Domain > skuawillbil.com

More information on this domain is in AlienVault OTX

Reports

https://otx.alienvault.com/pulse/56af389a67db8c6aa...

https://otx.alienvault.com/pulse/56b2251167db8c168...

https://techhelplist.com/spam-list/1039-money-tran...

https://www.virustotal.com/it/file/438b63ca5ec228e...

Files that talk to skuawillbil.com

MD5	A/V
8f65219fbf4f03fa692259ddbfa4f735	[VBS/Psyme] [Troj.Downloader.Script!c] [Win32.Trojan.Raas.Auto] [JS.DownLoader.727] [Trojan.OVWX-8] [VBS/TrojDownloader.F3C9!tr]
c9c1cda037a083858449f1249ada04ce	[VBS/Psyme] [Win32.Trojan.Raas.Auto]

Whois

Property	Value
Email	bartschi@skuawillbil.com
NameServer	DNS2.HELLOWORLDZZZZ.WS
Created	2016-01-28 00:00:00
Changed	2016-01-29 00:00:00
Expires	2017-01-28 00:00:00
Registrar	WEB COMMERCE COMMUNI

DNS Resolutions

Date	IP Address
2025-08-08	199.59.243.228 (ClassC)

HTTP/1.1 200 OKdate: Fri, 08 Aug 2025 10:19:21 GMTcontent-type: text/html; charsetutf-8content-length: 1046x-request-id: c8bdfa38-cb38-4f55-9a35-eda4c7938a09cache-control: no-store, max-age0accept-ch: sec-ch-prefers-color-schemecritical-ch: sec-ch-prefers-color-schemevary: sec-ch-prefers-color-schemex-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_JOOEZtPrmfU2xRSCCzprqd1CjrzMG4dSY1cMukhMb9J/wXEDg+STScd1zWZxVEbATyxo+iUqYcJBJzGHli2Bhwset-cookie: parking_sessionc8bdfa38-cb38-4f55-9a35-eda4c7938a09; expiresFri, 08 Aug 2025 10:34:22 GMT; path/

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_JOOEZtPrmfU2xRSCCzprqd1CjrzMG4dSY1cMukhMb9J/wXEDg+STScd1zWZxVEbATyxo+iUqYcJBJzGHli2Bhw langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYzhiZGZhMzgtY2IzOC00ZjU1LTlhMzUtZWRhNGM3OTM4YTA5IiwicGFnZV90aW1lIjoxNzU0NjQ4MzYyLCJwYWdlX3VybCI6Imh0dHA6Ly9za3Vhd2lsbGJpbC5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoic2t1YXdpbGxiaWwuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/bkvJwiADP.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Fri, 08 Aug 2025 10:19:22 GMTContent-Type: text/html; charsetutf-8Content-Length: 1050X-Request-Id: b86e7d8f-d4bc-40bb-a066-a68d1f79732aCache-Control: no-store, max-age0Accept-Ch: sec-ch-prefers-color-schemeCritical-Ch: sec-ch-prefers-color-schemeVary: sec-ch-prefers-color-schemeX-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_JOOEZtPrmfU2xRSCCzprqd1CjrzMG4dSY1cMukhMb9J/wXEDg+STScd1zWZxVEbATyxo+iUqYcJBJzGHli2BhwSet-Cookie: parking_sessionb86e7d8f-d4bc-40bb-a066-a68d1f79732a; expiresFri, 08 Aug 2025 10:34:22 GMT; path/Connection: close

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_JOOEZtPrmfU2xRSCCzprqd1CjrzMG4dSY1cMukhMb9J/wXEDg+STScd1zWZxVEbATyxo+iUqYcJBJzGHli2Bhw langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYjg2ZTdkOGYtZDRiYy00MGJiLWEwNjYtYTY4ZDFmNzk3MzJhIiwicGFnZV90aW1lIjoxNzU0NjQ4MzYyLCJwYWdlX3VybCI6Imh0dHBzOi8vc2t1YXdpbGxiaWwuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6InNrdWF3aWxsYmlsLmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bmVbzBqju.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]