Domain > next-it.net

More information on this domain is in AlienVault OTX

Files that talk to next-it.net

MD5	A/V
888cf6888e476ab89daef8385b7ae881	[HW32.CDB.B8e4] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcinh] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfk] [Backdoor.Hlux!Jm3TflIszzA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]
914c63052f0694efe5c231d14c135d36	[HW32.CDB.D6a5] [TrojanPSW.Tepfer.r3] [Trojan.PWS.Tepfer!8N7nPFhLHXs] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twri] [Trojan.Win32.Kryptik.cxajaq] [Mal/FakeAV-UF] [UnclassifiedMalware] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Tepfer.CASL!tr.pws] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]

DNS Resolutions

Date	IP Address
2022-01-14	199.16.173.54 (ClassC)
2023-08-26	141.193.213.21 (ClassC)
2024-09-07	199.60.103.89 (ClassC)
2024-10-10	199.60.103.189 (ClassC)
2024-11-12	3.33.130.190 (ClassC)
2025-01-29	15.197.148.33 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sat, 26 Aug 2023 20:48:13 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-P

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: next-it.net,cType: managed,cNounce: 25215,cRay: 7fceef32bdb1c377,cHash: 207fe77e76776b9,cUPMDTk: /?__cf_chl_tk3bQ5fed0by1igOqLxgt_Kf5Gm.fjsP29XvctLoAxIRQ-1693082893-0-gaNycGzNBdA,cFPWv: g,cTTimeMs: 1000,cMTimeMs: 0,cTplV: 5,cTplB: cf,cK: ,fa: /?__cf_chl_f_tk3bQ5fed0by1igOqLxgt_Kf5Gm.fjsP29XvctLoAxIRQ-1693082893-0-gaNycGzNBdA,md: 6sl9YdBuN6XMqpvb9uZ85IqJnoPCafp4Myt54Tmw1GY-1693082893-0-AZ7zMZftTzotVHq6CG2PRNq7OFNb3QDuVkDtLP8RXXULyATGI3OM6CArHcUjRxvh75iVkuHqd1wvIwA0VNwKxFu_ofSxoiCr6aiVyqtc3_ZtGr48Fk7D7SMn_q7xwBG0PMC0gTTs_f8dDBygIymKuCnSxRXc6I4-z3SWNdh9L2YvnCD_AFm5iPiOJ191SB9yOT2y7qeFUZiOo15TuusZ8tG8dGpuYKIeswWrVWD68vu1ZxCEWGRs9pxBsuABQj8Am9wOcOJxWKt7Y9YYH8V7TjoV_ZSIzjcUP2NF4FXpJ2bVipztDthRoe5OZ5l7ho6hxzGP4516IZa_WjW2KaIqJywfrd6uz1u5cL29ABtiYChQ3xFxeQylUgGa-OisablCr9LkeafQziLSc91Zf2PczpvrH0eKWkvWvIhMiCF3uHe0n-uc2XIr_eIVXoTUExIQD4P01Cpe1X_xc6VubnVua1ESipgyp4H5RFrDqZdkU-89QXp9FM4Z6Im_fL7p2MkG-17GCygzohJ18R7Rdt300R7iSlcK9TQVOXZ36kg0IEODHdrsfTZvixR2o4iOxl1wP511FM3ki7Xc0r0JUQxvprO8XRU0K_nD-euvOFl0R6O7tulwXU2uMrouF_Uo0HlWBUXxarLCdGoD4dx5hFIdOmTzb5yXFSiMUMkgFOmE_ysWO6SlITDWXVJmrUdviJK29ZzPaiU3jjabv1JQDDetgKk8sSK2m5QrGe-oBXUmcT-Va378LEEnplGMELcg94rUtYHk9Y_PtlTeCCRKQluVktxbUzi7XR7SEE2l4qgnB2un5kkD1TwN9Qh_BpA_6GkY-SQZPHxGlm14yQZfXZi5NmoGXYrM56d_uIOZvJmcM8mG_3zVCRxBmE1GJhw0yRjdXgG_amnHuWEaussFrFp8aFpXRaYmU-x78AJowFLdac9iDIjr4Ris6lkuLbFInuWs1lAr6Ygl0IhHAbOVV_vSsOkwDzX4-Z

