Domain > n.99081.com

More information on this domain is in AlienVault OTX

Property	Value
Email	hlpsaller@yahoo.com
NameServer	NS2.BODIS.COM
Created	2011-03-21 00:00:00
Changed	2015-03-23 00:00:00
Expires	2016-03-21 00:00:00
Registrar	DYNADOT, LLC

DNS Resolutions

Date	IP Address
2024-06-02	199.59.243.225 (ClassC)
2024-09-18	199.59.243.226 (ClassC)
2024-11-12	199.59.243.227 (ClassC)
2025-12-15	199.59.243.228 (ClassC)

HTTP/1.1 200 OKdate: Tue, 24 Oct 2023 23:01:01 GMTcontent-type: text/html; charsetutf-8content-length: 1009x-request-id: a3b3f85b-6b46-4625-895a-f9e1ae680db1cache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_R7JtdLcdt6R73+CUtNfLejEUpD3PBkw2EPM/YaX7iK2jSWUcIL1eg9xLg93soXxF0F97w5cCMG/Yek3uOt7fWg langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYTNiM2Y4NWItNmI0Ni00NjI1LTg5NWEtZjllMWFlNjgwZGIxIiwicGFnZV90aW1lIjoxNjk4MTg4NDYyLCJwYWdlX3VybCI6Imh0dHA6Ly9uLjk5MDgxLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJuLjk5MDgxLmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bwSrhKlqE.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Tue, 24 Oct 2023 23:01:02 GMTContent-Type: text/html; charsetutf-8Content-Length: 1009X-Request-Id: 4dc95179-4ab4-4a95-aa0f-46a6ceace0c5Cache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_R7JtdLcdt6R73+CUtNfLejEUpD3PBkw2EPM/YaX7iK2jSWUcIL1eg9xLg93soXxF0F97w5cCMG/Yek3uOt7fWg langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiNGRjOTUxNzktNGFiNC00YTk1LWFhMGYtNDZhNmNlYWNlMGM1IiwicGFnZV90aW1lIjoxNjk4MTg4NDYyLCJwYWdlX3VybCI6Imh0dHBzOi8vbi45OTA4MS5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoibi45OTA4MS5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bDAutDoPd.js>/script>/body>/html>

Subdomains

Date	Domain	IP
cloud1.99081.com	2013-06-19	199.59.243.123
b.99081.com	2013-04-01	199.59.241.250
g.99081.com	2013-04-01	199.59.241.250
l.99081.com	2013-06-26	199.59.243.108
n.99081.com	2024-06-02	199.59.243.225
o.99081.com	2013-04-30	199.59.243.108
p.99081.com	2013-04-01	199.59.241.250
www.99081.com	2025-09-22	199.59.243.228

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
b864506ded3b5c7e1c2c05dd8e06ea59	[W32.Clodc34.Trojan.1732] [Worm.Runfer.vr.n4] [BackDoor-AWQ] [W32/Runfer.vr] [Packed/eXPressor] [W32/Heuristic-210!Eldorado] [Win32/Dowque.AEN] [Backdoor.Win32.Hupigon.axbr] [Trojan.Win32.Runfer.ntlg] [Virus.Win32.Heur.c] [Mal/DSpy-B] [TrojWare.Win32.Banker.etk74] [BackDoor.Huai.1359] [Mal_Mlwr-13] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Heur:Backdoor/Huigezi] [Trojan[Backdoor]/Win32.Hupigon] [Win32.Hack.Huigezi.(kcloud)] [TrojanDropper:Win32/Delfsnif.A] [Worm.Win32.A.Runfer.302260] [MalwareScope.Trojan-PSW.Game.16] [Worm.Win32.Runfer.aDn] [PE:Backdoor.Gpegion!1.6634] [Trojan-Banker.Win32.Banbra] [BackDoor.Hupigon] [Bck/Hupigon.LNX] [Win32/Trojan.91d]

Domain > n.99081.com

Is this malicious?

Files that talk to n.99081.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains