Domain > aaa.aaa

More information on this domain is in AlienVault OTX

Property	Value
Email	registrytechnical1@neustar.biz

DNS Resolutions

Date	IP Address
2024-09-12	99.86.229.70 (ClassC)
2024-10-09	13.224.14.94 (ClassC)
2024-12-18	13.224.14.129 (ClassC)
2025-01-30	13.224.14.20 (ClassC)
2025-04-05	18.161.6.75 (ClassC)
2025-04-14	18.161.6.85 (ClassC)
2025-05-06	18.161.6.28 (ClassC)
2025-05-28	18.161.6.33 (ClassC)

HTTP/1.1 403 ForbiddenServer: CloudFrontDate: Sat, 20 Apr 2024 11:40:09 GMTContent-Type: text/htmlContent-Length: 919Connection: keep-aliveX-Cache: Error from cloudfrontVia: 1.1 1cbc126937aab64e42a05f

!DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01 Transitional//EN http://www.w3.org/TR/html4/loose.dtd>HTML>HEAD>META HTTP-EQUIVContent-Type CONTENTtext/html; charsetiso-8859-1>TITLE>ERROR: The request could not be satisfied/TITLE>/HEAD>BODY>H1>403 ERROR/H1>H2>The request could not be satisfied./H2>HR noshade size1px>Request blocked.We cant connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.BR clearall>If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.BR clearall>HR noshade size1px>PRE>Generated by cloudfront (CloudFront)Request ID: nnuaRbPMCMiq5fidFCzsPnbsFfCbCE-WbUBE2p9h3OCWfIKRGxOJ1A/PRE>ADDRESS>/ADDRESS>/BODY>/HTML>

Subdomains

Date	Domain	IP
www.aaa.aaa	2024-07-30	18.161.6.75

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
fc86d22a11ee98979951e06e37fdecb1	[DDoS*Win32/Nitol.G] [Trojan.Win32.Yoddos] [W32/Heuristic-119!Eldorado] [W32/Heuristic-119!Eldorado] [Trojan.Katusha.Win32.37531] [Trojan.Win32.Reconyc.dzpl] [WORM_NITOL.SMB0] [DoS.FGF] [Ddos.Nitol.018967] [Trojan.Reconyc] [W32/ServStart.P!worm] [Trojan.DownLoader12.48019]
69f56c3bd38ce843e38d9396a4e2d95d	[DDoS*Win32/Nitol.G] [Trojan.Win32.Yoddos] [W32/Heuristic-119!Eldorado] [W32/Heuristic-119!Eldorado] [Trojan.Katusha.Win32.37531] [Trojan.Win32.Reconyc.dzpl] [WORM_NITOL.SMB0] [DoS.FGF] [Ddos.Nitol.018967] [Trojan.Reconyc] [W32/ServStart.P!worm] [Trojan.DownLoader12.48019]

Domain > aaa.aaa

Is this malicious?

Files that talk to aaa.aaa

Whois

DNS Resolutions

Port 80

Port 443

Subdomains