Domain > gonavarro.com

More information on this domain is in AlienVault OTX

Files that talk to gonavarro.com

MD5	A/V
fb81a902450be169d597b6ec18d03c68	[WS.Reputation.1] [Win32/Filecoder.CO] [Artemis!Trojan] [TR/Crowti.A.349] [W32/Filecoder.CO!tr] [Trojan.Win32.Filecoder.CO] [Trojan.Win32.Filecoder] [Inject2.CGEA] [Trj/Chgt.O] [Win32/Trojan.fbb]
50d33c5bffa7a8cf367ceacd15538603	[TR/Crowti.A.347] [Trj/Chgt.O] [Win32/Trojan.78d]
59aafe1c9aaa1eb222ea07b3aded0caf	[RDN/Suspicious.bfr!bj] [Trojan.CryptoWall] [WS.Reputation.1] [Trojan-Ransom.Win32.Blocker.hdey] [Mal/Wonton-BB] [Trojan.Encoder.514] [BehavesLike.Win32.PackedAP.dc] [TR/Dropper.A.39476] [Trojan[Ransom]/Win32.Blocker] [Ransom:Win32/Crowti.A] [Trojan/Win32.Blocker] [Trojan.Win32.Ransomlock.hdey] [Trojan.Win32.Crypt] [W32/KRYPTIK.BB!tr] [Win32/Cryptor] [Trj/Chgt.O]
f1856836806786d7009daf50fbe41b24	[HW32.Packed.BD1F] [Artemis!F18568368067] [Trojan-Ransom.Win32.Snocry.df] [Win32.Malware!Drop] [Artemis!Trojan] [TR/Crowti.A.331] [Ransom:Win32/Crowti] [Win32.Malware!Drop] [Win32/Filecoder.CO] [Trojan.Win32.Filecoder] [Inject2.CFOJ] [Trj/Chgt.O]
30ca927d6e800177937788703fc87301	[Win32/Filecoder.CO] [Trj/Chgt.O]

Whois

Property	Value
NameServer	NS44.DOMAINCONTROL.COM
Created	2012-10-30 00:00:00
Changed	2012-10-30 00:00:00
Expires	2017-10-30 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2019-08-15	107.180.12.114 (ClassC)
2025-03-22	15.197.148.33 (ClassC)
2025-05-23	3.33.130.190 (ClassC)
2026-01-23	173.226.67.20 (ClassC)

HTTP/1.1 200 OKDate: Thu, 15 Aug 2019 13:17:27 GMTServer: ApacheX-Powered-By: PHP/7.1.30Link: http://gonavarro.com/wp-json/>; relhttps://api.w.org/Upgrade: h2,h2cConnection: UpgradeVary: Accept-Encodi

!DOCTYPE html>html langen>head>		meta charsetUTF-8>	meta nameviewport contentwidthdevice-width, initial-scale1.0>	link relprofile hrefhttp://gmpg.org/xfn/11>	title>Go Navarro/title>link reldns-prefetch href//fonts.googleapis.com />link reldns-prefetch href//s.w.org />link relalternate typeapplication/rss+xml titleGo Navarro » Feed hrefhttp://gonavarro.com/feed/ />link relalternate typeapplication/rss+xml titleGo Navarro » Comments Feed hrefhttp://gonavarro.com/comments/feed/ />		script typetext/javascript>			window._wpemojiSettings  {baseUrl:https://s.w.org/images/core/emoji/12.0.0-1/72x72/,ext:.png,svgUrl:https://s.w.org/images/core/emoji/12.0.0-1/svg/,svgExt:.svg,source:{concatemoji:http://gonavarro.com/wp-includes/js/wp-emoji-release.min.js?ver5.2.2}};			!function(a,b,c){function d(a,b){var cString.fromCharCode;l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,a),0,0);var dk.toDataURL();l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,b),0,0);var ek.toDataURL();return de}function e(a){var b;if(!l||!l.fillText)return!1;switch(l.textBaselinetop,l.font600 32px Arial,a){caseflag:return!(bd(55356,56826,55356,56819,55356,56826,8203,55356,56819))&&(bd(55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447,55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447),!b);caseemoji:return bd(55357,56424,55356,57342,8205,55358,56605,8205,55357,56424,55356,57340,55357,56424,55356,57342,8203,55358,56605,8203,55357,56424,55356,57340),!b}return!1}function f(a){var cb.createElement(script);c.srca,c.deferc.typetext/javascript,b.getElementsByTagName(head)0.appendChild(c)}var g,h,i,j,kb.createElement(canvas),lk.getContext&&k.getContext(2d);for(jArray(flag,emoji),c.supports{everything:!0,everythingExceptFlag:!0},i0;ij.length;i++)c.supportsjie(ji),c.supports.everythingc.supports.everything&&c.supportsji,flag!ji&&(c.supports.everythingExceptFlagc.supports.everythingExceptFlag&&c.supportsji);c.supports.everythingExceptFlag

Port 443

HTTP/1.1 200 OKDate: Thu, 15 Aug 2019 13:17:28 GMTServer: ApacheX-Powered-By: PHP/7.1.30Link: https://gonavarro.com/wp-json/>; relhttps://api.w.org/Upgrade: h2,h2cConnection: UpgradeVary: Accept-Encod

!DOCTYPE html>html langen>head>		meta charsetUTF-8>	meta nameviewport contentwidthdevice-width, initial-scale1.0>	link relprofile hrefhttp://gmpg.org/xfn/11>	title>Go Navarro/title>link reldns-prefetch href//fonts.googleapis.com />link reldns-prefetch href//s.w.org />link relalternate typeapplication/rss+xml titleGo Navarro » Feed hrefhttps://gonavarro.com/feed/ />link relalternate typeapplication/rss+xml titleGo Navarro » Comments Feed hrefhttps://gonavarro.com/comments/feed/ />		script typetext/javascript>			window._wpemojiSettings  {baseUrl:https://s.w.org/images/core/emoji/12.0.0-1/72x72/,ext:.png,svgUrl:https://s.w.org/images/core/emoji/12.0.0-1/svg/,svgExt:.svg,source:{concatemoji:https://gonavarro.com/wp-includes/js/wp-emoji-release.min.js?ver5.2.2}};			!function(a,b,c){function d(a,b){var cString.fromCharCode;l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,a),0,0);var dk.toDataURL();l.clearRect(0,0,k.width,k.height),l.fillText(c.apply(this,b),0,0);var ek.toDataURL();return de}function e(a){var b;if(!l||!l.fillText)return!1;switch(l.textBaselinetop,l.font600 32px Arial,a){caseflag:return!(bd(55356,56826,55356,56819,55356,56826,8203,55356,56819))&&(bd(55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447,55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447),!b);caseemoji:return bd(55357,56424,55356,57342,8205,55358,56605,8205,55357,56424,55356,57340,55357,56424,55356,57342,8203,55358,56605,8203,55357,56424,55356,57340),!b}return!1}function f(a){var cb.createElement(script);c.srca,c.deferc.typetext/javascript,b.getElementsByTagName(head)0.appendChild(c)}var g,h,i,j,kb.createElement(canvas),lk.getContext&&k.getContext(2d);for(jArray(flag,emoji),c.supports{everything:!0,everythingExceptFlag:!0},i0;ij.length;i++)c.supportsjie(ji),c.supports.everythingc.supports.everything&&c.supportsji,flag!ji&&(c.supports.everythingExceptFlagc.supports.everythingExceptFlag&&c.supportsji);c.supports.everythingExceptF

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gonavarro.com

Is this malicious?

Files that talk to gonavarro.com

Whois

DNS Resolutions

Port 80

Port 443