Domain > saiden4ik.phpnet.us

More information on this domain is in AlienVault OTX

Date	IP Address
2013-04-26	199.59.243.108 (ClassC)
2024-01-13	199.59.243.225 (ClassC)
2024-08-22	199.59.243.226 (ClassC)
2025-01-25	199.59.243.227 (ClassC)
2025-06-04	199.59.243.228 (ClassC)
2025-07-22	185.27.134.19 (ClassC)
2025-10-11	185.27.134.24 (ClassC)

Port 80

HTTP/1.1 200 OKdate: Sat, 13 Jan 2024 22:58:32 GMTcontent-type: text/html; charsetutf-8content-length: 1029x-request-id: 7a26e90a-bf2b-4ec5-8e30-ea10ecbc98c4cache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_J16Vt+dAIk5/RHPDrs+MqZ5kBoRdaBtqfXqOrl9b7ebl2RdzU4YWVbyNMXhvwRslNdHKgwvnGaBWBcSkDb/J0A langen>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiN2EyNmU5MGEtYmYyYi00ZWM1LThlMzAtZWExMGVjYmM5OGM0IiwicGFnZV90aW1lIjoxNzA1MTg2NzEzLCJwYWdlX3VybCI6Imh0dHA6Ly9zYWlkZW40aWsucGhwbmV0LnVzLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6InNhaWRlbjRpay5waHBuZXQudXMiLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bjiIwLcsr.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
ec094fb8dbb9b36e83858408e6c32779	[Trojan.Downloader.JIUP] [Backdoor/W32.KBot.22016.B] [FDoS-BEnergy] [Backdoor.Bot] [Trojan-Downloader] [Trojan] [Backdoor/Kbot.s] [Trojan.Win32.Dirat.ertk] [W32/Downldr2.MDV] [Downloader] [Malware] [Win32/Phdet.T] [BKDR_KBOT.CT] [Trojan.Downloader-11579] [Backdoor.Win32.Kbot.s] [Trojan.Downloader.JIUP] [Backdoor.Kbot.FL] [Trojan.Downloader.JIUP] [Trojan.DownLoader.26661] [BKDR_KBOT.CT] [FDoS-BEnergy] [Troj/Bckdr-QYM] [TrojanDownloader.Dirat.a] [Backdoor.Win32.Kbot.22016.B] [Trojan.Downloader.JIUP] [W32/Downloader.ZCUW-6731] [Win-Trojan/Downloader.22016.CO] [Backdoor.Win32.Kbot] [W32/Kbot.S!tr.bdr] [Flooder.EQA] [Bck/BEnergy.K]

Domain > saiden4ik.phpnet.us

Is this malicious?

Files that talk to saiden4ik.phpnet.us

DNS Resolutions

Port 80