Domain > www.sashraf.plus.com

More information on this domain is in AlienVault OTX

Files that talk to www.sashraf.plus.com

MD5	A/V
2893b9eb4688e2a61ade55730ad9b7aa
3489bc476fd4940435e0c5520b674278	[Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [BehavesLike.JS.ExploitBlacole.qx]
927df7d21b55f690cec91618a7cff6c0
d15acabd7834af9f0ff1f62f1aba8e42	[JS:Trojan.Downloader.Nemucod.AX] [JS:Trojan.Downloader.Nemucod.AX] [JS:Trojan.Downloader.Nemucod.AX] [JS/Locky.AT] [JS/TrojanDownloader.Nemucod.ASO] [Trojan.Script.Heuristic-js.iacgm] [Js.Troj.Downloader!c] [Js.Trojan.Raas.Auto] [JS:Trojan.Downloader.Nemucod.AX] [JS:Trojan.Downloader.Nemucod.AX] [BehavesLike.JS.ExploitBlacole.qx] [Troj/JsDwnLdr-T] [JS/Locky.AT] [JS:Trojan.Downloader.Nemucod.AX]
4d8463b447e302a140ca4c54c55cd8c1	[JS:Trojan.Downloader.Nemucod.AX] [JS:Trojan.Downloader.Nemucod.AX] [JS/Locky.AT] [JS/TrojanDownloader.Nemucod.ASO] [Trojan.Script.Heuristic-js.iacgm] [JS:Trojan.Downloader.Nemucod.AX] [Troj/JsDwnLdr-T] [JS:Trojan.Downloader.Nemucod.AX] [BehavesLike.JS.ExploitBlacole.qx] [JS/Locky.AT] [JS:Trojan.Downloader.Nemucod.AX] [Js.Trojan.Raas.Auto] [JS:Trojan.Downloader.Nemucod.AX]
c13417bce88b759f96448139fddd2301
bc2f3dcfe73b413eff42f127441048b0

Whois

Property	Value
Email	HOSTMASTER@PLUS.NET
NameServer	NS1.PLUSNET.CO.UK
Created	1994-12-16 00:00:00
Changed	2014-11-20 00:00:00
Expires	2017-12-15 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2024-11-06	212.159.8.91 (ClassC)
2025-01-08	212.159.9.91 (ClassC)

HTTP/1.1 200 OKDate: Tue, 15 Oct 2019 21:56:49 GMTServer: Apache/2.4.10 (Debian)Vary: Host,Accept-EncodingLast-Modified: Fri, 02 Sep 2016 03:03:11 GMTETag: 578-53b7d92167041Accept-Ranges: bytesContent

?xml version1.0 encodingUTF-8 ?>!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetUTF-8 />title>This site has been removed/title>style  typetext/css>    body {        font-family: Arial, Helvetica, sans-serif;        font-size: 12px;    }    #header {        background-image: url(http://www.plus.net/images/general/header_bg.png); background-repeat: no-repeat;    }    #header, .content {        width: 930px;        margin: auto;    }    .content {        text-align: center;        font-family: Arial, Helvetica, sans-serif;        font-size: 1em;    }    h1 {        font-size: 1.4em;        color: #CC0000;        margin: 20px 0 30px 0;    }/style>/head>body>div idheader>    div idlogo>        img srchttp://www.plus.net/images/general/plusnet_logo.png altPlusnet logo />    /div>/div>div classcontent>    h1>Site removed!/h1>    p>This site has been removed because it has exceeded its bandwidth allowance./p>    p>If this is your site, see our a hrefhttp://www.plus.net/support/webspace/tips_and_info/webspace_faq.shtml#siteRemoved>Webspace FAQ/a> to see why this has happened and what you need to do next./div>    /body>/html>

Subdomains

Date	Domain	IP
www.jruffle.plus.com	2024-09-10	212.159.8.91
mail.gillane.plus.com	2024-12-06	194.168.4.100
www.sashraf.plus.com	2024-11-06	212.159.8.91
www.alanmorgan.plus.com	2024-08-27	212.159.9.91
www.netman.plus.com	2024-07-25	212.159.9.91
cutter.plus.com	2014-05-29	80.229.249.127
www.plus.com	2024-11-26	212.159.9.2

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.sashraf.plus.com

Is this malicious?

Files that talk to www.sashraf.plus.com

Whois

DNS Resolutions

Port 80

Subdomains