Domain > tj.wg83.com

More information on this domain is in AlienVault OTX

Files that talk to tj.wg83.com

MD5	A/V
c63e700a37a34dcb4b442574d6b86d7c	[Trojan.Mayachok.17462] [Trojan.Jorik.Yoddos] [Mal/Jadtre-C] [Exploit.Win32.ShellCode] [W32/Trojan.JJUY-5825] [TrojanDropper*Win32/Jadtre.D] [W32/Wapomi.AQ!tr] [Win32/Wapomi.F] [Trojan.60E803000000E9EB0.mg]

Whois

Property	Value
Email	decimedia@gmail.com
NameServer	NS2.PARKINGCREW.NET
Created	2016-03-28 00:00:00
Changed	2016-04-15 00:00:00
Expires	2017-03-28 00:00:00
Registrar	RIPCORD DOMAINS, LLC

DNS Resolutions

Date	IP Address
2024-07-07	23.95.216.114 (ClassC)
2024-08-25	199.59.243.226 (ClassC)
2025-01-24	199.59.243.228 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Mon, 04 Dec 2023 11:08:01 GMTContent-Type: text/htmlContent-Length: 10312Last-Modified: Tue, 10 Oct 2023 02:09:33 GMTConnection: keep-aliveKeep-Alive: timeout60ETag:

html xmlnshttp://www.w3.org/1999/xhtml>head>meta charsetutf-8>title>this domain for sale！/title>meta namedescription contentthis domain for sale！ />script languagejavascript>//host  window.location.host;document.write(br>br>h1 aligncenter> + host + /h1>)/script>style typetext/css>!--.STYLE2 {color: #FF0000}.STYLE4 {	font-size: 24px;	font-weight: bold;}.STYLE5 {font-size: 36px}.STYLE6 {	font-size: 30px;	font-weight: bold;}.STYLE7 {font-size: 26px; font-weight: bold; color: #FF0000; }.STYLE9 {font-size: 16px}-->/style>script typetext/javascript src//js.users.51.la/21723801.js>/script>/head>body>div styleTEXT-ALIGN: center>	p> /p>	p> /p>	p>span stylefont-family:Microsoft YaHei;font-size:18px;>The domain is for sale!/span> /p>	p>img src/buy.png width463 height123>/p>	h1 classSTYLE2 stylefont-family:Microsoft YaHei;font-size:18px;> /h1>	p>a hrefhttps://my.escrow.com/partner.asp?pid50814>    img      srchttps://secureapi.escrow.com/api/ecart/Content/Images/Affiliate%20Banners/Escow_Banner_960x100.jpg      width960      height100      altEscrow.com: Buy or Sell Online       border0    />/a>/p>	h2 roleheading>ver $5 billion of transactions with Escrow.com/h2>	p>--------------------------------------------/p>/p>div> /div>div aligncenter>  p>99be.combr>    84sy.combr>    u1199.combr>    yh995.combr>    365tyw.combr>    39you.combr>    lifa77.combr>    wnsr25.combr>    whytrip.combr>    ig333.combr>    lc8.ccbr>    ig111.combr>    pu72.combr>    mz222.combr>    zf988.combr>    zx72.combr>    og89.combr>    ak555.combr>    999rg.combr>    qj92.combr>    xp21.combr>    888jsc.combr>    vcd888.combr>    yl2345.combr>    tf988.combr>    fh999.combr>    servertrade.combr>    lp333.combr>    79177.combr>    qw96.combr>    365betpay.combr>    un00.combr>    qj05.combr>    qj06.combr>    456youxi.combr>    lb32.combr>    zt82.combr>    ap234.combr>    pu81.combr>    xw96.combr>    wg82.combr>    pu85.combr>    77mtc.combr>    yjapp.combr>    lifa8.combr>    jqgw.combr>    bet307.combr>    9999pk.combr>    tzfund.

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > tj.wg83.com

Is this malicious?

Files that talk to tj.wg83.com

Whois

DNS Resolutions

Port 80