Domain > jamesdev.co.uk

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to jamesdev.co.uk

MD5	A/V
f84be9bda869daac41466b9519a89b65

Whois

Property	Value
Name	James Heathcote
Address	3 Cleycourt Road
Zip Code	Oxfordshire
City	Shrivenham
State	Swindon
Country	SN6 8BN
NameServer	ns2.digitalocean.com
Created	2016-01-29 00:00:00
Changed	2016-01-29 00:00:00
Expires	2018-01-29 00:00:00
Registrar	Fasthosts Internet L

DNS Resolutions

Date	IP Address
2015-01-30	185.53.172.123 (ClassC)
2024-11-07	173.208.49.205 (ClassC)

HTTP/1.1 200 OKDate: Thu, 07 Nov 2024 23:25:27 GMTServer: ApacheX-Powered-By: PHP/8.1.28Cache-Control: no-cache, privateSet-Cookie: XSRF-TOKENeyJpdiI6ImxjRlZSc0lUZ3BsM0k0S1libTlES1E9PSIsInZhbHVlIjoiTThpZjVQSUg3bjBONG8zOThqdjBaSmhlclFCYWpxd01XTmZ0N2w5em9tOXpVTlpZQ2RZOXpQOHhYc3gyZFlTT3l6YkFRSzRoazNLMDdONDhDV0E4VnYreGl1VFVKSndMdjZzb2dmL2pzdmdNK3gwd1FsMDZnSDVIL2tqSjhZOWgiLCJtYWMiOiIwMDBmNTJlNzIwNmRkNGVmODM5MzEyYmU3OTdhNTEyYzI3OTFkYjhkYTA4ZWZiODJiMmFjZTJiYjE1OTYyZDJjIiwidGFnIjoiIn0%3D; expiresFri, 08 Nov 2024 01:25:27 GMT; Max-Age7200; path/; samesitelaxSet-Cookie: laravel_sessioneyJpdiI6Ik9BcllhbG5IaTZlV3N0eUtMM1pZRGc9PSIsInZhbHVlIjoiZmU5T21XUWgyMXF1UnhzVWpKR0JXZERGaGEyazNRQkRQbm9GWmNLb21HZzh6RlBORzNDUlhvY0Rxd1VTS3hwOFVnRCtCenhmQy9vOURLVytaWG5nUVNoUVY0Z3VXallWNlIyaWtpaDRCOVNCbFFwdFFpMFhDd2FnZ1dTMVU0YlEiLCJtYWMiOiI4MDM3M2JiMWEyZmQyM2E3ZGUyMTllMTlhNTQwYWNlYmRkYjI5NDc2N2Y1OGE3MGFhNzIyM2EzYzY3YTQ2MTlhIiwidGFnIjoiIn0%3D; expiresFri, 08 Nov 2024 01:25:27 GMT; Max-Age7200; path/; httponly; samesitelaxUpgrade: h2Connection: UpgradeTransfer-Encoding: chunkedContent-Type: text/html; charsetUTF-8

