Domain > www.twonext.com

More information on this domain is in AlienVault OTX

Files that talk to www.twonext.com

MD5	A/V
4d2c7fc6cad64adea1aaed0dfadd39a7	[TROJ_DRPPR.MNX]
19930a73ec925fd5174ce3bb0a67fd6f	[Artemis!19930A73EC92] [PUP.Optional.Desk365.A] [Trojan/Win32.Badur] [Win32.Troj.Badur.t.(kcloud)] [Trojan.Badur]
2a973ae6b8e0046ef9585b78a90e837e	[SoftwareBundler.OneClickDownl.r5] [Artemis!2A973AE6B8E0] [PUP.Optional.OneClickDownloader.A] [Riskware.Text.Adware.cuhowq] [Trojan.ADH.2] [CoolMirage] [Application.Win32.1ClickDownload.~A] [Adware.Downware.2401] [SoftwareBundler:Win32/OneClickDownloader] [PUP.OneClickDownloader/Variant] [NSIS.Adware.OneClickDownloader.B] [PUP/MultiToolbar.A] [Win32/Adware.1ClickDownload.AO]
cd8534a4a9c687f4f8d716f6bfd42d2a	[PUP-FED!CD8534A4A9C6] [PUP.Optional.Installrex] [Win32/InstalleRex.L] [not-a-virus:Downloader.Win32.AdLoad.fwz] [InstallRex] [Adware.Downware.1541] [Downware.TSU] [Trojan.Win32.Fednu.upv]
4016e8c27e802b4e943e095fa4cab573	[Posible_Worm32] [Trojan.Click2.57963]
21968065cd48171cf3e9fe33c55fa57e	[W32.Clod6f7.Trojan.fe33] [Backdoor/W32.ZAccess.421456] [PUP-FDW!21968065CD48] [PUP.Optional.Elex.A] [WS.Reputation.1] [Backdoor.Win32.ZAccess.ehnu] [UnclassifiedMalware] [Backdoor.ZAccess] [Trojan.Win32.ELEX.P] [Backdoor.Win32.ZAccess] [W32/ZAccess.EHNU!tr.bdr]
0f6b5dd52e24d26a0b9bb43567f71d7c	[Adware.Downware.1166] [InstallRex] [Win32/InstalleRex.J] [AdInstaller.P]
c08812441096b957f548619fe6113848	[Adware.Downware.1265] [Win32/Adware.Lollipop.K]
2f9035669a8e9f17d9b784461c96ae91	[Trojan.Staser.fv] [Artemis!2F9035669A8E] [exqWebSearch] [Trojan.Win32.Staser.fv] [Heur.Suspicious] [Trojan.Click2.64117] [TR/Graftor.113394] [Trojan/StartPage.ubx] [Trojan/Win32.StartPage] [Win32.Troj.Undef.(kcloud)] [Trojan/Win32.Swisyn] [W32/Trojan.KLUL-3016] [Trj/CI.A] [Trojan.Win32.Staser] [W32/Staser.FV!tr]
cdbd5a1ca0c41089e767771b18814470	[PUP.Optional.Installrex] [not-a-virus:Downloader.Win32.AdLoad.nv] [Adware.Downware.1442] [InstallRex] [Win32.Troj.Undef.(kcloud)] [Win32/InstalleRex.K] [Trojan.InstallRex!562A]
3dfdf27d2ef09928c5f38ef2c99a5097	[Artemis!3DFDF27D2EF0] [PUP.BundleInstaller.DW] [Riskware.Text.Adware.cuhowq] [WS.Reputation.1] [Application.Win32.CoolMirage.AS] [Adware.Downware.1263] [BehavesLike.Win32.AdwareSweet.fc] [CoolMirage] [Adware/1Click.lku] [PUP.OneClickDownloader/Variant] [Win32/Adware.1ClickDownload.AJ] [Riskware/1ClickDownload] [PUP/MultiToolbar.A] [Win32/Virus.Adware.47b]
cf8d5d009a2c1cdb80adceb723809cf5	[Trojan.ADH.2] [SoftwareBundler:Win32/Lolliport] [Win32/Adware.Lollipop.D] [Toolbar.Delta]
4948db38fd668d45cad7abaf117c991c	[WS.Reputation.1] [Heur.Suspicious]
dd94fd631c6ae9a5911633a8a927ecf6
7b38a382e58f264f4f8a00fd9407bf49	[Trojan/W32.StartPage.200272.B] [PUP.Optional.Elex] [exqWebSearch] [Trojan.StartPage!U24li6QiG7A] [Trojan.Click2.58759] [Trojan/StartPage.ubs] [Trojan/Win32.StartPage] [Trojan.SuspectCRC] [Startpage.UUG] [Adware.Win32.ElexInstall.71]
46a2c6ca2a0530058f837da08649b123	[Artemis!46A2C6CA2A05] [Posible_Worm32] [Adware.Elex.2] [Trojan.Win32.StartPage]
df2da0f364d3d774656c9612f628fb62

