Domain > ws.gy

More information on this domain is in AlienVault OTX

Files that talk to ws.gy

MD5	A/V
a65f321a20f71794894e0cd7551e4925
35f56ccb2d3a67f700e6bcbffe65a4fc	[W32/Trojan.DDXY-5539W32/Trojan.PBPM-7771] [MSIL/Injector.GCCWin32/Spy.Zbot.YW] [MSIL/GCC!tr] [W32/Trojan2.OLXO*W32/Trojan3.LWF] [MSIL5.AURO] [Trojan.Zbot] [HW32.Packed.CC44] [W32/Trojan2.OLXO] [BackDoor.Comet.1783] [W32/Trojan.DDXY-5539] [W32/Zbot.YW!tr.spy] [Win32/Trojan.2b8]

DNS Resolutions

Date	IP Address
2013-05-30	31.170.163.198 (ClassC)
2013-06-13	31.170.166.179 (ClassC)
2013-07-11	31.170.166.136 (ClassC)
2013-07-31	93.188.160.73 (ClassC)
2013-08-05	172.245.32.224 (ClassC)
2013-10-31	31.170.166.104 (ClassC)
2014-02-06	31.170.166.98 (ClassC)
2014-03-20	31.170.163.241 (ClassC)
2014-07-31	31.170.166.167 (ClassC)
2014-09-06	185.28.21.40 (ClassC)
2014-09-16	93.188.160.6 (ClassC)
2014-09-17	31.170.166.63 (ClassC)
2015-01-12	31.170.167.93 (ClassC)
2015-01-19	31.170.166.182 (ClassC)
2015-02-12	93.188.160.29 (ClassC)
2015-02-17	31.170.167.89 (ClassC)
2015-02-23	93.188.160.64 (ClassC)
2015-03-24	31.170.167.243 (ClassC)
2015-04-06	93.188.160.33 (ClassC)
2025-08-01	217.70.184.38 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Tue, 16 Jan 2024 01:41:21 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-EncodingVary: Accept-Language

!DOCTYPE html>html classno-js langen>  head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width>    meta namedescription contentThis domain name has been registered with Gandi.net. It is currently parked by the owner.>    title>ws.gy/title>    link relstylesheet typetext/css hrefmain-78844350.css>    link relshortcut icon hreffavicon.ico typeimage/x-icon/>    link relpreload asfont hreffonts/Montserrat-Regular.woff2 typefont/woff2 crossorigin/>    link relpreload asfont hreffonts/Montserrat-SemiBold.woff2 typefont/woff2 crossorigin/>  /head>  body>    div classParkingPage_2023-root_2dpus >main classOldStatic_2023-root_1AGy1 Parking_2023-root_qhMQ2>div>article classParking_2023-content_1rA87>h1 classOldStatic_2023-title_13ceK>This domain name has been registered with Gandi.net/h1>div classOldStatic_2023-text_37nqO Parking_2023-text_1JZys>p>a hrefhttps://whois.gandi.net/en/results?searchws.gy>strong>View the WHOIS results of ws.gy/strong>/a> to get the domain’s public registration information./p>/div>div classParking_2023-positionbox_2OgLh>div classParking_2023-outerbox_2j18t>p classParking_2023-borderbox_1Gwb_>span classParking_2023-infobox_DMdft>strong>ws.gy/strong>br />is unavailable/span>/p>/div>/div>p classParking_2023-linksContainer_19x1c>Want your own domain name?br/>a hrefhttps://www.gandi.net/en/domain>Learn more about the domain name extensions we manage/a>br/>span classParking_2023-button_j5Lir>span onclickwindow.location.replace(atob(aHR0cHM6Ly9zaG9wLmdhbmRpLm5ldC9lbi9kb21haW4vc3VnZ2VzdD9zb3VyY2U9cGFya2luZyZzZWFyY2g9) + ws.gy) rolelink tabindex0>Find a domain name similar to ws.gy/span>/span>/p>/article>/div>/main>/div>  /body>/html>

Subdomains

Date	Domain	IP
ovkhtd.ws.gy	2015-02-28	31.170.166.232
assistancecourrielservice.ws.gy	2015-01-14	31.170.166.182
deedvere.ws.gy	2015-02-17	31.170.167.236
edovire.ws.gy	2015-04-20	31.170.166.173
shinyhosting.ws.gy	2013-12-23	93.188.160.131
tynaynei.ws.gy	2015-03-03	93.188.160.20
maniacslk.ws.gy	2015-03-04	185.28.21.14
saartradersinternational.ws.gy	2014-11-12	31.170.167.100
wap.indosat.com.ws.gy	2015-03-08	31.220.23.1
riqizo.ws.gy	2013-08-06	93.188.160.1
quydaebeur.ws.gy	2015-04-22	31.170.166.147
evyqpt.ws.gy	2015-03-24	93.188.160.121
xyochew.ws.gy	2015-04-29	93.188.160.23
search-money.ws.gy	2014-03-25	93.188.160.121
tqxetey.ws.gy	2015-04-07	31.170.167.79
xyechy.ws.gy	2015-02-11	31.170.167.178

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ws.gy

Is this malicious?

Files that talk to ws.gy

DNS Resolutions

Port 80

Subdomains