Domain > americantestingservices.com

More information on this domain is in AlienVault OTX

Files that talk to americantestingservices.com

MD5	A/V
5b88188ee5306549b12d14aabea25e4f	[Cutwail-FCWE!5B88188EE530] [Trojan.Downloader] [Backdoor.Trojan] [Kryptik.CCOH] [TROJ_SPNV.01J013] [BackDoor.Bulknet.1150] [TR/Dldr.Cutwail.BS.274] [Trj/Ransom.BB] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Trojan] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Kryptik.BMDF] [Trojan.Win32.Kryptik.BMDF]
9f6a578722ed1984ad5ac638fcd80547	[TrojanDownloader.Cutwail.bs] [Cutwail-FCWE!9F6A578722ED] [Trojan.Downloader] [Trojan] [Backdoor.Trojan] [Kryptik.CCOH] [TROJ_CUTWAIL.QD] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [TR/Dldr.Cutwail.BS.277] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.LOJD-5054] [Trojan.Win32.Kryptik.BMDF]
1aaea0a63a6123fd2dc4261fdeadc751	[W32.Sality.PE] [Win32.Sality.3] [Trojan.Win32.Krap.1!O] [W32.Sality.U] [Virus.Win32.Sality.beygb] [W32.Sality.AE] [Sality.ZHB] [Win32/Sality.AA] [PE_SALITY.RL] [Win32:SaliCode] [Win32.Sality.BL] [Win32.Sality.N] [Mal/Sality-D] [Win32.Sector.22] [Virus.Sality.Win32.20] [W32/Sality.AT] [Virus:Win32/Sality.AT] [Win32/Kashu.E] [Virus.Win32.Sality.bakc] [W32/Sality.AA] [Win32/Sality.NBA] [Virus.Win32.Sality] [Win32/Sality] [Virus.Win32.Sality.$Emu] [Backdoor.Win32.Bulknet.A]

Whois

Property	Value
NameServer	THEO.NS.CLOUDFLARE.COM
Created	2004-05-07 00:00:00
Changed	2014-04-07 00:00:00
Expires	2023-05-07 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-11-08	198.1.77.220 (ClassC)
2014-05-29	162.159.250.182 (ClassC)
2014-08-11	162.159.250.182 (ClassC)
2014-08-15	162.159.251.182 (ClassC)
2015-05-27	-
2025-04-30	160.153.0.197 (ClassC)

HTTP/1.1 200 OKDate: Wed, 28 Feb 2024 01:48:49 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveAge: 309885content-security-policy: upgrade-insecure-requestsperm

!DOCTYPE html>html langen-US class>head>meta charsetUTF-8>script typetext/javascript>/* !CDATA */ var gform;gform||(document.addEventListener(gform_main_scripts_loaded,function(){gform.scriptsLoaded!0}),window.addEventListener(DOMContentLoaded,function(){gform.domLoaded!0}),gform{domLoaded:!1,scriptsLoaded:!1,initializeOnLoaded:function(o){gform.domLoaded&&gform.scriptsLoaded?o():!gform.domLoaded&&gform.scriptsLoaded?window.addEventListener(DOMContentLoaded,o):document.addEventListener(gform_main_scripts_loaded,o)},hooks:{action:{},filter:{}},addAction:function(o,n,r,t){gform.addHook(action,o,n,r,t)},addFilter:function(o,n,r,t){gform.addHook(filter,o,n,r,t)},doAction:function(o){gform.doHook(action,o,arguments)},applyFilters:function(o){return gform.doHook(filter,o,arguments)},removeAction:function(o,n){gform.removeHook(action,o,n)},removeFilter:function(o,n,r){gform.removeHook(filter,o,n,r)},addHook:function(o,n,r,t,i){nullgform.hookson&&(gform.hookson);var egform.hookson;nulli&&(in+_+e.length),gform.hookson.push({tag:i,callable:r,priority:tnullt?10:t})},doHook:function(n,o,r){var t;if(rArray.prototype.slice.call(r,1),null!gform.hooksno&&((ogform.hooksno).sort(function(o,n){return o.priority-n.priority}),o.forEach(function(o){function!typeof(to.callable)&&(twindowt),actionn?t.apply(null,r):r0t.apply(null,r)})),filtern)return r0},removeHook:function(o,n,t,i){var r;null!gform.hookson&&(r(rgform.hookson).filter(function(o,n,r){return!!(null!i&&i!o.tag||null!t&&t!o.priority)}),gform.hooksonr)}}); /* > *//script>meta nameviewport contentwidthdevice-width, initial-scale1>link relprofile hrefhttp://gmpg.org/xfn/11>title>American Testing Services | Homepage - American Testing Services/title>link relshortcut icon hrefhttps://americantestingservices.com/wp-content/themes/lpbuilder/images/favicon/favicon.ico />meta namerobots contentindex, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1 />	!-- This site is optimized with the Yoast SEO plugin v21.7 - https://yoast.com/wordpress/plugins/seo/ -->	link re

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > americantestingservices.com

Is this malicious?

Files that talk to americantestingservices.com

Whois

DNS Resolutions

Port 80

Port 443