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Wilcom Chatbot/title>    link relstylesheet hrefhttps://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.2/css/bootstrap.min.css>/head>body>div classcontainer mt-5>    h1>Wilcom Chatbot Helper/h1>    form idchat-form>        div classform-group>            label forversion>Select Version/label>            select classform-control idversion nameversion>                option valuee4.5>e4.5/option>                option valueDE>DE/option>                option valueHL>HL/option>                option valueall>All Versions/option>            /select>        /div>        div classform-group>            label forquery>Your Question/label>            input typetext classform-control idquery namequery required>        /div>        button typesubmit classbtn btn-primary>Ask/button>    /form>    div classmt-4>        h3>Response/h3>        div idresponse>/div>    /div>/div>script srchttps://code.jquery.com/jquery-3.5.1.min.js>/script>script>    $(document).ready(function () {        $(#chat-form).on(submit, function (e) {            e.preventDefault();            $.ajax({                url: http://jamesdev.co.uk/query,                method: POST,                data: {                    version: $(#version).val(),                    query: $(#query).val(),                    _token: OgUXWbTgUkSRDxHRoDMwGQoZvqSZ6OsP1F94M72G                },                success: function (response) {                    $(#response).text(response.response);                }            });        });    });/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Thu, 07 Nov 2024 23:25:28 GMTServer: ApacheX-Powered-By: PHP/8.1.28Cache-Control: no-cache, privateSet-Cookie: XSRF-TOKENeyJpdiI6IkFDbDVMbFRFRnJ1SjlJSDZNaFFMckE9PSIsInZhbHVlIjoiSDJ2NkMvRk5mLzJQaHl3elRINFVpTmUxR2xLSmhFRXpiRVE1TWV4MFY2L2tCdHJQYlpXWUxmRjJrRlpvcmovSVhiWDBqaXc4Q0NDMERtVDE3TDF5WVlIR1RYWmtRaGM4Qmdwem5WRUtVL05VN2pCY2ZJZDlWUTdLWVFEcU9IVW4iLCJtYWMiOiI3NDkxMzkzYzAwMjNlODYwYjE5N2NmMDBmZTI2ZDQ3M2Q1ZmYxMGNhYzkwMTllMDQ3NWI1MTI1ZDcxZWQ0ZmY1IiwidGFnIjoiIn0%3D; expiresFri, 08 Nov 2024 01:25:28 GMT; Max-Age7200; path/; secure; samesitelaxSet-Cookie: laravel_sessioneyJpdiI6Im91TGcwNUlhd2huaUk2ZzF5ZWMvM3c9PSIsInZhbHVlIjoiYXVmWGozbng3eXJnN2xJNUZ2akU5eUxsNUtPb3BZM1RpbTAxNVVXZVY2aGFZZWFneWMxaFlPWGxRQzAzYzlIVm40VHExekc3WXFkbmZjTGk2dzRrVGx0dkxpZ0dieWdldFA0YWUzeU1paUQ3c2swRk9iUnFFb0ZRZERPb0VrMWwiLCJtYWMiOiIyOGRmOGFmMWJhNmNhM2VjNTllZDVhYmI0YWVmZTcxNjllMjg4MzEwNDhlZTk0NTEzYWVhOGFkMDZkMDdhNTYwIiwidGFnIjoiIn0%3D; expiresFri, 08 Nov 2024 01:25:28 GMT; Max-Age7200; path/; httponly; samesitelaxUpgrade: h2Connection: UpgradeTransfer-Encoding: chunkedContent-Type: text/html; charsetUTF-8

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Wilcom Chatbot/title>    link relstylesheet hrefhttps://cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/4.5.2/css/bootstrap.min.css>/head>body>div classcontainer mt-5>    h1>Wilcom Chatbot Helper/h1>    form idchat-form>        div classform-group>            label forversion>Select Version/label>            select classform-control idversion nameversion>                option valuee4.5>e4.5/option>                option valueDE>DE/option>                option valueHL>HL/option>                option valueall>All Versions/option>            /select>        /div>        div classform-group>            label forquery>Your Question/label>            input typetext classform-control idquery namequery required>        /div>        button typesubmit classbtn btn-primary>Ask/button>    /form>    div classmt-4>        h3>Response/h3>        div idresponse>/div>    /div>/div>script srchttps://code.jquery.com/jquery-3.5.1.min.js>/script>script>    $(document).ready(function () {        $(#chat-form).on(submit, function (e) {            e.preventDefault();            $.ajax({                url: https://jamesdev.co.uk/query,                method: POST,                data: {                    version: $(#version).val(),                    query: $(#query).val(),                    _token: jj1H7R2Mn60L2Uea0QYaztzu7jvAApn8LXiT6NoC                },                success: function (response) {                    $(#response).text(response.response);                }            });        });    });/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > jamesdev.co.uk

Is this malicious?

Files that talk to jamesdev.co.uk

Whois

DNS Resolutions

Port 80

Port 443