Domain > www.workmodz.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to www.workmodz.com

MD5	A/V
1472104482b387ef4eef7473260fc5cf	[HW32.Packed.C64B] [Heur.AdvML.B] [trojan.win32.dorv.b!rfn] [BehavesLike.Win32.Dropper.tc] [Artemis!1472104482B3] [Win32/Blacked]
4620d6f1a486a2ad4a5f015dba27b4d1

Whois

Property	Value
Email	TKXGAMING2016@OUTLOOK.COM
NameServer	NS2.WORKMODZ.COM
Created	2016-08-16 00:00:00
Changed	2017-01-01 00:00:00
Expires	2017-08-16 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2023-12-26	3.141.134.114 (ClassC)
2024-05-09	3.94.41.167 (ClassC)
2025-04-11	3.130.204.160 (ClassC)
2025-04-20	3.19.116.195 (ClassC)
2025-05-27	44.213.46.149 (ClassC)
2025-08-08	54.243.117.197 (ClassC)

Port 80

HTTP/1.1 200 OKDate: Tue, 26 Dec 2023 11:01:46 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveServer: nginx/1.20.1X-Powered-By: PHP/7.3.33

!doctype html>html langen>  head>        !-- Global site tag (gtag.js) - Google Analytics -->    script async srchttps://www.googletagmanager.com/gtag/js?idUA-142700782-2>/script>    script>      window.dataLayer  window.dataLayer || ;      function gtag(){dataLayer.push(arguments);}      gtag(js, new Date());          gtag(config, UA-142700782-4);    /script>        !-- Required meta tags -->    meta charsetutf-8>script typetext/javascript>(window.NREUM||(NREUM{})).init{ajax:{deny_list:bam.nr-data.net}};(window.NREUM||(NREUM{})).loader_config{licenseKey:NRJS-8157b8e0cd94813fb57,applicationID:413936412};;/*! For license information please see nr-loader-rum-1.249.0.min.js.LICENSE.txt */(()>{var e,t,r{234:(e,t,r)>{use strict;r.d(t,{P_:()>v,Mt:()>b,C5:()>s,DL:()>A,OP:()>S,lF:()>T,Yu:()>x,Dg:()>m,CX:()>c,GE:()>_,sU:()>R});var nr(8632),ir(9567);const a{beacon:n.ce.beacon,errorBeacon:n.ce.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},o{};function s(e){if(!e)throw new Error(All info objects require an agent identifier!);if(!oe)throw new Error(Info for .concat(e, was never set));return oe}function c(e,t){if(!e)throw new Error(All info objects require an agent identifier!);oe(0,i.D)(t,a);const r(0,n.ek)(e);r&&(r.infooe)}const ue>{if(!e||string!typeof e)return!1;try{document.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var dr(7056),lr(50);const fdata-nr-mask,g()>{const e{mask_selector:*,block_selector:data-nr-block,mask_input_options:{color:!1,date:!1,datetime-local:!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!0}};return{feature_flags:,proxy:{assets:void 0,beacon:void 0},privacy:{cookies_enabled:!0},ajax:{deny_list:void 0,block_internal:!0,enabled:!0,harvestTimeSeconds:10,autoStart:!0},distributed_tracing:{enabled:v

Subdomains

Date	Domain	IP
NS2.WORKMODZ.COM	2024-07-24	3.19.116.195
www.workmodz.com	2023-12-26	3.141.134.114

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]