Whois

Property	Value
NameServer	PDNS04.DOMAINCONTROL.COM
Created	2012-06-01 00:00:00
Changed	2014-12-19 00:00:00
Expires	2018-06-01 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2018-06-06	184.168.221.74 (ClassC)
2018-06-07	184.168.221.69 (ClassC)
2018-06-07	184.168.221.78 (ClassC)
2018-06-07	184.168.221.95 (ClassC)
2018-06-08	184.168.221.65 (ClassC)
2018-06-10	50.63.202.84 (ClassC)
2018-06-11	50.63.202.71 (ClassC)
2019-07-10	174.36.200.167 (ClassC)
2019-08-19	209.99.64.18 (ClassC)
2020-08-07	204.11.56.48 (ClassC)
2020-09-26	45.33.2.79 (ClassC)
2020-10-07	45.56.79.23 (ClassC)
2020-12-29	45.33.23.183 (ClassC)
2023-12-02	96.126.123.244 (ClassC)
2023-12-14	45.79.19.196 (ClassC)
2023-12-27	198.58.118.167 (ClassC)
2024-01-20	45.33.20.235 (ClassC)
2024-11-12	103.224.182.240 (ClassC)
2024-12-22	66.175.216.36 (ClassC)
2025-06-02	103.224.182.218 (ClassC)

HTTP/1.1 200 OKDate: Thu, 10 Oct 2019 18:38:53 GMTServer: ApacheSet-Cookie: vsid929vr3182783334713645; expiresTue, 08-Oct-2024 18:38:53 GMT; Max-Age157680000; path/; domainwww.twonext.com; HttpOnlyX-A

!DOCTYPE html PUBLIC -//W3C//DTD HTML 4.01//EN http://www.w3.org/TR/html4/strict.dtd>html>head>script typetext/javascript>var abp;/script>script typetext/javascript srchttp://www.twonext.com/px.js?ch1>/script>script typetext/javascript srchttp://www.twonext.com/px.js?ch2>/script>script typetext/javascript>function handleABPDetect(){try{var imglog  document.createElement(img);imglog.style.height0px;imglog.style.width0px;imglog.srchttp://www.twonext.com/sk-logabpstatus.php?aZHBsQzBvTTd3ckhGeXJRR0ZsbENsbVQ3ektSc05HeUN5S1dGYjgyeG0rV2p1SUtkbEFFTGU3eWh0aHNqSUxCeEFoQTAvM1hmU0F1YndKQXVDQjN6TUVwYXBpa0tobVNHSEppeTdxUkVya1E9&b+abp;document.body.appendChild(imglog);}catch(err){}}/script>meta nametids contenta13017 b15045 ctwonext.com dtaxo_cat />title>Twonext.com/title>meta http-equivContent-Type contenttext/html; charsetUTF-8>meta nameviewport contentwidthdevice-width, initial-scale1, maximum-scale1>style typetext/css>@font-face {font-family: ubuntu-r;src: url(http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.eot);src: url(http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.eot?#iefix) format(embedded-opentype),url(http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.woff) format(woff),url(http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.woff2) format(woff2),url(http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.ttf) format(truetype),url(http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.otf) format(opentype),url(http://i3.cdn-image.com/__media__/fonts/ubuntu-r/ubuntu-r.svg#ubuntu-r) format(svg);font-weight: normal;font-style: normal;}@font-face {font-family: ubuntu-b;src: url(http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.eot);src: url(http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.eot?#iefix) format(embedded-opentype),url(http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.woff) format(woff),url(http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.woff2) format(woff2),url(http://i3.cdn-image.com/__media__/fonts/ubuntu-b/ubuntu-b.ttf) format(truetyp

Subdomains

Date	Domain	IP
www.twonext.com	2019-07-10	174.36.200.167

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.twonext.com

Is this malicious?

Files that talk to www.twonext.com

Whois

DNS Resolutions

Port 80

Subdomains