45532409,null,false,null,null,null,pd3dPc,45449615,null,false,null,null,null,ouwyc,45449616,null,false,null,null,null,DvPMDc,45449608,null,false,null,null,null,ocCrNd,45449610,null,false,null,null,null,sdhVsb,45449602,null,true,null,null,null,
4nYUe,45532413,null,true,null,null,null,l9NlMd,45532414,null,true,null,null,null,
6hcne,45532410,null,false,null,null,null,hjjE8c,45449613,null,false,null,null,null,KB6yl,45532412,null,false,null,null,null,mLu9zf,45532411,null,false,null,null,null,SALIbc,45532415,null,true,null,null,null,LzNN5b,45449612,null,false,null,null,null,
Dqp1c,45449603,null,true,null,null,null,	oTC0d,45449601,null,true,null,null,null,ItKUvc,45449604,null,true,null,null,null,NRSeob,CAMSCh0P66jaKxrUSwg\u003d,TmEjHd:0,USwLPe:https://business.google.com,Uo6aK:,Vvafkd:false,W7VZyd:,YYbdPc:LEGACY_URL_PRESTO_NAME,Yllh3e:%.@.1704161375984076,126518346,3457137841,ZP08wf:,aMvRme:NO_CLICK_ID,cfb2h:boq_geomerchantprestoserver_20231212.01_p0,eNnkwf:1704161375,eptZe:/_/GeoMerchan

Port 443

HTTP/1.1 200 OKContent-Type: text/html; charsetutf-8x-ua-compatible: IEedgeCache-Control: no-cache, no-store, max-age0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue,

!doctype html>html langen-US dirltr itemscope itemtypehttps://schema.org/LocalBusiness>head>base hrefhttp://business.google.com:443/>meta namereferrer contentorigin>script data-id_gd nonceDmfUhcKkSdE1PVC3XJAt7w>window.WIZ_global_data  {DpimGf:false,E5zAXe:https://workspace.google.com,EP1ykd:/_/*,/local/business,/local/business/*,/localinventory,/localinventory/*,/posts/l/:listingId,/restaurants,/restaurants/*,/website/_/*,/website/demo,/website/demo/,/website/demo/*,FdrFJe:-7343525974333461620,Im6cmf:/_/GeoMerchantPrestoSiteUi,LVIXXb:1,LoQv7e:true,MT7f9b:,MuJWjd:false,NpZeBb:%.@.3,QrtxK:,S06Grb:,S6lZl:112291507,T44sLd:,TSDtV:%.@.null,45449605,null,false,null,null,null,aPDse,45532408,20,null,null,null,null,i1GOPc,45449611,null,false,null,null,null,visWib,45449606,null,true,null,null,null,fKfWJb,45449600,null,false,null,null,null,u9L1lf,45449599,null,true,null,null,null,EPs7mc,45459555,null,false,null,null,null,Imeoqb,45449607,null,false,null,null,null,
n8wqe,45449614,null,false,null,null,null,owC1e,45449609,null,false,null,null,null,sH6IRc,45532409,null,false,null,null,null,pd3dPc,45449615,null,false,null,null,null,ouwyc,45449616,null,false,null,null,null,DvPMDc,45449608,null,false,null,null,null,ocCrNd,45449610,null,false,null,null,null,sdhVsb,45449602,null,true,null,null,null,
4nYUe,45532413,null,true,null,null,null,l9NlMd,45532414,null,true,null,null,null,
6hcne,45532410,null,false,null,null,null,hjjE8c,45449613,null,false,null,null,null,KB6yl,45532412,null,false,null,null,null,mLu9zf,45532411,null,false,null,null,null,SALIbc,45532415,null,true,null,null,null,LzNN5b,45449612,null,false,null,null,null,
Dqp1c,45449603,null,true,null,null,null,	oTC0d,45449601,null,true,null,null,null,ItKUvc,45449604,null,true,null,null,null,NRSeob,CAMSCh0P66jaKxrUSwg\u003d,TmEjHd:0,USwLPe:https://business.google.com,Uo6aK:,Vvafkd:false,W7VZyd:,YYbdPc:LEGACY_URL_PRESTO_NAME,Yllh3e:%.@.1704161376194488,174264661,201545596,ZP08wf:,aMvRme:NO_CLICK_ID,cfb2h:boq_geomerchantprestoserver_20231212.01_p0,eNnkwf:1704161376,eptZe:/_/GeoMerc

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > heavengarden.net

Is this malicious?

Files that talk to heavengarden.net

Whois

DNS Resolutions

Port 80

Port 443