Domain > smtp.nda.agric.za

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to smtp.nda.agric.za

MD5	A/V
888cf6888e476ab89daef8385b7ae881	[HW32.CDB.B8e4] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcinh] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfk] [Backdoor.Hlux!Jm3TflIszzA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]

DNS Resolutions

Date	IP Address
2025-02-04	192.96.1.11 (ClassC)

HTTP/1.0 307 Temporary RedirectDate: Mon, 23 Sep 2024 10:52:00 GMTServer: Check Point SVN foundationContent-Type: text/htmlX-UA-Compatible: IEEmulateIE7Connection: closeX-Frame-Options: SAMEORIGINStri

html>	head>		META HTTP-EQUIVPragma CONTENTno-cache>		META HTTP-EQUIVExpires CONTENT-1>	/head>	body>		script>				/*	*Copyright (c) 2010 John Resig, http://jquery.com/	*Permission is hereby granted, free of charge, to any person obtaininga copy of this software and associated documentation files //(theSoftware), to deal in	*the Software without restriction, includingwithout limitation the rights to use, copy, modify,	merge, //publish,distribute, sublicense, and/or sell copies of the	*Software, and topermit persons to whom the Software is furnished to do so, subject //tothe following conditions:	*The above copyright notice and this permission notice shall beincluded in all copies or substantial portions of the Software.	*/						var keyString  ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/;						function uTF8Encode(string) 			{				string  string.replace(/x0dx0a/g, x0a);				var output  ;				for (var n  0; n  string.length; n++) {					var c  string.charCodeAt(n);					if (c  128) {						output + String.fromCharCode(c);					} else if ((c > 127) && (c  2048)) {						output + String.fromCharCode((c >> 6) | 192);						output + String.fromCharCode((c & 63) | 128);					} else {						output + String.fromCharCode((c >> 12) | 224);						output + String.fromCharCode(((c >> 6) & 63) | 128);						output + String.fromCharCode((c & 63) | 128);					}				}				return output;			}						function base64Encode(input) 			{				var output  ;				var chr1, chr2, chr3, enc1, enc2, enc3, enc4;				var i  0;				input  uTF8Encode(input);				while (i  input.length) {					chr1  input.charCodeAt(i++);					chr2  input.charCodeAt(i++);					chr3  input.charCodeAt(i++);					enc1  chr1 >> 2;					enc2  ((chr1 & 3)  4) | (chr2 >> 4);					enc3  ((chr2 & 15)  2) | (chr3 >> 6);					enc4  chr3 & 63;					if (isNaN(chr2)) {						enc3  enc4  64;					} else if (isNaN(chr3)) {						enc4  64;					}					output  output + keyString.charAt(enc1) + keyString.charAt(enc2) + keyString.charAt(enc3) + keyString.charAt(enc4);				}				return output;			}						windo

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > smtp.nda.agric.za

Is this malicious?

Files that talk to smtp.nda.agric.za

DNS Resolutions

Port 80