Domain > signaturedz.com

This indicator is referenced in AlienVault OTX pulse ""

Reports

http://paper.seebug.org/papers/APT/APT_CyberCrimin...

https://github.com/kbandla/APTnotes/blob/master/20...

Files that talk to signaturedz.com

MD5	A/V
2f883722b2ff12189a34e520842cdab8	[W32.Clod926.Trojan.d8c2] [Monitor.Win32.KeyLogger!O] [Artemis!2F883722B2FF] [Spyware.Keylogger] [Riskware.Win32.KeyLogger.cipatg] [KeyLogger.AKE] [not-a-virus:Monitor.Win32.KeyLogger.amk] [Trojan.DataStealer!9nJsl7GPXkQ] [UnclassifiedMalware] [Trojan.Upload.50] [TSPY_LOGGER.BD] [Trojan[Monitor:not-a-virus]/Win32.KeyLogger] [Win32.Troj.Undef.(kcloud)] [MonitoringTool:Win32/Uplogger.A] [Trojan/Win32.ADH] [Trojan.Win32.DataStealer.Az] [Win32/DataStealer.A] [not-a-virus:Monitor.Win32.Keylogger] [W32/DataStealer.A] [Citem.DPG] [Trj/CI.A] [Win32/Trojan.b7f] [Win.Trojan.Keylogger-465]
0821919293d155d036dc5d3a7d75ef9c
45abc39bd7dfb34843840a50306fc1ae	[W32.KeylogDayekA.Trojan] [Trojan-Spy/W32.KeyLogger.591726] [TrojanSpy.KeyLogger.run] [Artemis!45ABC39BD7DF] [TROJ_SPNR.15L711] [Trojan-Spy.Win32.KeyLogger.run] [Trojan.Win32.KeyLogger.etbru] [Trojan.Win32.A.KeyLogger.591726.A] [Heur.Suspicious] [Trojan.MulDrop3.10562] [Trojan[Spy]/Win32.KeyLogger] [Win32.Troj.Droppergd.kf.(kcloud)] [TrojanSpy:Win32/Dayek.A] [TrojanSpy.KeyLogger] [W32/Keylog!tr] [Trojan.Win32.KeyLogger.aPcP] [Win32/DH{D3xN}] [TrojanSpy*Win32/Dayek.A]

Whois

Property	Value
Email	domains@virustracker.info
NameServer	NS2.DYNADOT.COM
Created	2014-11-14 00:00:00
Changed	2014-11-14 00:00:00
Expires	2015-11-14 00:00:00
Registrar	DYNADOT, LLC

DNS Resolutions

Date	IP Address
2010-12-11	212.7.194.100 (ClassC)
2011-09-15	94.102.49.201 (ClassC)
2013-06-10	174.36.138.23 (ClassC)
2013-09-10	141.101.114.20 (ClassC)
2013-11-26	190.93.246.20 (ClassC)
2013-12-08	190.93.244.20 (ClassC)
2014-01-03	141.101.115.20 (ClassC)
2014-04-27	141.101.114.20 (ClassC)
2014-04-27	190.93.244.20 (ClassC)
2014-04-27	141.101.115.20 (ClassC)
2014-04-27	190.93.245.20 (ClassC)
2014-04-27	190.93.246.20 (ClassC)
2014-06-04	208.73.211.164 (ClassC)
2014-11-18	69.195.129.72 (ClassC)
2015-05-22	69.195.129.70 (ClassC)
2025-01-13	23.227.38.69 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sat, 02 Mar 2024 22:19:34 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4516Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Con

!DOCTYPE html>!--if lt IE 7> html classno-js ie6 oldie langen-US> !endif-->!--if IE 7>    html classno-js ie7 oldie langen-US> !endif-->!--if IE 8>    html classno-js ie8 oldie langen-US> !endif-->!--if gt IE 8>!--> html classno-js langen-US> !--!endif-->head>title>Attention Required! | Cloudflare/title>meta charsetUTF-8 />meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta http-equivX-UA-Compatible contentIEEdge />meta namerobots contentnoindex, nofollow />meta nameviewport contentwidthdevice-width,initial-scale1 />link relstylesheet idcf_styles-css href/cdn-cgi/styles/cf.errors.css />!--if lt IE 9>link relstylesheet idcf_styles-ie-css href/cdn-cgi/styles/cf.errors.ie.css />!endif-->style>body{margin:0;padding:0}/style>!--if gte IE 10>!-->script>  if (!navigator.cookieEnabled) {    window.addEventListener(DOMContentLoaded, function () {      var cookieEl  document.getElementById(cookie-alert);      cookieEl.style.display  block;    })  }/script>!--!endif-->/head>body>  div idcf-wrapper>    div classcf-alert cf-alert-error cf-cookie-error idcookie-alert data-translateenable_cookies>Please enable cookies./div>    div idcf-error-details classcf-error-details-wrapper>      div classcf-wrapper cf-header cf-error-overview>        h1 data-translateblock_headline>Sorry, you have been blocked/h1>        h2 classcf-subheadline>span data-translateunable_to_access>You are unable to access/span> myshopify.com/h2>      /div>!-- /.header -->      div classcf-section cf-highlight>        div classcf-wrapper>          div classcf-screenshot-container cf-screenshot-full>                          span classcf-no-screenshot error>/span>                      /div>        /div>      /div>!-- /.captcha-container -->      div classcf-section cf-wrapper>        div classcf-columns two>          div classcf-column>            h2 data-translateblocked_why_headline>Why have I been blocked?/h2>            p data-translateblocked_why_detail>This website is using a security service to protect itself from online attacks. The acti

Port 443

HTTP/1.1 403 ForbiddenDate: Sat, 02 Mar 2024 22:19:35 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4516Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Con

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]