Domain > install.weblayers.co

More information on this domain is in AlienVault OTX

Files that talk to install.weblayers.co

MD5	A/V
2121de64d8c420849d52ef31a7f2e20b	[W32.Clod388.Trojan.f6a8] [Artemis!2121DE64D8C4] [Adware.Shopper.361] [Win32/BrowseFox.C] [NS:PUF.SilenceInstaller!1.9DDF] [AdInstaller.WebLayers] [WORM_BAGLE.BMH] [Trojan/Delf.gkz]

Whois

Property	Value
Name	Registration Private
Organization	Domains By Proxy, LLC
Email	WEBLAYERS.CO@domainsbyproxy.com
Zip Code	85260
City	Scottsdale
State	Arizona
Country	US
Phone	+1.4806242599
Fax	+1.4806242598
NameServer	PDNS08.DOMAINCONTROL.COM
Created	2013-06-08 00:15:24
Changed	2016-01-22 21:51:02
Expires	2016-06-07 23:59:59
Registrar	GODADDY.COM, INC.

DNS Resolutions

Date	IP Address
2014-01-09	70.186.131.212 (ClassC)
2014-01-09	70.186.131.7 (ClassC)
2016-03-11	8.37.113.212 (ClassC)
2017-11-04	23.62.239.10 (ClassC)
2018-05-22	184.26.143.105 (ClassC)
2018-06-26	67.135.105.89 (ClassC)
2018-06-26	67.135.105.91 (ClassC)
2018-08-27	23.43.56.201 (ClassC)
2018-08-27	204.237.173.26 (ClassC)
2018-08-27	23.43.56.211 (ClassC)
2018-08-27	205.177.69.40 (ClassC)
2018-10-09	104.91.166.169 (ClassC)
2019-01-30	65.153.18.48 (ClassC)
2019-02-13	23.215.98.114 (ClassC)
2019-02-13	23.215.99.87 (ClassC)
2019-02-17	184.50.239.34 (ClassC)
2019-02-17	184.50.239.56 (ClassC)
2019-02-20	23.54.163.131 (ClassC)
2019-02-20	23.54.163.27 (ClassC)
2019-02-20	23.3.98.10 (ClassC)
2019-02-20	23.3.98.33 (ClassC)
2019-09-17	23.1.254.178 (ClassC)
2019-09-17	104.124.58.153 (ClassC)
2019-09-17	23.1.254.211 (ClassC)
2019-09-19	23.50.52.137 (ClassC)
2019-09-19	23.50.52.147 (ClassC)
2019-10-23	104.124.58.145 (ClassC)
2019-10-23	104.124.58.154 (ClassC)
2019-10-26	104.91.166.25 (ClassC)
2019-10-26	104.91.166.9 (ClassC)
2019-12-31	23.35.70.81 (ClassC)
2019-12-31	23.35.70.9 (ClassC)
2020-08-19	23.32.45.7 (ClassC)
2020-08-19	23.32.45.13 (ClassC)
2020-09-14	23.55.220.152 (ClassC)
2020-09-14	23.55.220.154 (ClassC)
2021-04-02	172.232.14.19 (ClassC)
2021-04-02	172.232.14.57 (ClassC)
2021-07-24	23.220.206.54 (ClassC)
2021-07-24	23.220.206.32 (ClassC)
2024-02-23	23.215.176.40 (ClassC)
2024-03-26	23.55.168.208 (ClassC)
2024-05-24	23.41.4.209 (ClassC)
2024-06-20	23.32.75.164 (ClassC)
2024-07-12	23.213.175.42 (ClassC)
2024-08-05	23.215.176.65 (ClassC)
2025-01-21	23.46.228.145 (ClassC)
2025-03-19	23.41.4.210 (ClassC)
2025-06-14	104.98.118.163 (ClassC)
2025-07-10	23.32.75.168 (ClassC)
2025-07-28	23.46.228.36 (ClassC)
2025-08-05	23.216.147.12 (ClassC)
2025-08-28	23.53.122.201 (ClassC)

HTTP/1.1 403 ForbiddenContent-Type: text/htmlServer: Microsoft-IIS/10.0X-Powered-By: ASP.NETp3p: CPCAO PSA OURContent-Length: 1233Expires: Sun, 07 Jan 2024 19:10:42 GMTCache-Control: max-age0, no-cach

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1/>title>403 - Forbidden: Access is denied./title>style typetext/css>!--body{margin:0;font-size:.7em;font-family:Verdana, Arial, Helvetica, sans-serif;background:#EEEEEE;}fieldset{padding:0 15px 10px 15px;} h1{font-size:2.4em;margin:0;color:#FFF;}h2{font-size:1.7em;margin:0;color:#CC0000;} h3{font-size:1.2em;margin:10px 0 0 0;color:#000000;} #header{width:96%;margin:0 0 0 0;padding:6px 2% 6px 2%;font-family:trebuchet MS, Verdana, sans-serif;color:#FFF;background-color:#555555;}#content{margin:0 0 0 2%;position:relative;}.content-container{background:#FFF;width:96%;margin-top:8px;padding:10px;position:relative;}-->/style>/head>body>div idheader>h1>Server Error/h1>/div>div idcontent> div classcontent-container>fieldset>  h2>403 - Forbidden: Access is denied./h2>  h3>You do not have permission to view this directory or page using the credentials that you supplied./h3> /fieldset>/div>/div>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > install.weblayers.co

Is this malicious?

Files that talk to install.weblayers.co

Whois

DNS Resolutions

Port 80