Domain > nd-bhginc.com

More information on this domain is in AlienVault OTX

Property	Value
Name	BHG Inc.
Organization	BHG Inc.
Email	no.valid.email@worldnic.com
Address	P.O. Box 309
Zip Code	58540
City	Garrison
State	ND
Country	US
Phone	+1.7014632201
NameServer	NS66.WORLDNIC.COM
Created	1997-09-03 04:00:00
Changed	2015-01-28 23:32:44
Expires	2015-09-02 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-04-12	72.167.188.102 (ClassC)
2014-04-14	208.91.197.27 (ClassC)
2024-05-24	199.59.243.225 (ClassC)
2024-07-01	199.59.243.226 (ClassC)
2024-08-28	3.64.163.50 (ClassC)
2024-12-11	199.59.243.227 (ClassC)
2025-03-24	76.223.54.146 (ClassC)

HTTP/1.1 200 OKdate: Mon, 20 May 2024 06:51:00 GMTcontent-type: text/html; charsetutf-8content-length: 1042x-request-id: 1df8c728-b8c5-4eeb-a7d5-41ac8b98c977cache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_IqaOJcLIj+w+Ln9SzrpHRcaZJlwr5bvJlsciZ32n2wbY7S0T5XQI7bhwRhR+ZChOw1XLvZapg36f6bk4uAT/eQ langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMWRmOGM3MjgtYjhjNS00ZWViLWE3ZDUtNDFhYzhiOThjOTc3IiwicGFnZV90aW1lIjoxNzE2MTg3ODYxLCJwYWdlX3VybCI6Imh0dHA6Ly9uZC1iaGdpbmMuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6Im5kLWJoZ2luYy5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bWyvnpKLC.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 20 May 2024 06:51:01 GMTContent-Type: text/html; charsetutf-8Content-Length: 1042X-Request-Id: b9710fc7-8073-44f8-96c5-a3e5c300845dCache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_IqaOJcLIj+w+Ln9SzrpHRcaZJlwr5bvJlsciZ32n2wbY7S0T5XQI7bhwRhR+ZChOw1XLvZapg36f6bk4uAT/eQ langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYjk3MTBmYzctODA3My00NGY4LTk2YzUtYTNlNWMzMDA4NDVkIiwicGFnZV90aW1lIjoxNzE2MTg3ODYxLCJwYWdlX3VybCI6Imh0dHBzOi8vbmQtYmhnaW5jLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJuZC1iaGdpbmMuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/buyxBfwlM.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
c1411d8111c92509fb476f4e91549a1b	[HW32.Pedka.pmie] [Trojan.Inject.IA] [Artemis!C1411D8111C9] [Trojan.Dropper] [New] [Malware] [UnclassifiedMalware] [Trojan.MulDrop3.14959] [TrojanDownloader:Win32/Cutwail.BS] [Patched] [Trj/CI.A] [Trojan-PWS.Win32.LdPinch] [W32/Scar.TMP!tr] [Win32/DH{AyAkIg8TFw}] [Trojan.Win32.Wigon.PH] [Win32/Trojan.c7d] [TrojanDownloader.Cutwail.r3] [Trojan.Wigon!/gYbaUz8VDk] [Trojan/Win32.HDC]

Domain > nd-bhginc.com

Is this malicious?

Files that talk to nd-bhginc.com

Whois

DNS Resolutions

Port 80

Port 443