Domain > skiresorts.com

More information on this domain is in AlienVault OTX

Property	Value
Email	238191@PRIVACY-LINK.COM
NameServer	NS2.CWIE.NET
Created	1996-10-19 00:00:00
Changed	2016-09-20 00:00:00
Expires	2017-10-18 00:00:00
Registrar	UNIREGISTRAR CORP

DNS Resolutions

Date	IP Address
2014-06-18	64.38.232.183 (ClassC)
2024-06-08	199.59.243.225 (ClassC)
2024-10-01	199.59.243.227 (ClassC)
2025-04-06	199.59.243.228 (ClassC)

HTTP/1.1 200 OKdate: Sun, 28 Apr 2024 19:17:31 GMTcontent-type: text/html; charsetutf-8content-length: 1046x-request-id: 8ed2583b-8fdb-4a97-b2f4-039b0a1d1629cache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_IN+UFogOomA3cIICxHybeEafCWxJCYUF1e3HqvFVS1W5Id+AtwhBWlMGGxnUqIha6c3Z6Wgtg1HCMd9VKmBksg langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiOGVkMjU4M2ItOGZkYi00YTk3LWIyZjQtMDM5YjBhMWQxNjI5IiwicGFnZV90aW1lIjoxNzE0MzMxODUyLCJwYWdlX3VybCI6Imh0dHA6Ly9za2lyZXNvcnRzLmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJza2lyZXNvcnRzLmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bQEYWegER.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Sun, 28 Apr 2024 19:17:31 GMTContent-Type: text/html; charsetutf-8Content-Length: 1046X-Request-Id: fbef43e6-92d7-4836-b3ab-de48ab12bc3cCache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_IN+UFogOomA3cIICxHybeEafCWxJCYUF1e3HqvFVS1W5Id+AtwhBWlMGGxnUqIha6c3Z6Wgtg1HCMd9VKmBksg langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiZmJlZjQzZTYtOTJkNy00ODM2LWIzYWItZGU0OGFiMTJiYzNjIiwicGFnZV90aW1lIjoxNzE0MzMxODUyLCJwYWdlX3VybCI6Imh0dHBzOi8vc2tpcmVzb3J0cy5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoic2tpcmVzb3J0cy5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/btaNryZVR.js>/script>/body>/html>

Subdomains

Date	Domain	IP
www.skiresorts.com	2024-10-26	199.59.243.227

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
2c2371e95bb5d87ccd5d19a114492f70	[HW32.CDB.18af] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ] [Win32/Trojan.0de]
4c83c209b92c70bd0cff8a6036589670	[HW32.CDB.E5ca] [Trojan.Win32.Kryptik.cwscgd] [Kryptik.CCFN] [UnclassifiedMalware] [Trojan.Packed.26527] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [Crypt_s.GKU] [Trojan.Win32.Kryptik.BWUN] [Win32/Trojan.337]

Domain > skiresorts.com

Is this malicious?

Files that talk to skiresorts.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains