Domain > mail.prucarealty.com

More information on this domain is in AlienVault OTX

Files that talk to mail.prucarealty.com

MD5	A/V
427481f8e79f0ee33385c9da2fe00111	[HW32.CDB.16f0] [Backdoor.Hlux!hl4OBD+jyQw] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djqf] [Trojan.Win32.Hlux.cxbctj] [TrojWare.Win32.Kryptik.BZOO] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHE] [Trojan.Win32.Kryptik.BZIX]

Whois

Property	Value
Email	domainadmin@allureventures.com
NameServer	NS2.SUMMITNETWORKS.COM
Created	1997-09-11 00:00:00
Changed	2012-04-13 00:00:00
Expires	2019-09-10 00:00:00
Registrar	TIERRANET INC. D/B/A

DNS Resolutions

Date	IP Address
2014-05-30	66.70.121.157 (ClassC)
2024-04-15	199.59.243.225 (ClassC)
2024-09-12	199.59.243.226 (ClassC)
2025-05-16	199.59.243.228 (ClassC)
2026-03-02	13.248.169.48 (ClassC)

HTTP/1.1 200 OKdate: Mon, 15 Apr 2024 21:33:09 GMTcontent-type: text/html; charsetutf-8content-length: 1062x-request-id: 0f90b44c-775d-4cd3-90c8-c70fa70eb80fcache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_WdKwAOw3qn9raSZPsYtJEywAO8GQTTbWvxVTh3poAQIWACeZhNGiDSYdSOO1y34garpLsLxycwCh4WfANBLXDA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMGY5MGI0NGMtNzc1ZC00Y2QzLTkwYzgtYzcwZmE3MGViODBmIiwicGFnZV90aW1lIjoxNzEzMjE2NzkwLCJwYWdlX3VybCI6Imh0dHA6Ly9tYWlsLnBydWNhcmVhbHR5LmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJtYWlsLnBydWNhcmVhbHR5LmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bVZtjTecs.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Mon, 15 Apr 2024 21:33:09 GMTContent-Type: text/html; charsetutf-8Content-Length: 1062X-Request-Id: 0966372b-a279-48f3-b952-a986df794c7fCache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_WdKwAOw3qn9raSZPsYtJEywAO8GQTTbWvxVTh3poAQIWACeZhNGiDSYdSOO1y34garpLsLxycwCh4WfANBLXDA langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMDk2NjM3MmItYTI3OS00OGYzLWI5NTItYTk4NmRmNzk0YzdmIiwicGFnZV90aW1lIjoxNzEzMjE2NzkwLCJwYWdlX3VybCI6Imh0dHBzOi8vbWFpbC5wcnVjYXJlYWx0eS5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0IjoibWFpbC5wcnVjYXJlYWx0eS5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bqNCEsBYu.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mail.prucarealty.com

Is this malicious?

Files that talk to mail.prucarealty.com

Whois

DNS Resolutions

Port 80

Port 443