Domain > lobocastleproductions.com

More information on this domain is in AlienVault OTX

Reports

https://otx.alienvault.com/pulse/567313664637f2563...

https://techhelplist.com/spam-list/1014-required-y...

Files that talk to lobocastleproductions.com

MD5	A/V
255e986659b3f6ad7d1d68e303242974
63e17c6d0d4d55a15aac1f4be4910db1	[JS/Kryptik.AYQ] [Trojan.Script.Kryptik.dzcqji] [Win32.Outbreak] [JS/Kryptik.AYO!tr]
cdd0dda0c51040d06c68c9031b23d276
4b81115208e2bc14829c5c91d0465a75	[JS/Kryptik.AYQ] [Trojan.Script.Kryptik.dzcqji] [JS/DwnLdr-MZY] [HEUR.JS.Trojan] [JS/Kryptik.AYO!tr]
bbd2c7dd293416db56bc2f0fd90489dc	[Trojan.Script.Kryptik.dzcqji] [JS/Downldr.CZ1!Eldorado] [JS/Kryptik.AYQ] [JS/DwnLdr-MZY] [JS/Downldr.CZ1!Eldorado] [HEUR.JS.Trojan] [Win32.Outbreak] [JS/Kryptik.AYO!tr]
997ee9ced1d6fcccb99fdcbc4d2dd793	[JS/Downldr.CZ1!Eldorado] [Trojan.Script.Kryptik.dzcqji] [JS/DwnLdr-MZY] [JS/Downldr.CZ1!Eldorado] [TrojanDownloader:JS/Swabfex.E] [HEUR.JS.Trojan] [JS/Nemucod.al] [JS/Kryptik.AYQ] [JS/Kryptik.AYO!tr]
f6a960da8bbad78c33234254fde56512
6bf34408620d2894b5fe9d7ef1deff49
fe64e874af3ab255150edffab1697ed0	[JS/Nemucod.al] [JS/Downldr.CZ1!Eldorado] [JS/Kryptik.AYQ] [Trojan.Script.Kryptik.dzcqji] [JS/DwnLdr-MZY] [JS/Downldr.CZ1!Eldorado] [HEUR.JS.Trojan] [TrojanDownloader:JS/Swabfex.E] [JS/Kryptik.AYO!tr]
d5a38ecacb03986a6af8440b3ae63b6e	[Trojan.FileLocker] [Suspicious.Cloud.5] [Win32/Filecoder.EM] [Trojan-Ransom.Win32.Bitman.awz]
34527910608e3090b9fa3cf7d1b2a3cd
6db225a3211f5c83efb3d89c97c6841d	[JS/Nemucod.al] [JS/Downldr.CZ1!Eldorado] [JS/DwnLdr-MZY] [JS/Downldr.CZ1!Eldorado] [TrojanDownloader:JS/Swabfex.E] [JS/Kryptik.AYQ]
e1d238dcb1e043e3a037ff804e56a745	[BehavesLike.Win32.PWSZbot.fh]
8018ca69fe41a8f05d96b0d874f772a4	[JS/Nemucod.al] [JS/Downldr.CZ1!Eldorado] [JS/Kryptik.AYQ] [JS_CRYPLOD.BSS] [Trojan.Script.Kryptik.dzcqji] [JS_CRYPLOD.BSS] [JS/DwnLdr-MZY] [JS/Downldr.CZ1!Eldorado] [TrojanDownloader:JS/Swabfex.E] [Trojan-Downloader.JS.TeslaCrypt] [JS/Kryptik.AYO!tr]
a519c87fec4093dc0073c3726c0728a1	[JS/Nemucod.aj] [JS/Downldr.CZ1!Eldorado] [JS/Kryptik.AYQ] [Trojan.Script.Kryptik.dzcqji] [BehavesLike.JS.ExploitBlacole.pv] [JS/Downldr.CZ1!Eldorado] [HEUR.JS.Trojan] [JS.S.Downloader.50510[h]] [JS/Nemucod.AF!tr]
530b688decd86ff744a07226e65df960	[Ransom.TeslaCrypt] [BehavesLike.Win32.PWSZbot.fh] [Mal/Ransom-DU] [Adware.Win32.iBryte.EIRM]
83433a243d692b5e34655c83f7810246	[JS/Downldr.CZ1!Eldorado] [JS/Downldr.CZ1!Eldorado] [JS/Kryptik.AYQ]
1d1f8432ef77acf2b226e54d1e0b205f	[Trojan.Script.Kryptik.dzcqji] [JS/DwnLdr-MZY] [HEUR.JS.Trojan] [TrojanDownloader:JS/Swabfex.E] [JS/Nemucod.al] [JS/Kryptik.AYQ] [Trojan-Downloader.JS.TeslaCrypt] [JS/Kryptik.AYO!tr]
177ef2bc4a9d11c982e13d4cc8722dfb	[JS/Downldr.CZ1!Eldorado] [JS/Kryptik.AYQ] [Trojan.Script.Kryptik.dzcqji] [JS/DwnLdr-MZY] [JS/Downldr.CZ1!Eldorado] [HEUR.JS.Trojan] [JS/Kryptik.AYO!tr]
b3579ff1c6cb478bc4b87ad29b09762c	[JS/Nemucod.al] [JS/Kryptik.AYQ] [Trojan.Script.Kryptik.dzcqji] [JS/DwnLdr-MZY] [HEUR.JS.Trojan] [TrojanDownloader:JS/Swabfex.E] [JS/Kryptik.AYO!tr]

Whois

Property	Value
NameServer	NS64.DOMAINCONTROL.COM
Created	2011-03-01 00:00:00
Changed	2014-02-25 00:00:00
Expires	2016-03-01 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2025-01-25	198.185.159.144 (ClassC)
2025-05-25	198.185.159.145 (ClassC)
2025-06-29	198.49.23.145 (ClassC)
2025-08-04	198.49.23.144 (ClassC)

HTTP/1.1 400 Bad Requestcontent-length: 77564expires: Thu, 01 Jan 1970 00:00:00 UTCpragma: no-cachecache-control: no-cache, must-revalidatecontent-type: text/html; charsetUTF-8connection: closedate: F

!DOCTYPE html>head>  title>400 Bad Request/title>  meta nameviewport contentwidthdevice-width, initial-scale1>  style typetext/css>  body {    background: white;  }  main {    position: absolute;    top: 50%;    left: 50%;    transform: translate(-50%, -50%);    text-align: center;    min-width: 95vw;  }  main h1 {    font-weight: 300;    font-size: 4.6em;    color: #191919;    margin: 0 0 11px 0;  }  main p {    font-size: 1.4em;    color: #3a3a3a;    font-weight: 300;    line-height: 2em;    margin: 0;  }  main p a {    color: #3a3a3a;    text-decoration: none;    border-bottom: solid 1px #3a3a3a;  }  body {    font-family: Clarkson, sans-serif;    font-size: 12px;  }  #status-page {    display: none;  }  footer {    position: absolute;    bottom: 22px;    left: 0;    width: 100%;    text-align: center;    line-height: 2em;  }  footer span {    margin: 0 11px;    font-size: 1em;    font-weight: 300;    color: #a9a9a9;    white-space: nowrap;  }  footer span strong {    font-weight: 300;    color: #191919;  }  @media (max-width: 600px) {    body {      font-size: 10px;    }  }  @font-face {    font-family: Clarkson;    font-weight: 400;    src: local(?), url(data:application/x-font-woff;base64,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

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]