Domain > www.notesmaker.com

More information on this domain is in AlienVault OTX

Files that talk to www.notesmaker.com

MD5	A/V
75ce2fd7bf56963967076287d4f43620	[Trojan.Badur.g4] [Artemis!75CE2FD7BF56] [Trojan.Win32.Badur.dptolz] [Trojan.Win32.A.Badur.1462272[h]] [Trojan.KillFiles.25624] [BehavesLike.Win32.BadFile.th] [Trojan/Badur.jwm] [Trojan/Win32.Badur] [Trojan.Badur] [Trojan.Win32.Badur.kizt]

Whois

Property	Value
Email	wenqinghuang@163.com
NameServer	NS8.CNMSN.NET
Created	2010-11-04 00:00:00
Changed	2014-10-13 00:00:00
Expires	2016-11-04 00:00:00
Registrar	BIZCN.COM, INC.

DNS Resolutions

Date	IP Address
2015-05-05	42.121.118.92 (ClassC)
2025-02-11	121.40.36.131 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlLast-Modified: Fri, 06 May 2022 07:43:18 GMTAccept-Ranges: bytesETag: 3b378cf31c61d81:0Server: Microsoft-IIS/8.5Date: Fri, 29 Mar 2024 22:07:05 GMTContent-Length:

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetutf-8 />title>小孩桌面便签官方网站/title>link relstylesheet typetext/css hrefimg/style.css/>script typetext/javascript srcimg/putaojiayuan.js>/script>script>var _hmt  _hmt || ;(function() {  var hm  document.createElement(script);  hm.src  https://hm.baidu.com/hm.js?b55a91a93caba26fa4e4eec6123ffce6;  var s  document.getElementsByTagName(script)0;   s.parentNode.insertBefore(hm, s);})();/script>/head>script typetext/javascript>	function getDongtaiList()	{		xmlHttp  GetXmlHttpObject();		if(xmlHttp  null)		{			alert (Browser does not support HTTP Request);			return;		}		var url  dongtai/list.xml?random+Math.random();		xmlHttp.onreadystatechange  onGetDongtaiFinish;		xmlHttp.open(GET,url,true);		xmlHttp.send(null);	}	function onGetDongtaiFinish() 	{ 		if(xmlHttp.readyState4 || xmlHttp.readyStatecomplete)		{ 			var xmlobject;			var xmlString  xmlHttp.responseText;			try{				if (window.ActiveXObject)				{					xmlobject  new ActiveXObject(Microsoft.XMLDOM);					xmlobject.async  false;					xmlobject.loadXML(xmlString);				}				// 用于 Mozilla, Firefox, Opera, 等浏览器的代码：				else				{					var parser  new DOMParser();					xmlobject  parser.parseFromString(xmlString, text/xml);				}			}catch(e)			{			}			var items  xmlobject.getElementsByTagName(item);			var item  null;			var date;			var title;			var content;			var dongtai  ;			for(var i  0; i  items.length; i++)			{				item  items.item(i);				date  item.getElementsByTagName(date)0.firstChild.nodeValue;				title  item.getElementsByTagName(title)0.firstChild.nodeValue;				content  item.getElementsByTagName(content)0.firstChild.nodeValue;				dongtai + li>a hrefhttp://www.kingsfw.com/dongtai.html?index+i+>+title+/a>span>+date+/span>/li>;			}			var container  document.getElementById(dongtai);			container.innerHTML  dongtai;		} 	}	function getSu

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.notesmaker.com

Is this malicious?

Files that talk to www.notesmaker.com

Whois

DNS Resolutions

Port 80