Domain > sharesinvestment.com

More information on this domain is in AlienVault OTX

Files that talk to sharesinvestment.com

MD5	A/V
865130fb2c0bd46bbd3ce1ec94c82284	[HW32.CDB.48a5] [Backdoor.Win32.Hlux.crc] [Crypt_s.GHF]

Whois

Property	Value
Name	PHAN TS
Organization	PIONEERS & LEADERS EMEDIA PTE LTD
Email	PNLHLDG@PNL-GROUP.COM
Address	4 UBI VIEW PIONEERS & LEADERS CENTRE
Zip Code	408557
City	SINGAPORE
Country	SG
Phone	+65.67458733
Fax	+65.67458321
NameServer	DNS02.GPN.REGISTER.COM
Created	2000-02-23 07:55:11
Changed	2017-01-25 03:30:06
Expires	2018-02-23 00:00:00
Registrar	REGISTER.COM, INC.

DNS Resolutions

Date	IP Address
2025-06-13	199.59.243.228 (ClassC)
2025-12-15	76.223.54.146 (ClassC)

HTTP/1.1 200 OKDate: Fri, 03 Jan 2025 03:32:33 GMTContent-Type: text/html; charsetutf-8Content-Length: 1062X-Request-Id: 9591725f-f6ec-4fc5-9ad5-650f0a490419Cache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_TNLUGJjnHl1173vBEteNJkiCc9kcLIcdgOB4FK8EHXFgIOVFm7uFT63CFYqcUClgaxFM8vGXRY5fztNGKVXjng langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiOTU5MTcyNWYtZjZlYy00ZmM1LTlhZDUtNjUwZjBhNDkwNDE5IiwicGFnZV90aW1lIjoxNzM1ODc1MTUzLCJwYWdlX3VybCI6Imh0dHA6Ly9zaGFyZXNpbnZlc3RtZW50LmNvbS8iLCJwYWdlX21ldGhvZCI6IkdFVCIsInBhZ2VfcmVxdWVzdCI6e30sInBhZ2VfaGVhZGVycyI6e30sImhvc3QiOiJzaGFyZXNpbnZlc3RtZW50LmNvbSIsImlwIjoiNTIuNDAuMjM0LjEwNSJ9Cg;/script>script src/bLFRZGhXg.js>/script>/body>/html>

Port 443

HTTP/1.1 200 OKDate: Fri, 03 Jan 2025 03:32:33 GMTContent-Type: text/html; charsetutf-8Content-Length: 1062X-Request-Id: bfa7ef99-075d-4ba6-a9a9-543bc2ce4e60Cache-Control: no-store, max-age0Accept-Ch:

!doctype html>html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ_TNLUGJjnHl1173vBEteNJkiCc9kcLIcdgOB4FK8EHXFgIOVFm7uFT63CFYqcUClgaxFM8vGXRY5fztNGKVXjng langen stylebackground: #2B2B2B;>head>    meta charsetutf-8>    meta nameviewport contentwidthdevice-width, initial-scale1>    link relicon hrefdata:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC>    link relpreconnect hrefhttps://www.google.com crossorigin>/head>body>div idtarget styleopacity: 0>/div>script>window.park  eyJ1dWlkIjoiYmZhN2VmOTktMDc1ZC00YmE2LWE5YTktNTQzYmMyY2U0ZTYwIiwicGFnZV90aW1lIjoxNzM1ODc1MTUzLCJwYWdlX3VybCI6Imh0dHBzOi8vc2hhcmVzaW52ZXN0bWVudC5jb20vIiwicGFnZV9tZXRob2QiOiJHRVQiLCJwYWdlX3JlcXVlc3QiOnt9LCJwYWdlX2hlYWRlcnMiOnt9LCJob3N0Ijoic2hhcmVzaW52ZXN0bWVudC5jb20iLCJpcCI6IjUyLjQwLjIzNC4xMDUifQo;/script>script src/bwroOrSEK.js>/script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > sharesinvestment.com

Is this malicious?

Files that talk to sharesinvestment.com

Whois

DNS Resolutions

Port 80

Port 443