Port 443

!DOCTYPE html>html langen-US>head>title>Just a moment.../title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta http-equivX-UA-Compatible contentIEEdge>meta namerobots contentnoindex,nofollow>meta nameviewport contentwidthdevice-width,initial-scale1>link href/cdn-cgi/styles/challenges.css relstylesheet>/head>body classno-js>div classmain-wrapper rolemain>div classmain-content>noscript>div idchallenge-error-title>div classh2>span classicon-wrapper>div classheading-icon warning-icon>/div>/span>span idchallenge-error-text>Enable JavaScript and cookies to continue/span>/div>/div>/noscript>/div>/div>script>(function(){window._cf_chl_opt{cvId: 2,cZone: next-it.net,cType: managed,cNounce: 1033,cRay: 7fceef331c21eb3b,cHash: bf7866fc65653b1,cUPMDTk: /?__cf_chl_tkRM8Ien6Qdu7FxowHIeo7kdN0blB6OiSDroIIh79Agrg-1693082893-0-gaNycGzNCPs,cFPWv: g,cTTimeMs: 1000,cMTimeMs: 0,cTplV: 5,cTplB: cf,cK: ,fa: /?__cf_chl_f_tkRM8Ien6Qdu7FxowHIeo7kdN0blB6OiSDroIIh79Agrg-1693082893-0-gaNycGzNCPs,md: SiBQebfMIWnefUBZ0FbFfLYOzxBnhJVXxZGqzWAH3LU-1693082893-0-AS5GY9zOuUWPka_lZJzlfdGuqG7gOUM-YBj6OuA62tUGdNZayFhbvI4BiKrHikTXp1ALv0jbX62NO8jFt39qBGCDXOxPgD7FcBeRV5Gd_A96-wsNpt8o-I5ntFFrf65UMjWx-PpI_qLaOR2rO9QbEgqnB5gkbUgASMZqfSA9MKEkfUMgTvl53iVZfvvdmly_JuREIPZXJZgWT7sQ-5kdejL0ByOcPJpVbw1N4SxqZd1n-eLSef0RGDDwbcuP0zJkUkpoQEaJc3OpQ9oi8zrmvXwsgHurSBjhPh0EXtjaJ3DSaRXoBZuzmjzr36Mf0EysBgwfiLloSt2wWUKziFrNqOOjzTN-oHPIaut7k4qPL-knSBQI-cDH-9QGnHzfvtCZ_R7qgPAm9ZwaqWKWq7noyZZp_6rzMcxiQKjBesWNw3DSekKdFVMSUK6EynizNmAkNmy1UdR6LKh57BCeuSKKRl9NDNapYolZeV20_qLYghQuR08S15pStQ9jw3svYmwGoc5o_f7QQguwle0VgmTT34diQROhhWJD9UQKCGvNzJRz84T3f60JXQkBfE4cPYLcJdbJbTBDszyit6DM8e7fo9lgk2HE_xYo6QddZX-AIs3NgfFWqr42bJ5JZupl6357IRBCjEOkt78kb4rNluXOe-DcsYHBVcpLu8QE-UB6uL3m58xGzl81dVXraWyWCLa3sBDf-jJ_fVY3f8cRcgJ82fnsmpPZKmWI0PI4eAvKsg6BUebU1HB6phdry3E9l-EpLQwfWaLZ7TTb31F4t21yGRVMSv2p0aCNCm6Gigo67tTfVrkW8lML8lQ_nA1xJD6M_3mqkJ-jheUvQokDe7Yo5_WSqqVh1HINp39FNI5nUb8TgsUyTUBMdin_R1zEPIlH9LnPhP2WPQKFNgEhKBWTXHp8kNJItEP9zrRk4ZuXigrRcSbIFJ1sj8X1mQlth1M1SAC905lmbmlIqnuIeUrw60Z43z3-MRj

Subdomains

Date	Domain	IP
nextwall.next-it.net	2014-05-30	173.13.9.185
www.next-it.net	2025-01-04	199.60.103.89

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > next-it.net

Is this malicious?

Files that talk to next-it.net

DNS Resolutions

Port 80

Port 443

Subdomains