Domain > quiz.sameshow.com

More information on this domain is in AlienVault OTX

Files that talk to quiz.sameshow.com

MD5	A/V
91d30a39e0a40351c29bf96fc6ab7bb3	[W32.Clod024.Trojan.dc8b] [Artemis!91D30A39E0A4] [Backdoor/Visel.xx] [WS.Reputation.1] [Win.Trojan.Visel-14] [BackDoor.Darkshell.276] [Backdoor/Visel.jm] [Backdoor.Win32.Visel]

Whois

Property	Value
Email	chenjj@wondershare.com
NameServer	MNS02.DOMAINCONTROL.COM
Created	2005-07-16 00:00:00
Changed	2014-06-17 00:00:00
Expires	2016-07-16 00:00:00
Registrar	35 TECHNOLOGY CO., L

DNS Resolutions

Date	IP Address
2014-07-17	203.130.48.6 (ClassC)
2024-05-22	70.39.189.47 (ClassC)
2024-12-28	70.39.189.46 (ClassC)

HTTP/1.1 200 OKServer: Tengine/unknownDate: Wed, 22 May 2024 21:09:00 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: PHPSESSID35385tdnsms9p1u8gngkdndn31; path/Ex

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html>head>meta http-equivContent-Type contenttext/html; charsetutf-8>title> Client Management System/title>link relstylesheet typetext/css mediascreen hrefcss/style.css />link relstylesheet typetext/css mediascreen hrefcss/wondershare.css />script languagejavascript srcjslibs/jquery.js>/script>script languagejavascript srcjslibs/checkform.js>/script>      !--if lt IE 7>script typetext/javascript srcjslibs/iepng.js>/script>script typetext/javascript>EvPNG.fix(div, ul, img, li, a, table, td, th, ol, dl, dt, dd, h1, h2, h3, h4, h5, h6, span);/script>!endif-->/head>body>table width100% border0 cellpadding0 cellspacing0>    tr height70>      td classtop>img srcimages/wondershare_logo_1.png />/td>      /tr>      tr>        td height19 classtop_line>/td>      /tr>/table>table width100% height500 border0 cellpadding0 cellspacing0>  tr>    td width240 aligncenter valigntop stylebackground: #fff url(images/left_bg.gif) bottom repeat-x;>            br />      table width200 border0 cellpadding1 cellspacing1>      form actionindex.php?submoddefault&methodlogin methodpost idform1 onSubmitreturn Validator.Validate(this,3);>        tr>                      td colspan2 height60 aligncenter>                              img srcimages/ws_login_title.gif />                                        /td>        /tr>        tr>          td width80>Agent ID/td>          td width130>input typetext nameagent_id value idagent_id stylewidth: 130px; dataTypeRequire msgRequired!/>/td>        /tr>        tr>          td>Password/td>          td>input typepassword namepassword value stylewidth: 130px; />/td>        /tr>        !--        tr>          td> /td>          td>input typecheckbox classcheckbox namesave_pass value1 />Remember me/td>        /tr>        -->        tr>          td colspan2 height60 aligncenter>input typesubmit namesubmit classbtn valueLogin />/td>        /tr>        /form>      /table>            p>a hre

Subdomains

Date	Domain	IP
download.sameshow.com	2013-11-25	74.50.121.136
www.sameshow.com	2013-11-21	74.50.121.136
quiz.sameshow.com	2014-07-17	203.130.48.6

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > quiz.sameshow.com

Is this malicious?

Files that talk to quiz.sameshow.com

Whois

DNS Resolutions

Port 80

Subdomains