Domain > letssavemichigan.com

More information on this domain is in AlienVault OTX

Files that talk to letssavemichigan.com

MD5	A/V
4db0e2318885466883cc47fb4c11b695	[FakeSecTool-FCX!4DB0E2318885] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1] [W32/Kelihos.DE!tr]

Whois

Property	Value
Name	Michigan Municpal League
Organization	Michigan Municpal League
Email	jmoje@MML.ORG
Address	1675 Green Road
Zip Code	48105
City	Ann Arbor
State	MI
Country	US
Phone	+1.7346623246
Fax	+1.9999999999
NameServer	NS2.BLUEHOST.COM
Created	2013-06-12 14:20:07
Changed	2015-01-29 01:40:17
Expires	2016-06-22 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2013-12-04	69.89.31.102 (ClassC)
2015-06-02	-
2024-10-06	172.67.185.101 (ClassC)
2025-01-16	104.21.76.23 (ClassC)

HTTP/1.1 200 OKDate: Sun, 04 Aug 2024 21:36:00 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-alivelast-modified: Sun, 04 Aug 2024 20:47:06 GMTvary: Accept-Encoding

!DOCTYPE html>html langen-US prefixog: https://ogp.me/ns#>head>meta charsetUTF-8>script>if(navigator.userAgent.match(/MSIE|Internet Explorer/i)||navigator.userAgent.match(/Trident/7..*?rv:11/i)){var hrefdocument.location.href;if(!href.match(/?&nowprocket/)){if(href.indexOf(?)-1){if(href.indexOf(#)-1){document.location.hrefhref+?nowprocket1}else{document.location.hrefhref.replace(#,?nowprocket1#)}}else{if(href.indexOf(#)-1){document.location.hrefhref+&nowprocket1}else{document.location.hrefhref.replace(#,&nowprocket1#)}}}}/script>script>(()>{class RocketLazyLoadScripts{constructor(){this.v1.2.5.1,this.triggerEventskeydown,mousedown,mousemove,touchmove,touchstart,touchend,wheel,this.userEventHandlerthis.t.bind(this),this.touchStartHandlerthis.i.bind(this),this.touchMoveHandlerthis.o.bind(this),this.touchEndHandlerthis.h.bind(this),this.clickHandlerthis.u.bind(this),this.interceptedClicks,this.interceptedClickListeners,this.l(this),window.addEventListener(pageshow,(t>{this.persistedt.persisted,this.everythingLoaded&&this.m()})),document.addEventListener(DOMContentLoaded,(()>{this.p()})),this.delayedScripts{normal:,async:,defer:},this.trash,this.allJQueries}k(t){document.hidden?t.t():(this.triggerEvents.forEach((e>window.addEventListener(e,t.userEventHandler,{passive:!0}))),window.addEventListener(touchstart,t.touchStartHandler,{passive:!0}),window.addEventListener(mousedown,t.touchStartHandler),document.addEventListener(visibilitychange,t.userEventHandler))}_(){this.triggerEvents.forEach((t>window.removeEventListener(t,this.userEventHandler,{passive:!0}))),document.removeEventListener(visibilitychange,this.userEventHandler)}i(t){HTML!t.target.tagName&&(window.addEventListener(touchend,this.touchEndHandler),window.addEventListener(mouseup,this.touchEndHandler),window.addEventListener(touchmove,this.touchMoveHandler,{passive:!0}),window.addEventListener(mousemove,this.touchMoveHandler),t.target.addEventListener(click,this.clickHandler),this.L(t.target,!0),this.M(t.target,onclick,rocket-onclick),this.C())}o(t){window.r

Subdomains

Date	Domain	IP
www.letssavemichigan.com	2014-05-30	69.89.31.102

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > letssavemichigan.com

Is this malicious?

Files that talk to letssavemichigan.com

Whois

DNS Resolutions

Port 443

Subdomains