Domain > ww2.qfind.net

More information on this domain is in AlienVault OTX

Files that talk to ww2.qfind.net

MD5	A/V
4b0d846b74eea12841f05339009d7615	[Iframe.AAG] [HTML/Framer.pyvcfk]
217872f1b7eb5252918d5ffa78c761fa	[Iframe.AAG] [HTML/Framer.pyvcfk]
04a8d6d7d101d72fa2bdc82c96b0b612	[Iframe.AAG] [HTML/Framer.pyvcfk]
026812f30dc566fb3aabcce5be6c52a0	[Iframe.AAG] [HTML/Framer.pyvcfk]
0ce675cd5e7f3fc4b73fe2c8a3c2ecd7	[Iframe.AAG] [HTML/Framer.pyvcfk]
8697d89bbeb52e69fae0a9b5bac77171	[Iframe.AAG] [HTML/Framer.pyvcfk]
9c5e9e1a049ec198abf461f92758d8b5	[Backdoor-FCF] [Trojan.WinLock] [Spyware] [Backdoor/Shiz.jdn] [Trojan.Win32.Shiz.bdcugf] [HV_COBRA_CA2253E0.TOMC] [Win.Trojan.Shiz-724] [Backdoor.Win32.Shiz.raj] [Backdoor.Shiz!zHT/XVbznxw] [Trojan.Packed.20771] [Mal/ZXC-A] [Backdoor/Shiz.azm] [Win32.Hack.Shiz.(kcloud)] [Backdoor.Win32.A.Shiz.213504] [Backdoor/Win32.Shiz] [Backdoor.Shiz] [Virus.Win32.Injector] [W32/Shiz.HPH!tr] [SHeur3.CNIG]
023fae282f6e8c3e7366050eea65c361	[Iframe.AAG] [HTML/Framer.pyvcfk]
103de0e94bcd376fc2b0592a6b7504e0	[Iframe.AAG] [HTML/Framer.pyvcfk]
55da10feab6855d9b5d699b8c9e049dd	[Iframe.AAG] [HTML/Framer.pyvcfk]
8deb05767103caff4db47039137f88bf	[Iframe.AAG] [HTML/Framer.pyvcfk]
bb388cc84d77287dec47dca00cfb2f04
54ad41b12b2175ee6e70bf6408620f89

Whois

Property	Value
Email	qfind.net@privacy.above.com
NameServer	NS4.ABOVE.COM
Created	2008-06-09 00:00:00
Changed	2015-05-14 00:00:00
Expires	2016-06-09 00:00:00
Registrar	ABOVE.COM PTY LTD.

DNS Resolutions

Date	IP Address
2013-04-01	208.73.210.128 (ClassC)
2013-05-10	69.43.161.179 (ClassC)
2013-05-14	69.43.161.156 (ClassC)
2013-10-17	204.13.161.108 (ClassC)
2013-10-18	69.43.161.156 (ClassC)
2014-07-11	204.13.161.108 (ClassC)
2025-01-31	103.224.212.244 (ClassC)
2025-08-03	103.224.182.247 (ClassC)

HTTP/1.1 200 OKdate: Sat, 16 Mar 2024 21:21:29 GMTserver: Apacheset-cookie: __tad1710624089.5177306; expiresTue, 14-Mar-2034 21:21:29 GMT; Max-Age315360000vary: Accept-Encodingcontent-length: 1033cont

html>head>title>qfind.net/title>script typetext/javascript src/js/fingerprint/iife.min.js>/script>script typetext/javascript>var redirect_link  http://ww2.qfind.net/?;// Set a timeout of 300 microseconds to execute a redirect if the fingerprint promise fails for some reasonfunction fallbackRedirect() {	window.location.replace(redirect_link+fp-7);}try {	const rdrTimeout  setTimeout(fallbackRedirect, 300);	var fpPromise  FingerprintJS.load({monitoring: false});	fpPromise		.then(fp > fp.get())		.then(			result > { 				var fprt  fp+result.visitorId;				clearTimeout(rdrTimeout);				window.location.replace(redirect_link+fprt);		});} catch(err) {	fallbackRedirect();}/script>style> body { background:#101c36 } /style>/head>body bgcolor#ffffff text#000000>div styledisplay: none;>a hrefhttp://ww2.qfind.net/?fp-3>Click here to enter/a>/div>noscript>meta http-equivrefresh content0; URLhttp://ww2.qfind.net/?fp-5>/noscript>/body>/html>

Port 443

HTTP/1.1 200 OKdate: Sat, 16 Mar 2024 21:21:29 GMTserver: Apacheset-cookie: __tad1710624089.4000914; expiresTue, 14-Mar-2034 21:21:29 GMT; Max-Age315360000vary: Accept-Encodingcontent-length: 1033cont

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ww2.qfind.net

Is this malicious?

Files that talk to ww2.qfind.net

Whois

DNS Resolutions

Port 80

Port 443