Domain > nortelgov.com

More information on this domain is in AlienVault OTX

Files that talk to nortelgov.com

MD5	A/V
4db0e2318885466883cc47fb4c11b695	[FakeSecTool-FCX!4DB0E2318885] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1] [W32/Kelihos.DE!tr]
d6a71b4d3098eab4dddab30fddbaef35	[FakeSecTool-FCX!D6A71B4D3098] [Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]

Whois

Property	Value
NameServer	NS54.WORLDNIC.COM
Created	2005-09-29 00:00:00
Changed	2014-11-18 00:00:00
Expires	2016-09-29 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2013-12-04	208.20.221.81 (ClassC)
2015-06-02	-
2024-08-20	172.67.172.106 (ClassC)
2024-11-07	104.21.55.191 (ClassC)
2024-12-12	104.21.32.1 (ClassC)
2025-01-21	104.21.64.1 (ClassC)
2025-01-25	104.21.16.1 (ClassC)

HTTP/1.1 200 OKDate: Wed, 28 Feb 2024 14:27:04 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-alivelast-modified: Thu, 01 Feb 2024 05:26:29 GMTvary: Accept-Encodingx-turbo-charge

!DOCTYPE html>html amp langid>head>meta charsetutf-8>script async srchttps://cdn.ampproject.org/v0.js>/script>meta nameviewport contentwidthdevice-width,minimum-scale1,initial-scale1>meta nameformat-detection contenttelephoneno>style amp-boilerplate>body{-webkit-animation:-amp-start 8s steps(1,end) 0s 1 normal both;-moz-animation:-amp-start 8s steps(1,end) 0s 1 normal both;-ms-animation:-amp-start 8s steps(1,end) 0s 1 normal both;animation:-amp-start 8s steps(1,end) 0s 1 normal both}@-webkit-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-moz-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-ms-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@-o-keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}@keyframes -amp-start{from{visibility:hidden}to{visibility:visible}}/style>noscript>style amp-boilerplate>body{-webkit-animation:none;-moz-animation:none;-ms-animation:none;animation:none}/style>/noscript>link relshortcut icon hrefhttps://img.nxsevent.pw/bo77/favicon.ico typeimage/x-icon>title>Bobaslot77 $ Situs Slot Terbaik Buktikan Depo 25+25 Bisa Maxwin x5000/title>link relcanonical hrefhttps://nortelgov.com/>meta nametitle contentBobaslot77 $ Situs Slot Terbaik Buktikan Depo 25+25 Bisa Maxwin x5000>meta namedescription contentBobaslot77 adalah situs slot gacor terbaik yang menjanjikan kemenangkan maxwin secara mudah dan cepat hari ini, buktikan dengan depo 25+25 anda bisa merasakan sensasi maxwin x5000 hari ini.>link relstylesheet hrefhttps://fonts.googleapis.com/css?familyUbuntu>style amp-custom>    *{box-sizing:border-box}:focus{outline:0}::-webkit-scrollbar{display:none}html{max-width:500px;margin:0 auto}    body{background:url(https://img.nxsevent.pw/aishiteru/background2.gif) center fixed;background-size:cover} {background:#eee;color:#111;font-family:Ubuntu,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica,Arial,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol}    a,a:after,a:hover,a:visited{text-decoration:none;color:#

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > nortelgov.com

Is this malicious?

Files that talk to nortelgov.com

Whois

DNS Resolutions

Port 443