Domain > myexcel.ca

More information on this domain is in AlienVault OTX

Files that talk to myexcel.ca

MD5	A/V
49def1b4084ff03c947f80db3065b01f	[Spyware.Zbot.ED] [W32/Trojan3.ITT] [Trojan.Zbot] [Win32/Tnega.LXRNZJC] [TROJ_FRS.ZMA000FK14] [Backdoor.Win32.Androm.empm] [Win32.Malware!Drop] [Artemis!49DEF1B4084F] [Worm:Win32/Gamarue] [W32/Trojan.BFBZ-7110] [Trj/CI.A] [Win32/TrojanDownloader.Wauchos.AD] [Win32.Backdoor.Androm.Pgdq] [Trojan.Crypt.ZPACK9] [Downloader.Small.KUH] [Win32/Trojan.a81] [Trojan.Zbot.IIC]

DNS Resolutions

Date	IP Address
2019-12-06	13.225.189.13 (ClassC)
2020-01-30	52.85.109.80 (ClassC)
2020-01-30	52.85.109.23 (ClassC)
2020-08-04	52.222.210.207 (ClassC)
2020-08-04	52.222.210.35 (ClassC)
2020-11-22	65.8.186.21 (ClassC)
2020-11-22	65.8.186.74 (ClassC)
2020-11-22	65.8.186.99 (ClassC)
2020-11-23	13.225.194.83 (ClassC)
2023-03-02	99.86.229.70 (ClassC)
2023-08-06	18.172.170.53 (ClassC)
2023-08-23	18.172.170.10 (ClassC)
2023-11-16	18.172.170.15 (ClassC)
2025-07-09	76.223.67.189 (ClassC)
2026-02-02	172.67.168.176 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlContent-Length: 5148Connection: keep-aliveServer: CloudFrontDate: Sun, 06 Aug 2023 11:10:38 GMTCache-Control: max-age100Content-Encoding: UTF-8Strict-Transport-Se

!-- eslint-disable prettier/prettier -->!doctype html>html idhtml-body langen>head>  meta charsetutf-8>  title>/title>  base href/v2.22.32/>  !-- meta http-equivContent-Security-Policy    contentframe-src self https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;    img-src * self data: http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io www.googletagmanager.com;    script-src self http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io https://www.googletagmanager.com https://www.google-analytics.com unsafe-inline;    font-src self http://*.hotjar.com https://*.hotjar.com http://*.hotjar.io https://*.hotjar.io;    connect-src self https://api-bestinsurance.trumobile.dev/ https://secure.trufla.dev/ https://secure.bestinsurance.trufla.com https://secure.trufla.com/ http://*.hotjar.com:* https://*.hotjar.com:* http://*.hotjar.io https://*.hotjar.io wss://*.hotjar.com https://www.googletagmanager.com https://www.google-analytics.com;> -->  meta contentTruMobile produces refined, innovative and easy to use branded apps that facilitate a self-serve model. Brokerages need fewer customer service representatives and brokers are no longer wasting time with basic tasks. Data driven messaging - like push notifications - offer touch points brokers have never had with clients before. namedescription>  meta contentIEedge http-equivX-UA-Compatible>  meta contentyes nameapple-mobile-web-app-capable>  meta contentblack-translucent nameapple-mobile-web-app-status-bar-style>  meta contentwidthdevice-width, initial-scale1 nameviewport>  link hrefassets/themes/default.css relstylesheet>  link hrefhttps://s3.ca-central-1.amazonaws.com/tm-themes-production-v1/excel.css relstylesheet>  !-- link hrefhttps://fonts.googleapis.com/css?familyRoboto:300,400,500 relstylesheet> -->  !-- link hrefhttps://fonts.googleapis.com/icon?familyMaterial+Icons relstylesheet crossoriginanonymous referrerpolicyorigin> -->  !--  link hrefhttps://d3rok9s8nprdrw.cloudfront.net/v2.22.32/assets/vendors/d

Subdomains

Date	Domain	IP
smtp.myexcel.ca	2014-06-20	216.152.195.198

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > myexcel.ca

Is this malicious?

Files that talk to myexcel.ca

DNS Resolutions

Port 80

Port 443

Subdomains