Domain > prize3.com

More information on this domain is in AlienVault OTX

Files that talk to prize3.com

MD5	A/V
0460f3b108831ab7eecba5f2ff1423b0	[W32.HfsIframe.Ff9d] [IFrame6.A] [Heuristic.LooksLike.HTML.Infected.H] [virus.html.iframe]

Whois

Property	Value
Email	expired@dynadot.com
NameServer	NS2.DYNADOT.COM
Created	2014-03-11 00:00:00
Changed	2015-03-12 00:00:00
Expires	2016-03-11 00:00:00
Registrar	DYNADOT, LLC

DNS Resolutions

Date	IP Address
2014-06-08	0.0.0.0 (ClassC)
2014-07-05	23.62.98.122 (ClassC)
2015-03-16	208.91.197.113 (ClassC)
2015-06-02	141.8.225.244 (ClassC)
2015-06-20	204.11.56.48 (ClassC)
2015-11-22	141.8.226.14 (ClassC)
2017-06-21	45.33.9.234 (ClassC)
2018-09-08	103.224.212.222 (ClassC)
2018-10-16	192.184.12.62 (ClassC)
2018-10-16	172.98.192.36 (ClassC)
2018-11-19	172.98.192.35 (ClassC)
2022-05-01	192.0.78.25 (ClassC)
2024-10-17	154.201.142.7 (ClassC)
2024-11-17	172.65.190.172 (ClassC)
2025-01-22	208.98.43.76 (ClassC)
2025-01-28	208.98.43.139 (ClassC)
2025-03-27	208.98.40.207 (ClassC)
2025-04-05	208.98.40.17 (ClassC)
2025-04-14	208.98.43.11 (ClassC)
2025-04-17	208.98.40.12 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sun, 01 May 2022 03:56:11 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveStrict-Transport-Security: max-age31536000Vary: Acce

!DOCTYPE html>html langen>	head>		title>Site Title/title>		meta charsetUTF-8 />		meta namedescription content />		meta nameviewport contentwidthdevice-width />		title>Site Title/title>meta namerobots contentnoindex, nofollow />!-- Async WordPress.com Remote Login -->script idwpcom_remote_login_js>var wpcom_remote_login_extra_auth  ;function wpcom_remote_login_remove_dom_node_id( element_id ) {	var dom_node  document.getElementById( element_id );	if ( dom_node ) { dom_node.parentNode.removeChild( dom_node ); }}function wpcom_remote_login_remove_dom_node_classes( class_name ) {	var dom_nodes  document.querySelectorAll( . + class_name );	for ( var i  0; i  dom_nodes.length; i++ ) {		dom_nodes i .parentNode.removeChild( dom_nodes i  );	}}function wpcom_remote_login_final_cleanup() {	wpcom_remote_login_remove_dom_node_classes( wpcom_remote_login_msg );	wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_key );	wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_validate );	wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_js );	wpcom_remote_login_remove_dom_node_id( wpcom_request_access_iframe );	wpcom_remote_login_remove_dom_node_id( wpcom_request_access_styles );}// Watch for messages back from the remote loginwindow.addEventListener( message, function( e ) {	if ( e.origin  https://r-login.wordpress.com ) {		var data  {};		try {			data  JSON.parse( e.data );		} catch( e ) {			wpcom_remote_login_final_cleanup();			return;		}		if ( data.msg  LOGIN ) {			// Clean up the login check iframe			wpcom_remote_login_remove_dom_node_id( wpcom_remote_login_key );			var id_regex  new RegExp( /^0-9+$/ );			var token_regex  new RegExp( /^.*|.*|.*$/ );			if (				token_regex.test( data.token )				&& id_regex.test( data.wpcomid )			) {				// We have everything we need to ask for a login				var script  document.createElement( script );				script.setAttribute( id, wpcom_remote_login_validate );				script.src  /remote-login.php?wpcom_remote_loginvalidate					+ &wpcomid + data.wpcomid					+ &token + encodeURIComponent

Subdomains

Date	Domain	IP
web.prize3.com	2014-07-04	63.80.4.72
m.prize3.com	2014-05-01	69.22.148.153
w.prize3.com	2014-06-07	69.22.148.144

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > prize3.com

Is this malicious?

Files that talk to prize3.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains