Domain > bigcountrywater.com

More information on this domain is in AlienVault OTX

Reports

http://researchcenter.paloaltonetworks.com/2016/07...

Files that talk to bigcountrywater.com

MD5	A/V
c3966dc6079db8bc2923c6e33c097d73	[Win32.Trojan.Inject.Auto]
c369a2194fd9987b4fafd99d9b7163ae
318743467ffee3d0afbe1939ec5c8635	[AdWare.W32.InstallCore.m4E6] [GrayWare[AdWare]/Win32.InstallCore.bh]
8a0bac1da88be2588aac3d3b8eb28c21
8bfc00db49fd9fa6c97e695083ed2e2e

Whois

Property	Value
NameServer	NS52.DOMAINCONTROL.COM
Created	2012-04-10 00:00:00
Changed	2015-04-15 00:00:00
Expires	2016-04-10 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2023-08-09	104.21.60.145 (ClassC)
2024-04-22	104.249.62.130 (ClassC)
2024-10-24	155.254.17.54 (ClassC)
2026-02-15	64.23.134.182 (ClassC)

HTTP/1.1 200 OKDate: Wed, 09 Aug 2023 18:50:32 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-alivelink: https://bigcountrywater.com/wp-json/>; relhttps://api.w.org

!DOCTYPE html>html langen-US>head>	meta charsetUTF-8 />meta http-equivX-UA-Compatible contentIEedge>script typetext/javascript>var gform;gform||(document.addEventListener(gform_main_scripts_loaded,function(){gform.scriptsLoaded!0}),window.addEventListener(DOMContentLoaded,function(){gform.domLoaded!0}),gform{domLoaded:!1,scriptsLoaded:!1,initializeOnLoaded:function(o){gform.domLoaded&&gform.scriptsLoaded?o():!gform.domLoaded&&gform.scriptsLoaded?window.addEventListener(DOMContentLoaded,o):document.addEventListener(gform_main_scripts_loaded,o)},hooks:{action:{},filter:{}},addAction:function(o,n,r,t){gform.addHook(action,o,n,r,t)},addFilter:function(o,n,r,t){gform.addHook(filter,o,n,r,t)},doAction:function(o){gform.doHook(action,o,arguments)},applyFilters:function(o){return gform.doHook(filter,o,arguments)},removeAction:function(o,n){gform.removeHook(action,o,n)},removeFilter:function(o,n,r){gform.removeHook(filter,o,n,r)},addHook:function(o,n,r,t,i){nullgform.hookson&&(gform.hookson);var egform.hookson;nulli&&(in+_+e.length),gform.hookson.push({tag:i,callable:r,priority:tnullt?10:t})},doHook:function(n,o,r){var t;if(rArray.prototype.slice.call(r,1),null!gform.hooksno&&((ogform.hooksno).sort(function(o,n){return o.priority-n.priority}),o.forEach(function(o){function!typeof(to.callable)&&(twindowt),actionn?t.apply(null,r):r0t.apply(null,r)})),filtern)return r0},removeHook:function(o,n,t,i){var r;null!gform.hookson&&(r(rgform.hookson).filter(function(o,n,r){return!!(null!i&&i!o.tag||null!t&&t!o.priority)}),gform.hooksonr)}});/script>	link relpingback hrefhttps://bigcountrywater.com/xmlrpc.php />	script typetext/javascript>		document.documentElement.className  js;	/script>	link relpreconnect hrefhttps://fonts.gstatic.com crossorigin />style idet-divi-open-sans-inline-css>/* Original: https://fonts.googleapis.com/css?familyOpen+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subsetlatin,latin-ext&displayswap *//* User Agent: Mozilla/5.0 (Unknown; Linux x86_64) AppleWebKit/538.1 (KHT

Subdomains

Date	Domain	IP
ftp.bigcountrywater.com	2025-09-05	104.21.60.145

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > bigcountrywater.com

Is this malicious?

Reports

Files that talk to bigcountrywater.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains