Domain > natwestgfm.com

More information on this domain is in AlienVault OTX

Files that talk to natwestgfm.com

MD5	A/V
14a2291e48bd02b528d0c018fee03e86	[HW32.CDB.A3eb] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [Trojan.Packed.26581] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.XULT-7356] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.CBCJ!tr] [Crypt_s.GNC]

Whois

Property	Value
Email	KAS-DomainRegistration-8f-iss@wwpdl.vnet.ibm.com
NameServer	NS2.EURODNS.COM
Created	2006-04-12 20:44:59
Changed	2019-04-06 02:50:08
Registrar	EuroDNS S.A.

DNS Resolutions

Date	IP Address
2014-06-18	194.153.113.120 (ClassC)
2025-06-20	169.61.79.186 (ClassC)
2025-08-06	169.50.145.125 (ClassC)

HTTP/1.1 500 Internal Server ErrorCache-Control: privateContent-Type: text/htmlServer: Microsoft-IIS/10.0Set-Cookie: ASPSESSIONIDQABCSRDBBAADBJGCIKGAHPIEFCIBBIJK; path/x-server: vwebams01Date: Sat, 03

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1/>title>500 - Internal server error./title>style typetext/css>!--body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:trebuchet MS, Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}-->/style>/head>body>div idheader>h1>Server Error/h1>/div>div idcontent> div classcontent-container>fieldset>  h2>500 - Internal server error./h2>  h3>There is a problem with the resource you are looking for, and it cannot be displayed./h3> /fieldset>/div>/div>/body>/html>

Subdomains

Date	Domain	IP
0366723351.natwestgfm.com	2019-09-16	54.72.9.115

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > natwestgfm.com

Is this malicious?

Files that talk to natwestgfm.com

Whois

DNS Resolutions

Port 80

Subdomains