Domain > ng.themarketbaby.com

More information on this domain is in AlienVault OTX

Files that talk to ng.themarketbaby.com

MD5	A/V
8c3b8076c2af864d48bc6c6dc1e029df	[Win32.Sality.3] [W32.Sality.U] [Virus] [Virus.Win32.Sality.beygb] [W32.Sality.AE] [Sality.ZHB] [Win32/Sality.AA] [PE_SALITY.RL] [Win32:SaliCode] [Win32.Sality.BL] [Mal/Sality-D] [Trojan.DownLoader8.685] [W32/Sality.AT] [Heuristic.BehavesLike.Win32.Suspicious.A] [Win32.Deepscan.a] [Virus:Win32/Sality.AT] [Win32.Sality.N] [Win32/Kashu.E] [Virus.Win32.Sality.bakc] [Malware.Sality!rem] [Win32/Sality.NBA] [Win32.KUKU.ky] [W32/Dorkbot.AS!tr] [Win32/Sality] [W32/Sality.AA]
2192436cebf06ae171981aef743defd6	[W32.VaketaK.Trojan] [Backdoor.Win32.Floder!O] [Worm.Dorkbot.A] [W32/Ngrbot.jrr] [W32.Pilleuz] [Backdoor.Win32.Floder.gqe] [Worm.Ngrbot!JJycfY62GTE] [Win32.Backdoor.Floder.Hpru] [Mal/EncPk-AEG] [Backdoor.Win32.Floder.GQE] [Trojan.Packed.22300] [Worm.Ngrbot.Win32.2125] [WORM_PUSHBOT.SMB] [Backdoor/Floder.gs] [Trojan[Backdoor]/Win32.Floder] [Worm.Ngrbot.(kcloud)] [Worm:Win32/Dorkbot.I] [Trojan.Krypt.13205] [Backdoor.Win32.Floder.awQC] [Backdoor.Win32.Rbot] [W32/Zbot.CGZF!tr] [SHeur4.PYN] [Trj/CI.A]
3ef419a0dafa0cf9358d568fc0920041	[W32.AsicleanerK.Trojan] [Worm.Dorkbot.A] [Worm.Win32.Dorkbot] [Trojan.Win32.Ruskill.drkpl] [Crypt.AVWW] [Worm.Win32.Ngrbot.ae] [Trojan.Kryptik!Uq0ajCtEnQA] [UnclassifiedMalware] [Trojan.Packed.21788] [Mal/Inject-CY] [Backdoor/Ruskill.dh] [Win32.HeurC.KVM099.a.(kcloud)] [Trojan/Win32.Injector] [Trj/CI.A] [Win32.Worm.Ngrbot.Lpvo] [Worm.Win32.Ngrbot] [W32/Injector.SLH!tr] [Worm.Win32.Ngrbot.AA]
2d126d9427a2e6c2924ecaf71c863e57	[BackDoor.IRC.Bot.896] [Win32/Kryptik.XPW] [W32/Zbot.CGZF!tr] [Win32/Cryptor] [Backdoor.Win32.Rbot] [Backdoor.Win32.Inject.wps] [Backdoor.IRCBot] [Worm*Win32/Dorkbot.I] [W32/SillyFDC-HN] [WORM_PUSHBOT.SMB] [Trojan-Injector.21235]

Whois

Property	Value
Email	mbakerh@yeah.net
NameServer	DNS2.EVERDNS.COM
Created	2014-09-28 00:00:00
Changed	2014-09-28 00:00:00
Expires	2015-09-28 00:00:00
Registrar	HANGZHOU AIMING NETW

DNS Resolutions

Date	IP Address
2016-03-31	185.53.177.8 (ClassC)
2016-12-13	72.52.4.119 (ClassC)
2019-02-07	204.11.56.48 (ClassC)
2019-04-11	208.91.197.46 (ClassC)
2020-02-24	84.38.133.125 (ClassC)
2020-10-10	109.70.26.37 (ClassC)
2020-12-29	194.85.61.76 (ClassC)
2024-05-11	35.204.181.10 (ClassC)
2024-12-27	3.254.94.185 (ClassC)
2025-08-11	52.212.150.54 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Tue, 11 Aug 2020 20:13:35 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: close

!DOCTYPE html>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetutf8 />title>Домен временно недоступен/title>style typetext/css>body {	background: #eff3ef url(/img/bg.jpg) repeat;}a {	color:#008cdc;}.lang {	margin:2em;	float:right;	font:100% arial;}.big {	font:bold 260% arial;	margin-bottom:0;	padding-bottom:.3em;	color:#4370b6;	background:url(/img/gline.png) left bottom no-repeat;}.arrow {	background:url(/img/arrow.png) left top no-repeat;	padding-left:4em;	font:100% arial;	color:#464646;}/style>/head>body>div aligncenter>table stylemargin:0 10%>  tr>    td stylepadding:1em;>a hrefhttp://nic.ru/>img src/img/logo_rc.png border0 />/a>/td>    td valigntop>      div classlang>Русский   a href/en/index.html>English/a>/div>    /td>  /tr>  tr>    td colspan2 stylepadding-top:10%;> /td>  /tr>  tr>    td valigntop>img src/img/roundb.png border0 stylemargin-right:2em; height230 />/td>    td valigntop width600>      p classbig>ДОМЕН ВРЕМЕННО НЕДОСТУПЕН/p>      p classarrow>Если вы являетесь Администратором домена, перейдите на br>a hrefhttp://www.nic.ru/manager/my_domains.cgi?stepsrv.my_domain.info&domainTHEMARKETBABY.COM>страницу домена/a> в личном кабинете и следуйте инструкциям./p>    /td>  /tr>/table>/div>/body>/html>

Subdomains

Date	Domain	IP
ng.themarketbaby.com	2016-03-31	185.53.177.8

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]