Domain > rockford.com

More information on this domain is in AlienVault OTX

Files that talk to rockford.com

MD5	A/V
4ca7d150cc798011d5cb7d4c5be89f41	[HW32.CDB.7b74] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcisy] [Backdoor.Win32.Hlux.diqm] [Backdoor.Hlux!ISaeAq95IMk] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO]

Whois

Property	Value
Email	admin@telepathy.com
NameServer	JASON.NS.CLOUDFLARE.COM
Created	1994-08-31 00:00:00
Changed	2016-02-17 00:00:00
Expires	2016-08-30 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2014-05-30	108.163.140.24 (ClassC)
2019-08-19	104.18.36.195 (ClassC)
2024-06-08	199.59.243.225 (ClassC)
2025-03-10	172.67.177.59 (ClassC)
2025-04-03	104.21.67.142 (ClassC)
2025-06-05	99.83.190.102 (ClassC)
2026-03-02	198.202.211.1 (ClassC)

HTTP/1.1 200 OKdate: Sun, 18 Feb 2024 01:55:02 GMTcontent-type: text/html; charsetutf-8content-length: 1038x-request-id: db2ca6bb-2645-4b00-90e7-09d8538342f2cache-control: no-store, max-age0accept-ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_K8K8gS4HStOE8p5fGwpcaK7++rk9nh0/bgfUAg7j+V9Tfkt1p3h6uoZURuY0rALqjEkIfY+8eZdCSPhRKmhnHQ langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiZGIyY2E2YmItMjY0NS00YjAwLTkwZTctMDlkODUzODM0MmYyIiwicGFnZV90aW1lIjoxNzA4MjIxMzAyLCJwYWdlX3VybCI6Imh0dHA6Ly9yb2NrZm9yZC5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoicm9ja2ZvcmQuY29tIiwiaXAiOiI1Mi40MC4yMzQuMTA1In0K;/script>script src/brGaWOmCU.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Sun, 18 Feb 2024 01:55:02 GMTContent-Type: text/html; charsetutf-8Content-Length: 1042X-Request-Id: 1f0e5e1b-5949-444c-80e8-64c8d20458fcCache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_K8K8gS4HStOE8p5fGwpcaK7++rk9nh0/bgfUAg7j+V9Tfkt1p3h6uoZURuY0rALqjEkIfY+8eZdCSPhRKmhnHQ langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiMWYwZTVlMWItNTk0OS00NDRjLTgwZTgtNjRjOGQyMDQ1OGZjIiwicGFnZV90aW1lIjoxNzA4MjIxMzAzLCJwYWdlX3VybCI6Imh0dHBzOi8vcm9ja2ZvcmQuY29tLyIsInBhZ2VfbWV0aG9kIjoiR0VUIiwicGFnZV9yZXF1ZXN0Ijp7fSwicGFnZV9oZWFkZXJzIjp7fSwiaG9zdCI6InJvY2tmb3JkLmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bzmypPToK.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rockford.com

Is this malicious?

Files that talk to rockford.com

Whois

DNS Resolutions

Port 80

Port 443