Domain > goatsinacoat.com

More information on this domain is in AlienVault OTX

Reports

http://www.malware-traffic-analysis.net/2015/10/18...

https://otx.alienvault.com/pulse/5628f1124637f21ec...

Files that talk to goatsinacoat.com

MD5	A/V
b2952660d2aafc275b74589353b39b43
906f9098ef9a6dba0c06376a63941942
acc6490d19384bb90dd06a1f5fa57d2c	[Ransom.Crowti.r5] [Trojan.Blocker!dAKWSelQyzk] [Win32/Filecoder.CO] [Trojan-Ransom.Win32.Blocker.htww] [Trojan.Win32.Blocker.dxwtph] [Trojan.Win32.A.Blocker.189952.D[h]] [Trojan.DownLoader17.19145] [BehavesLike.Win32.Backdoor.cc] [TR/FileCoder.189952.1] [Ransom:Win32/Crowti.A] [Win32.Trojan.Blocker.Lqos] [Trojan.Win32.Kovter] [W32/Kryptik.EAZD!tr] [FileCryptor.DZU] [Trojan.Win32.Filecoder.CO]

Whois

Property	Value
NameServer	NS2.JUSTHOST.COM
Created	2014-02-19 00:00:00
Changed	2015-09-25 00:00:00
Expires	2017-02-19 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2015-07-22	173.254.28.37 (ClassC)
2016-03-23	50.63.202.13 (ClassC)
2025-07-30	23.227.38.32 (ClassC)

HTTP/1.1 403 ForbiddenDate: Fri, 27 Sep 2019 21:25:50 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: __cfduidd853b428ee71bb7fea9ab41b04b7453581569619550; expires

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen langen>head>    meta http-equivcontent-type contenttext/html;charsetUTF-8 />    title>Forbidden/title>  	style typetext/css>    	body {        margin: 0;        text-align: center;        font: 1em/1.3em Lucida Grande, Arial, Arial, sans-serif;        background-color: #efefef ;      }    	div.outer {    	  font-size: 75%;    		position: absolute;    		left: 50%;    		top: 50%;    		width: 400px;    		height: 200px;    		margin-left: -200px;    		margin-top: -100px;    	}    	.dialog {    	  padding: 0;    	  background-color: white;    	  border-top: 1px solid #ddd;    	  border-right: 1px solid #ccc;    	  border-left: 1px solid #ddd;    	  border-bottom: 1px solid #ccc;    	}    	h1 {    	  font-size: 100%;    	  background: #000;    	  color: white;    	  margin: 0;    	  padding: 5px 10px;    	}    	h1 span {	      float: right;				font-size: 75%;    	  color: #666;    	}    	.block {    	  text-align: left;    	  width: 250px;    	  margin: 0 auto;    	  margin-top: 2em;    	}  	/style>/head>body>div classouter>		div classdialog styletext-align: center;>			h1>span>403/span>Forbidden Request/h1>			div classblock>    	  p>The server understood the request, but is refusing to fulfill it because access is forbidden to the requested resource./p>      /div>  	  div classblock>        p>Back to a href# onClickhistory.back(); return false;>previous page/a> | a hrefhttp://shopify.com/>shopify.com/a>/p>   	  /div>	 /div>/div>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenDate: Fri, 27 Sep 2019 21:25:50 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: __cfduiddecebe14a6ddd14f18588f39594b397391569619550; expires

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]