Domain > main.young.wo.tc

More information on this domain is in AlienVault OTX

Files that talk to main.young.wo.tc

MD5	A/V
b8793e7956d2d36713da1851daa045a0	[HW32.Paked.C814] [Heuristic_Anomaly.A] [Trojan.Win32.ServStart.bjd] [Virus.Win32.Heur.a] [BehavesLike.Win32.Backdoor.dc] [Worm:Win32/Rebhip.A] [Trojan/Win32.MalPack] [Trojan.Llac] [Trojan.Win32.ServStart.aDyS] [Trojan.Win32.Spatet] [W32/Spatet.T!tr] [Trj/CI.A]

DNS Resolutions

Date	IP Address
2014-10-06	211.42.173.29 (ClassC)
2015-05-18	211.233.75.83 (ClassC)
2019-08-15	151.80.13.35 (ClassC)
2024-08-18	211.110.11.146 (ClassC)
2024-09-04	211.110.11.144 (ClassC)
2025-11-27	15.235.215.27 (ClassC)
2026-01-19	15.235.216.200 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Thu, 15 Aug 2019 23:24:56 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fips PHP/5.4.16X-Powered-By: PHP/5.4.16Content-Length: 5004Content-Type: text/html; charsetUTF-8

HTML>HEAD>	TITLE>Free subdomain powered by DNSEver.com/TITLE>	META http-equivcontent-type contenttext/html; charsetutf-8>    link relStyleSheet HREFcss/css.css typetext/css titlestyle>    link relStyleSheet HREFcss/partner.css typetext/css titlestyle>/HEAD>BODY MARGINWIDTH0 MARGINHEIGHT0 TOPMARGIN0 LEFTMARGIN0 BACKGROUNDimg/bg.gif>TABLE border0 width100% cellpadding6 cellspacing0>TR>	TD aligncenter>		TABLE border0 width700 cellpadding6 cellspacing0>		TR>		TD>			TABLE border0 width100% cellpadding1 cellspacing0>			TR>			TD bgcolor#FFFFFF>				TABLE border0 width100% cellpadding0 cellspacing0 valigntop>				!-- HEAD ROW {{{ -->				TR>TD>					TABLE border0 width100% cellpadding0 cellspacing0 valigntop>					TR>					!-- LOGO BOX {{{ -->					TD aligncenter width195 height120 bgcolor#376FB6>A hrefhttp://www.dnsever.com>IMG srcimg/logo.gif border0 targetdnsever>/A>/TD>					!-- }}} -->					!-- BANNER BOX {{{ -->						TD aligncenter valignmiddle bgcolor#E9F6FF>							Web-based DNS Service - a hrefhttp://www.dnsever.com>font color#f11111>DNS/font>font color#1111f1>Ever/font>/a>						/TD>					!-- }}} -->					/TR>					/TABLE>				/TD>/TR>				!-- HEAD ROW }}} -->				!-- BODY ROW {{{ -->				TR>					TD valigntop aligncenter>						FORM nameform methodpost actionstart.html>						INPUT typehidden nameexternal valueegloos/>						INPUT typehidden iddomain namedomain value/>						INPUT typehidden idotp nameotp value/>						INPUT typehidden idip nameip value/>						INPUT typehidden idselected_menu nameselected_menu value/>						INPUT typehidden idcommand namecommand value/>						INPUT typehidden nameskey value>						INPUT typehidden nameurl value>						TABLE border0 width100% cellpadding20 cellspacing0 aligncenter>						TR>						TD>						TABLE border0 width80% cellpadding2 cellspacing0 aligncenter>							TR>								TD aligncenter>									TABLE CELLSPACING0 CELLPADDING0 BORDER0>	TR>		TD>IMG SRCimg/ttop.gif>/TD>	/TR>	TR>		TD backgroundimg/tbg-repeat.gif stylebackground-repeat: repeat-y; classtt rowspan2>			Welcome to B>span classsubDomain>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > main.young.wo.tc

Is this malicious?

Files that talk to main.young.wo.tc

DNS Resolutions

Port 80