Domain > js.kuku123.info

More information on this domain is in AlienVault OTX

Property	Value
Name	Gary Willing
Email	gw24347@yahoo.com
Address	1004 Creatwood Circle
Zip Code	30080
City	Smyrna
State	Georgia
Country	US
Phone	+1.4042752838
NameServer	ns74.domaincontrol.com
Created	2009-12-20 15:00:19
Changed	2015-01-31 22:22:05
Expires	2015-12-20 15:00:19
Registrar	GoDaddy.com, LLC (R1

DNS Resolutions

Date	IP Address
2014-06-13	176.74.176.178 (ClassC)
2025-01-13	199.59.243.228 (ClassC)

HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 01:25:17 GMTContent-Type: text/html; charsetutf-8Content-Length: 1046X-Request-Id: 2e64c4ab-4698-4229-b853-cacbf4f264ffCache-Control: no-store, max-age0Accept-Ch: sec-ch-prefers-color-schemeCritical-Ch: sec-ch-prefers-color-schemeVary: sec-ch-prefers-color-schemeX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_dOhV1wVQjKfNa7Tby/R+aSQA3GNAdkl+ot28ExhH2bzPS8iKeD1n3RmUVHab2rVfg3eIPvvspz5I1vBc3Zh2WASet-Cookie: parking_session2e64c4ab-4698-4229-b853-cacbf4f264ff; expiresMon, 13 Jan 2025 01:40:18 GMT; path/Connection: close

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_dOhV1wVQjKfNa7Tby/R+aSQA3GNAdkl+ot28ExhH2bzPS8iKeD1n3RmUVHab2rVfg3eIPvvspz5I1vBc3Zh2WA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMmU2NGM0YWItNDY5OC00MjI5LWI4NTMtY2FjYmY0ZjI2NGZmIiwicGFnZV90aW1lIjoxNzM2NzMxNTE4LCJwYWdlX3VybCI6Imh0dHA6Ly9qcy5rdWt1MTIzLmluZm8vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0IjoianMua3VrdTEyMy5pbmZvIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/btywfykOg.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 13 Jan 2025 01:25:17 GMTContent-Type: text/html; charsetutf-8Content-Length: 1050X-Request-Id: a55dfb42-7eac-4db8-921e-c1a8d0e5b6d4Cache-Control: no-store, max-age0Accept-Ch: sec-ch-prefers-color-schemeCritical-Ch: sec-ch-prefers-color-schemeVary: sec-ch-prefers-color-schemeX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_dOhV1wVQjKfNa7Tby/R+aSQA3GNAdkl+ot28ExhH2bzPS8iKeD1n3RmUVHab2rVfg3eIPvvspz5I1vBc3Zh2WASet-Cookie: parking_sessiona55dfb42-7eac-4db8-921e-c1a8d0e5b6d4; expiresMon, 13 Jan 2025 01:40:18 GMT; path/Connection: close

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_dOhV1wVQjKfNa7Tby/R+aSQA3GNAdkl+ot28ExhH2bzPS8iKeD1n3RmUVHab2rVfg3eIPvvspz5I1vBc3Zh2WA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYTU1ZGZiNDItN2VhYy00ZGI4LTkyMWUtYzFhOGQwZTViNmQ0IiwicGFnZV90aW1lIjoxNzM2NzMxNTE4LCJwYWdlX3VybCI6Imh0dHBzOi8vanMua3VrdTEyMy5pbmZvLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6ImpzLmt1a3UxMjMuaW5mbyIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bjELLQPHQ.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
429e53cd1c70429a8bc852f8be76fa06	[Trojan.Clicker.Kuk.u] [PWS.VB.DQ3] [Trojan.Click2.18165] [Win32/VB.PMD] [W32/Vb.PMD!tr] [VB.BZAS] [Win32.SuspectCrc] [Trojan-Clicker.Win32.Kuk.u] [PWS*Win32/VB.DQ] [winpe/VB.RU] [Worm.Win32.Vbex.b] [Troj/Espion-P] [TROJ_AG.1C64F147] [TrojanClicker.Kuk]
135f51b8c235cb7b550c618c1684e030	[Trojan/VB.pmd] [Riskware] [Trojan.VB!wzU4RbNllHI] [W32/Trojan2.NPTA] [Win32.TRVB.Rdh] [Trojan.Kazy-92] [Trojan-Clicker.Win32.Kuk.b] [Trojan.VBCrypt!IK] [UnclassifiedMalware] [Trojan.Click2.5595] [TR/VB.rdh.1] [Troj/Kuk-A] [Win32/AdClicker.EHU] [Program:Win32/Pornclick.A] [Trojan/Win32.HDC] [Trojan.VBRA.02089] [AdWare.Win32.Undef.gdm] [Trojan.VBCrypt] [W32/StartPage.AQGC!tr] [VBCrypt.BZL]

Domain > js.kuku123.info

Is this malicious?

Files that talk to js.kuku123.info

Whois

DNS Resolutions

Port 80

Port 443