Domain > hellaswebnews.com

More information on this domain is in AlienVault OTX

Files that talk to hellaswebnews.com

MD5	A/V
9c862af9a540563488cdc1c61b9ef5f8	[Fake-SecTool-FOR!9C862AF9A540] [Kryptik.CBXV] [Heur.Packed.Unknown] [Artemis!9C862AF9A540] [W32/Trojan3.FKT] [Trojan.Zbot] [TSPY_TEPFER.AZK] [Trojan-PSW.Win32.Tepfer.mpmg] [UnclassifiedMalware] [Win32.Malware!Drop] [Mal/FakeAV-OY] [Win32.HeurC.KVMH004.a.(kcloud)] [PWS:Win32/Fareit] [W32/Trojan.SZZL-8158] [Win32/PSW.Fareit.A] [Trojan-PWS.Tepfer] [W32/Tepfer.MPMG!tr] [Crypt_s.BGV]
5f51180b7fbc1274439fe1907fce50bc	[Fake-SecTool-FOR!5F51180B7FBC] [W32/Trojan3.FKZ] [Hlux.ZY] [Heur.Packed.Unknown] [Mal/FakeAV-OY] [Trojan/Win32.FakeAV] [W32/Trojan.WBTK-1271] [Win32/Kryptik.BDSU] [W32/Kryptik.BDPK!tr] [Trojan-PWS/W32.Tepfer.116224.R] [BackDoor-FJW] [Trojan/Kryptik.bdsu] [Trojan.Win32.Tepfer.bvdgqg] [Trojan.Zbot] [Kryptik.CBZQ] [Win32/Zbot.HGQ] [TSPY_FAREIT.BNF] [Win.Trojan.Tepfer-315] [Trojan.Kryptik!28hDe/GN0PM] [Troj/Krypt-D] [TrojWare.Win32.Kryptik.BDSU] [Trojan.Packed.24465] [Trojan.Tepfer.Win32.52239] [BehavesLike.Win32.Ransom.cc] [Trojan/PSW.Tepfer.cfly] [TR/PSW.Tepfer.mrfa] [Win32.HeurC.KVMH004.a]
2f58d01c6cfa567627cb04213a93c19a	[Artemis!2F58D01C6CFA] [W32/Trojan3.FKX] [Hlux.ZY] [Heur.Packed.Unknown] [Trojan/Win32.FakeAV] [W32/Trojan.DVWR-8398] [W32/Kryptik.AGAJ!tr] [Crypt_s.BGV] [Mal/FakeAV-OY] [Win32/Kryptik.BDSU] [Trojan-Spy.Win32.Zbot]
eb362fe45a54707d5c796e36975e88a5	[Kryptik.CBUG] [Heur.Packed.Unknown] [W32/Kryptik.BDPK!tr] [W32/Trojan3.FLH] [TSPY_FAREIT.WT] [Trojan.PWS.Stealer.2877] [Win32.Malware!Drop] [Artemis!EB362FE45A54] [W32/Trojan.CDMU-1910] [Trojan/Win32.Tepfer] [Win32/PSW.Fareit.A] [Win32.SuspectCrc]

Whois

Property	Value
Email	leviathan.ley@gmail.com
NameServer	NS2.IWANTMYNAME.NET
Created	2008-09-19 00:00:00
Changed	2014-09-20 00:00:00
Expires	2015-09-19 00:00:00
Registrar	1 API GMBH

DNS Resolutions

Date	IP Address
2013-03-13	208.113.171.92 (ClassC)
2015-03-07	198.27.104.212 (ClassC)
2024-05-04	172.67.160.35 (ClassC)
2024-12-26	104.21.14.183 (ClassC)

HTTP/1.1 400 Bad RequestDate: Sun, 24 Dec 2023 20:39:01 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveCache-Control: no-cache, must-revalidateExpires: Thu, 01

!DOCTYPE html>head>  title>400 Bad Request/title>  meta nameviewport contentwidthdevice-width, initial-scale1>  style typetext/css>  body {    background: white;  }  main {    position: absolute;    top: 50%;    left: 50%;    transform: translate(-50%, -50%);    text-align: center;    min-width: 95vw;  }  main h1 {    font-weight: 300;    font-size: 4.6em;    color: #191919;    margin: 0 0 11px 0;  }  main p {    font-size: 1.4em;    color: #3a3a3a;    font-weight: 300;    line-height: 2em;    margin: 0;  }  main p a {    color: #3a3a3a;    text-decoration: none;    border-bottom: solid 1px #3a3a3a;  }  body {    font-family: Clarkson, sans-serif;    font-size: 12px;  }  #status-page {    display: none;  }  footer {    position: absolute;    bottom: 22px;    left: 0;    width: 100%;    text-align: center;    line-height: 2em;  }  footer span {    margin: 0 11px;    font-size: 1em;    font-weight: 300;    color: #a9a9a9;    white-space: nowrap;  }  footer span strong {    font-weight: 300;    color: #191919;  }  @media (max-width: 600px) {    body {      font-size: 10px;    }  }  @font-face {    font-family: Clarkson;    font-weight: 400;    src: local(?), url(data:application/x-font-woff;base64,d09GRgABAAAAAN0AABIAAAACG6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEU0lHAADc+AAAAAgAAAAIAAAAAUdERUYAAAGUAAAAKAAAACgHkAeSR1BPUwAAAbwAACUCAAB13mCt0ChHU1VCAAAmwAAABdwAAAwEsu+8aU9TLzIAACycAAAAWQAAAGCLhUDrY21hcAAALPgAAAFZAAACBpiPvC1jdnQgAADVNAAAAE0AAACCC1saEWZwZ20AANWEAAAGwgAADhWeNhTQZ2FzcAAA1SwAAAAIAAAACAAAABBnbHlmAAAuVAAAklYAAV6UcRSCOGhlYWQAAMCsAAAANgAAADYRs6NoaGhlYQAAwOQAAAAgAAAAJAarBZZobXR4AADBBAAABC8AAAjqbbc3qWxvY2EAAMU0AAAEcQAABHh3P82QbWF4cAAAyagAAAAgAAAAIAOhDsluYW1lAADJyAAAA7EAAAlXEUv7Y3Bvc3QAAM18AAAHrQAAELqZhqPvcHJlcAAA3EgAAACuAAAAy4umbr4AAQAAAAwAAAAAAAAAAgAEAVcBZgADAc4B0gACAhgCIgADAjQCOgACeAF0kDOcWGEQxGf3IbZtO01s27Zt26xSpwmb2Gxi27bt893e/L5Yzbxv+d95EADJ0REH4dWt37QtMg4Y3W8I8g/tNXY4ysIHADMowPfPSBBwSurUapsXGb/lFOG3l4ckSNpn5JiRKO+0otPqTusO6Td6OBo7be20s9PeAAT4lzqe/vfrISnSIrfrFRSFMvZR3MvqHc/uuygs2LVcWH1Jo+6NEloVh7SqjgDu/ta1nacyGIjhmI

Subdomains

Date	Domain	IP
backup.hellaswebnews.com	2013-06-17	208.113.171.92

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > hellaswebnews.com

Is this malicious?

Files that talk to hellaswebnews.com

Whois

DNS Resolutions

Port 443

Subdomains