Domain > sdfsew3dg.20ii.com

More information on this domain is in AlienVault OTX

Files that talk to sdfsew3dg.20ii.com

MD5	A/V
74c59bb53163803ccf421ff7da7273df	[Trojan.Url.IframeB.csgpcu] [TrojWare.HTML.Pillscam.OBFU] [JS.Click.219] [Heuristic.BehavesLike.JS.Suspicious.A] [JS/.BBDZ!tr]

Whois

Property	Value
NameServer	NS2.SJ1.NORTHSKY.COM
Created	2000-06-19 00:00:00
Changed	2015-06-20 00:00:00
Expires	2016-06-19 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2026-02-23	64.136.20.42 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Thu, 29 Aug 2024 16:26:33 GMTServer: .V17 ApacheContent-length: 10184Content-Type: text/html

!-- AWS -->!-- Auto Banner Insertion Begin -->div idaws_5096 aligncenter>  table cellpadding0 cellspacing0 stylemargin:0 auto;>    tr>      td width130 classmwst stylevertical-align:top; padding:5px 15px 5px 0;>        a hrefhttp://20ii.com/?refcdMWS_20040713_Banner_bar>          img src/cgi-bin/image/images/bannertype/100X22.gif width100 height22 border0 />        /a>      /td>      td width130 classmwst  stylepadding:10px 0 10px 10px;>        div alignright>          a stylepadding:5px 15px; color:#FFF; font-size:14px; display:block-inline; background-color:#166DC2; border: 1px solid #166DC2; border-radius:4px; href/cgi-bin/login target_blank>Sign In/a>          a stylefont-size:14px; color:#41c5e4; href/cgi-bin/path/signup?refcdMWS_20040713_Banner_bar>Sign-Up/a>        /div>      /td>    /tr>    tr>      td colspan2 classmwst aligncenter stylewidth:730px;>SCRIPT>!--      var g  document.aws_multi_728; if (! g) { g  new Date(); g  g.getTime()%10000; document.aws_multi_728  g; }      document.write(IFRAME srchttp://sdfsew3dg.20ii.com/cgi-bin/ad/inline?pagemain.html&pb1&w728&h90&Rtime+g+ width728 height90 hspace0 vspace0 scrollingno marginwidth0 marginheight0 frameborder0 allowtransparencytrue>/IFRAME>);      //-->/SCRIPT>NOSCRIPT>IFRAME srchttp://sdfsew3dg.20ii.com/cgi-bin/ad/inline?pagemain.html&pb1&w728&h90&Rtime8532 width728 height90 hspace0 vspace0 scrollingno marginwidth0 marginheight0 frameborder0 allowtransparencytrue>/IFRAME>/NOSCRIPT>      /td>    /tr>  /table>  DIV idsetMyHomeOverlay alignleft styleposition:absolute; top:25%; left:25%; width:358px; border:1px solid #AEAEAE; background-color:white; z-index:200000; display: none;>    div styleheight:59px; padding-left:22px; background:white url(/cgi-bin/image/images/sethome_top_border.gif) repeat-x;>    div stylefloat:left; width:182px; height:35px; margin-top:12px; font:bold 38px arial,sans-serif; color:#454545> Welcome! /div>    div stylefloat:right; padding:6px 5px 0px 5px;>a href# onclickjavascript:do_set_homepage(close); return false;>    div styleb

Subdomains

Date	Domain	IP
87w9ekwy37.20ii.com	2025-12-22	64.136.20.42
binerrumanafto7.20ii.com	2025-09-07	64.136.20.42
bartere.20ii.com	2025-09-13	64.136.20.42
sdfsew3dg.20ii.com	2026-02-23	64.136.20.42
87sdfsg.20ii.com	2025-09-22	64.136.20.42
aehrtjh.20ii.com	2025-09-07	64.136.20.42

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]