Domain > teknoportbilisim.com

More information on this domain is in AlienVault OTX

Files that talk to teknoportbilisim.com

MD5	A/V
d9d18250c5fed348c484b0ec997f7b1f	[O97M.Downloader.QQ] [W97M/Downloader.bqc] [Trojan.Doc.Downloader.XD] [W97M.Downloader] [W2KM_LOCKY.ZZZ] [Trojan.Ole2.Vbs-heuristic.druvzi] [Trojan.Doc.Downloader.XD] [Troj/DocDl-FWJ] [Trojan.Doc.Downloader.XD] [W97M.DownLoader.1303] [W97M/Downloader.bqc] [TrojanDownloader:O97M/Donoff!rfn] [Trojan.Doc.Downloader.XD] [Troj.Downloader.Script!c] [VBA/Malma] [Trojan.Doc.Downloader.XD] [Trojan.Doc.Downloader.XD] [Downloader.Small.62.AD] [virus.office.obfuscated.1]
f2fbfbcfb001503d03e2daa794de2c53	[Trojan.Doc.Downloader.XD] [Trojan.Doc.Downloader.XD] [Trojan.Doc.Downloader.XD] [W97M.Downloader] [W2KM_LOCKY.ZZZ] [Trojan.Ole2.Vbs-heuristic.druvzi] [Trojan.Doc.Downloader.XD] [Trojan.Doc.Downloader.XD] [W97M.DownLoader.1303] [W2KM_LOCKY.ZZZ] [W97M/Downloader.brm] [Troj/DocDl-FWJ] [TrojanDownloader:O97M/Donoff] [Trojan.Doc.Downloader.XD] [X97M/Downloader] [W97M/Downloader.bqc] [Macro.Trojan.Dropperd.Auto] [Win32.SuspectCrc] [VBS/Jenxcus.A] [virus.office.obfuscated.1]
62f6b29f3eb7f0c38f8dbcc5bf06f146	[O97M.Downloader.QQ] [W97M/Downloader.bqc] [Trojan.Doc.Downloader.XD] [W97M.Downloader] [W2KM_LOCKY.ZZZ] [Trojan.Ole2.Vbs-heuristic.druvzi] [W97M.S.Downloader.27664[h]] [Trojan.Doc.Downloader.XD] [Troj/DocDl-FWJ] [Trojan.Doc.Downloader.XD] [W97M.DownLoader.1303] [W2KM_LOCKY.ZZZ] [W97M/Downloader.bqc] [TrojanDownloader:O97M/Donoff!rfn] [Trojan.Doc.Downloader.XD] [Troj.Downloader.Script!c] [VBA/Malma] [Trojan.Doc.Downloader.XD] [Trojan.Doc.Downloader.XD] [Macro.Trojan.Dropperd.Auto] [Win32.Outbreak] [VBS/Jenxcus.A] [virus.office.obfuscated.1]

Whois

Property	Value
Email	saidermail@yahoo.com
NameServer	NS2.NATROHOST.COM
Created	2009-10-16 00:00:00
Changed	2016-09-13 00:00:00
Expires	2017-10-16 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2024-09-13	116.202.53.24 (ClassC)
2026-01-28	185.149.100.221 (ClassC)

HTTP/1.1 200 OKDate: Sun, 17 Dec 2023 10:42:38 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cacheyes; ExpiresSun, 17-Dec-23 11:42:38 GMT; Domainteknoportb

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    title>Captcha/title>    link relstylesheet          hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css          integritysha384-1q8mTJOASx8j1Au+a5WDVnPi2lkFfwwEAa8hDDdjZlpLegxhjVME1fgjWPGmkzs7          crossoriginanonymous>    link hrefdata:image/x-icon;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQEAYAAABPYyMiAAAABmJLR0T///////8JWPfcAAAACXBIWXMAAABIAAAASABGyWs+AAAAF0lEQVRIx2NgGAWjYBSMglEwCkbBSAcACBAAAeaR9cIAAAAASUVORK5CYII          relicon typeimage/x-icon/>    link hrefhttps://fonts.googleapis.com/css?familyNoto+Sans          relstylesheet>    script srchttps://ajax.googleapis.com/ajax/libs/jquery/3.6.3/jquery.min.js>/script>    script srchttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js>/script>    script srchttps://www.google.com/recaptcha/api.js?hlen            async defer>    /script>    style>        html, body {            height: 100%;        }        .wraper {            padding-bottom: 56px;            position: relative;            min-height: 100%;        }        .invisible_mode .wraper {            display: none;        }        .header {            height: 63px;            background-color: white;        }        .middle {            height: 186px;            background-color: rgba(55, 171, 99, 0.75);        }        .bottom {            background-color: #f2f2f2;            position: absolute;            bottom: 0px;            top: 249px;            width: 100%;        }        .captcha_absolute {            margin-top: -153px;        }        .captcha_div {            width: 485px;            margin: 0 auto;            box-shadow: 0 5px 8px 0 rgba(0, 0, 0, 0.18), 0 0 8px 0 rgba(0, 0, 0, 0.12);            background-color: white;            padding: 47px 48px 18px 48px;            position: relative;        }        .cap_head {            border-bottom: 1px solid #d8d8d8;            padding-bottom: 17px;            margin: 0 10px 20px 10px;        }        .logo_shield {            display: inline-block;

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > teknoportbilisim.com

Is this malicious?

Files that talk to teknoportbilisim.com

Whois

DNS Resolutions

Port 80