Domain > www.usconstitution.net

More information on this domain is in AlienVault OTX

Files that talk to www.usconstitution.net

MD5	A/V
bdc93b7fde32679e44cc8177a1fc0444	[HW32.Packed.2468] [BehavesLike.Win32.PWSZbot.fc]
6a15b6702d905988c25aa726816b747e	[HW32.Packed.91F0] [Trojan.Zmutzy.2] [Trojan.Zmutzy.2] [Trojan.Zmutzy.2] [Trojan.Zmutzy.2] [Mal/DrodZp-A] [Heur.Dual.Extensions] [BehavesLike.PWSZbot.dc] [Trojan.Zmutzy.2] [Trojan.Zmutzy.2] [FakeAlert]
58cbea65cbe07f11b1256b84b7bdf081	[HW32.Packed.63BA] [Trojan.Win32.Waldek.cki]
20cce43bc35d0c696315bcb820e80eb4	[HW32.Packed.26EE] [Vawtrak-FBD!20CCE43BC35D] [Trojan.MalPack] [W32/Trojan.MBNE-3354] [Suspicious.Cloud.9] [TROJ_DYER.BME] [Trojan.Win32.Inject.vutw] [TROJ_DYER.BME] [BehavesLike.Win32.Backdoor.fc] [TR/AD.UrsnifDropper.Y.128] [Trojan.A] [Win32/PSW.Papras.EP] [Win32.Outbreak]
2bad0b1c37819c7a206033ba11d96cc6	[HW32.Packed.8DAF] [BehavesLike.Win32.Backdoor.fc] [Trojan.Inject]
27dcb1fdb1b8d91462b8c342de426389	[HW32.Packed.3FDD] [BehavesLike.Win32.Ramnit.fc]
e57c08cb4fbdd0a769415f0a2be881b9	[HW32.Packed.168C] [BehavesLike.Win32.Ramnit.fc]
9a89a7040fe8bb43f4aa37bf1a06e097	[HW32.Packed.51E4] [Artemis!9A89A7040FE8] [Trojan.Ursnif] [Troj.W32.Scar!c] [Win32/PSW.Papras.EK] [Trojan.Win32.Scar.ndbv] [BehavesLike.Win32.Ramnit.fc] [TR/Spy.Papras.315392.2] [Trojan/Win32.Scar] [TrojanSpy:Win32/Ursnif.HP] [Win32.Trojan.Scar.Hvjd] [Trojan.Win32.PSW] [W32/Papras.EK!tr.pws]
9fc48d21a3c5cab29e4c99c99f3d1567	[W32/Trojan3.TRD] [Trojan.Win32.Inject.vvum] [Trojan.PWS.Papras.1917] [TROJ_DYER.BME] [BehavesLike.Swizzor.dc] [Troj/Gozi-AV] [W32/Trojan.ATEB-5482] [PossibleThreat.P0] [TrojanSpy:Win32/Ursnif.HP] [Adware.Win32.iBryte.EOCH] [Trojan.Crypt] [Crypt5.AIYR]
58831f5f705f748cbc904814045f093d	[HW32.Packed.D13A] [BehavesLike.Win32.Backdoor.dc]
e0a13c5d239ee4b2812284841049977d	[HW32.Packed.F8C8] [TrojanSpy.Ursnif.rwb] [Trojan.Ursnif] [Trojan.Scar.Win32.97352] [W32/Trojan3.TNU] [Win32/PSW.Papras.EP] [TSPY_URSNIF.XXXR] [Trojan.Win32.DownLoader19.eacatt] [Trojan.Win32.Papras.dp] [Troj/DwnLdr-NBX] [UnclassifiedMalware] [Trojan.DownLoader19.16636] [TSPY_URSNIF.XXXR] [BehavesLike.Win32.Expiro.fc] [W32/Trojan.RYZC-2465] [Trojan.Scar.dro] [TR/AD.UrsnifDropper.Y.111] [TrojanSpy:Win32/Ursnif.HP] [Trojan.A] [Trojan/Win32.Teslacrypt] [Trojan.Scar] [Trojan.Scar] [Trojan.Scar!nJdGNlyv5lY] [Trojan-PSW.Papras] [Trj/WLT.B]

Whois

Property	Value
Email	017f5f0e2781@eliminatejunkemail.com
NameServer	NS-1665.AWSDNS-16.CO.UK
Created	1998-04-16 00:00:00
Changed	2013-03-01 00:00:00
Expires	2017-04-15 00:00:00
Registrar	PAIR NETWORKS INC.D/

