Domain > www.casafree.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to www.casafree.com

Whois

Property	Value
NameServer	NS2.INSIDECASAFREE.COM
Created	2000-12-19 00:00:00
Changed	2012-03-08 00:00:00
Expires	2017-12-19 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-06-25	41.77.119.242 (ClassC)
2024-06-23	104.21.30.132 (ClassC)
2025-01-06	172.67.172.241 (ClassC)

HTTP/1.1 200 OKDate: Sun, 23 Jun 2024 04:31:15 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-alivex-sso-wat: Youve just been SSOedcontent-security-policy: upgrade-insecure-reque

!DOCTYPE html>html>  head>    title>My Webapp/title>  script typetext/javascript src/ynh_portal.js>/script>link typetext/css relstylesheet href/ynh_overlay.css>script typetext/javascript src/ynhtheme/custom_portal.js>/script>link typetext/css relstylesheet href/ynhtheme/custom_overlay.css>/head>  body>    h1>It works!/h1>    p>Congratulation, you have just installed My Webapp./p>    h2>Edit this site/h2>    p>      First way to edit this site is by putting your files in /var/www/my_webapp/www using SSH/SCP.    /p>    p>      Alternatively you can achieve the same thing using SFTP. To do so, you can use a client application such as      a hrefhttps://filezilla-project.org/download.php?typeclient target_blank>FileZilla/a>.      Here are the SFTP connection details:    /p>    dl>      dt>Domain/dt>      dd>www.casafree.com/dd>      dt>Port/dt>      dd>22/dd>      dt>User/dt>      dd>my_webapp/dd>      dt>Password/dt>      dd>i>the one you set at installation/i>/dd>    /dl>    hr/>    p>As a reward, here is a random cat picture:/p>    img srchttps://thecatapi.com/api/images/get?formatsrc&typegif>  /body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
27bac6c53169f647a7b5d1f1afe9550a	[Trojan.JS.Clicker.ACG] [JS/Clicker.ACK] [JS/AdClicker-JF] [Trojan] [JS/Crypted] [JS/Obfuscated.AQ] [JS_CLICK.SMA] [PUA.HTML.Crypt-11] [Mal/FunDF-A] [UnclassifiedMalware] [VBS.Psyme.377] [JS/Crypted.BQ] [Trojan-Downloader.JS.Psyme!IK] [Trojan-Downloader.Inor!sd5] [Trojan-Downloader.JS.Psyme] [JS/Inor.A!tr.dldr] [JS/Clicker.ATM]
0b0c2ecbf4774ada9f7fb3b0f4b4b486	[Trojan.JS.Clicker.ACG] [JS/AdClicker-JF] [Trojan] [JS/Crypted] [JS/Obfuscated.AQ] [JS_CLICK.SMA] [PUA.HTML.Crypt-11] [Trojan.JS.Clicker.ACG] [Mal/FunDF-A] [Trojan.JS.Clicker.ACG] [VBS.Psyme.377] [JS/Crypted.BQ] [JS_CLICK.SMA] [Trojan-Downloader.JS.Psyme!IK] [Trojan.JS.Clicker.ACG] [JS/Crypted] [Trojan-Downloader.Inor!sd5] [Trojan-Downloader.JS.Psyme]

Domain > www.casafree.com

Is this malicious?

Files that talk to www.casafree.com

Whois

DNS Resolutions

Port 80

Port 443