Domain > abha.dhamma.org

More information on this domain is in AlienVault OTX

Files that talk to abha.dhamma.org

MD5	A/V
129893be541a5853da63c69a90dc7fa6	[HW32.CDB.6488] [Packed.Win32.Katusha.3!O] [Trojan.Win32.Slym.cxvgrz] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dtmi] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13011] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.MalPacked] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBLX]

DNS Resolutions

Date	IP Address
2014-06-29	205.246.6.37 (ClassC)
2024-05-02	172.67.68.120 (ClassC)
2025-04-20	104.26.4.186 (ClassC)
2025-12-10	104.26.5.186 (ClassC)

HTTP/1.1 403 ForbiddenDate: Thu, 02 May 2024 09:52:10 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 87d71df08ece7624-SEACF-Cache-Status: DYNAMICcf-apo-via: origin,h

html>head>title>403 Forbidden/title>/head>body>center>h1>403 Forbidden/h1>/center>hr>center>openresty/center>script>(function(){if (!document.body) return;var js  window__CF$cv$params{r:87d71df08ece7624,t:MTcxNDY0MzUzMC42NDEwMDA};_cpodocument.createElement(script);_cpo.nonce,_cpo.src/cdn-cgi/challenge-platform/scripts/jsd/main.js,document.getElementsByTagName(head)0.appendChild(_cpo);;var _0xh  document.createElement(iframe);_0xh.height  1;_0xh.width  1;_0xh.style.position  absolute;_0xh.style.top  0;_0xh.style.left  0;_0xh.style.border  none;_0xh.style.visibility  hidden;document.body.appendChild(_0xh);function handler() {var _0xi  _0xh.contentDocument || _0xh.contentWindow.document;if (_0xi) {var _0xj  _0xi.createElement(script);_0xj.innerHTML  js;_0xi.getElementsByTagName(head)0.appendChild(_0xj);}}if (document.readyState ! loading) {handler();} else if (window.addEventListener) {document.addEventListener(DOMContentLoaded, handler);} else {var prev  document.onreadystatechange || function () {};document.onreadystatechange  function (e) {prev(e);if (document.readyState ! loading) {document.onreadystatechange  prev;handler();}};}})();/script>/body>/html>

Port 443

HTTP/1.1 403 ForbiddenDate: Thu, 02 May 2024 09:52:11 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 87d71df2dd32720b-SEACF-Cache-Status: DYNAMICcf-apo-via: origin,h

html>head>title>403 Forbidden/title>/head>body>center>h1>403 Forbidden/h1>/center>hr>center>openresty/center>script>(function(){if (!document.body) return;var js  window__CF$cv$params{r:87d71df2dd32720b,t:MTcxNDY0MzUzMS4xNTgwMDA};_cpodocument.createElement(script);_cpo.nonce,_cpo.src/cdn-cgi/challenge-platform/scripts/jsd/main.js,document.getElementsByTagName(head)0.appendChild(_cpo);;var _0xh  document.createElement(iframe);_0xh.height  1;_0xh.width  1;_0xh.style.position  absolute;_0xh.style.top  0;_0xh.style.left  0;_0xh.style.border  none;_0xh.style.visibility  hidden;document.body.appendChild(_0xh);function handler() {var _0xi  _0xh.contentDocument || _0xh.contentWindow.document;if (_0xi) {var _0xj  _0xi.createElement(script);_0xj.innerHTML  js;_0xi.getElementsByTagName(head)0.appendChild(_0xj);}}if (document.readyState ! loading) {handler();} else if (window.addEventListener) {document.addEventListener(DOMContentLoaded, handler);} else {var prev  document.onreadystatechange || function () {};document.onreadystatechange  function (e) {prev(e);if (document.readyState ! loading) {document.onreadystatechange  prev;handler();}};}})();/script>/body>/html>

Subdomains

Date	Domain	IP
mailhost1.dhamma.org	2014-06-29	205.246.6.37
abha.dhamma.org	2014-06-29	205.246.6.37
kamala.dhamma.org	2014-06-29	205.246.6.37
www.dhara.dhamma.org	2014-12-12	198.252.78.160
sg.dhamma.org	2013-09-09	205.246.6.37

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > abha.dhamma.org

Is this malicious?

Files that talk to abha.dhamma.org

DNS Resolutions

Port 80

Port 443

Subdomains