DNS Resolutions

Date	IP Address
2014-08-12	54.241.240.225 (ClassC)
2018-07-18	52.47.162.227 (ClassC)
2018-12-09	18.196.246.92 (ClassC)
2024-02-18	44.231.217.234 (ClassC)
2024-03-12	34.214.65.117 (ClassC)
2024-04-05	54.188.32.0 (ClassC)
2024-08-30	50.31.119.106 (ClassC)
2026-01-12	104.21.63.243 (ClassC)
2026-01-15	172.67.173.94 (ClassC)

HTTP/1.1 200 OKCache-Control: private, max-age195192, s-maxage0, proxy-revalidateContent-Hash: 6bdac8bcb0dcf883d82c84984a8f0028fa6fe09fContent-Type: text/html; charsetutf-8Date: Wed, 01 Nov 2023 16:29

!DOCTYPE html PUBLIC -//w3c//dtd xhtml 1.0 transitional//en http://www.w3.org/tr/xhtml1/dtd/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>script data-ezscrexfalse data-cfasyncfalse data-pagespeed-no-defer>var __ez__ez||{};__ez.stmsDate.now();__ez.evt{};__ez.script{};__ez.ck__ez.ck||{};__ez.template{};__ez.template.isOrigfalse;__ez.queuefunction(){var e0,i0,t,n!1,o,r,s!0,afunction(e,i,n,o,r,s,a){var larguments.length>7&&void 0!arguments7?arguments7:window,dthis;this.namee,this.funcNamei,this.parametersnulln?null:p(n)?n:n,this.isBlocko,this.blockedByr,this.deleteWhenCompletes,this.isError!1,this.isComplete!1,this.isInitialized!1,this.proceedIfErrora,this.fWindowl,this.isTimeDelay!1,this.processfunction(){f(... func  +e),d.isInitialized!0,d.isComplete!0,f(... func.apply: +e);var id.funcName.split(.),nnull,othis.fWindow||window;i.length>3||(n3i.length?oi0i1i2:2i.length?oi0i1:od.funcName),null!n&&n.apply(null,this.parameters),!0d.deleteWhenComplete&&delete te,!0d.isBlock&&(f(----- FD: +d.name),u())}},lfunction(e,i,t,n,o,r,s){var aarguments.length>7&&void 0!arguments7?arguments7:window,lthis;this.namee,this.pathi,this.asynco,this.deferr,this.isBlockt,this.blockedByn,this.isInitialized!1,this.isError!1,this.isComplete!1,this.proceedIfErrors,this.fWindowa,this.isTimeDelay!1,this.isPathfunction(e){return/e0&&/!e1},this.getSrcfunction(e){return void 0!window.__ezScriptHost&&this.isPath(e)&&banger.js!this.name?window.__ezScriptHost+e:e},this.processfunction(){l.isInitialized!0,f(... file  +e);var ithis.fWindow?this.fWindow.document:document,ti.createElement(script);t.srcthis.getSrc(this.path),!0o?t.async!0:!0r&&(t.defer!0),t.onerrorfunction(){var e{url:window.location.href,name:l.name,path:l.path,user_agent:window.navigator.userAgent};undefined!typeof _ezaq&&(e.pageview_id_ezaq.page_view_id);var iencodeURIComponent(JSON.stringify(e)),tnew XMLHttpRequest;t.open(GET,//g.ezoic.net/ezqlog?d+i,!0),t.send(),f(----- ERRD: +l.name),l.isError!0,!0l.isBlock&&u()},t.onreadystatechanget.onloadfunction(){var et.rea

Subdomains

Date	Domain	IP
cdn-0.usconstitution.net	2024-02-15	18.238.189.214
cdn-1.usconstitution.net	2019-08-06	13.33.124.221
cdn-3.usconstitution.net	2025-06-28	104.21.63.243
cdn-4.usconstitution.net	2024-06-06	54.230.125.14
cdn-6.usconstitution.net	2024-04-02	54.230.125.14
cdn-7.usconstitution.net	2024-06-13	18.161.3.177
cdn.usconstitution.net	2015-02-13	54.230.91.199
www.usconstitution.net	2014-08-12	54.241.240.225

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.usconstitution.net

Is this malicious?

Files that talk to www.usconstitution.net

Whois

DNS Resolutions

Port 443

Subdomains