Domain > i.aegiscrypter.com

More information on this domain is in AlienVault OTX

Files that talk to i.aegiscrypter.com

MD5	A/V
9fa7bd524254b6919543d0cc541794f6	[HW32.Packed.B981] [Trojan.Inject.Win32.183056] [Trojan.Strictor.D13813] [Trojan.Win32.AD.dydnat] [UnclassifiedMalware] [BehavesLike.Win32.Dropper.vc] [W32/Trojan.LHXY-6051] [TR/AD.CeeInject.Y.205] [Trojan/Win32.Diple] [VirTool:Win32/CeeInject] [Artemis!9FA7BD524254] [Hoax.Blocker] [Luhe.Fiha.A] [Win32/Trojan.97a]
cd65a2e47b9c440f99e433ef0ea7935c	[HW32.Packed.798F] [CryptTool.Aegis] [Trojan.Win32.AD.dywuyz] [Suspicious.Cloud.9] [BehavesLike.Win32.Dropper.vc] [W32/Trojan.GBCS-4974] [TR/AD.CeeInject.Y.834] [Trojan.Strictor.D13813] [Artemis!CD65A2E47B9C] [Hoax.Blocker] [Backdoor.Win32.Bifrose] [Luhe.Fiha.A] [Win32/Trojan.97a]
009e7809f54dd98d6af0329dd8e71045	[HW32.Packed.D348] [CryptTool.Aegis] [Trojan.Strictor.D13813] [Hoax.Blocker] [Backdoor.Win32.Bifrose] [Luhe.Fiha.A]
441a40f4714c80a0eeafdafef5fc32de	[HW32.Packed.CB84] [CryptTool.Aegis] [Trojan.Win32.Drop.ebwvny] [Trojan.Win32.Z.Strictor.2388480[h]] [UnclassifiedMalware] [BehavesLike.Win32.Dropper.vc] [W32/Trojan.XSGH-8657] [Trojan:Win32/Dynamer!ac] [Artemis!441A40F4714C] [Hoax.Blocker] [Trojan-GameThief.Win32.Magania] [Luhe.Fiha.A]
27a15e27342cf1cac975b13d65bd400f	[HW32.Packed.C60C] [CryptTool.Aegis] [Trojan.Win32.Drop.ecqupq] [Trojan.Win32.Z.Strictor.2395136[h]] [UnclassifiedMalware] [BehavesLike.Win32.Sality.vc] [W32/Trojan.OMZR-5774] [Trojan.Strictor.D13813] [Trojan:Win32/Dynamer!ac] [Artemis!27A15E27342C] [Hoax.Blocker] [Trojan.Win32.Scar] [Luhe.Fiha.A] [Trj/CI.A]
4c1266308df050cb20f7886327cc045f	[W32.NeshtaB.PE] [Win32.Neshta.A] [Virus/W32.Neshta] [Virus.Win32.Neshta!O] [W32.Neshta.C8] [Win32.Neshta.A] [Virus.Neshta.Win32.1] [Win32.Neshta.A] [Win32.Virus.Neshta.a] [W32/HLLP.41472] [W32.Neshuta] [Win32/Neshta.A] [PE_NESHTA.A] [Win.Trojan.Neshuta-1] [Virus.Win32.Neshta.a] [Virus.Win32.Neshta.cdby] [Win32.Netsha.a] [Win32.Neshta.A] [W32/Bloat-A] [Win32.Neshta.A] [Win32.Neshta.A] [Win32.HLLP.Neshta] [PE_NESHTA.A] [BehavesLike.Win32.HLLP.vc] [W32/HLLP.41472] [Virus.Neshta.a] [W32/Neshta.A] [Virus/Win32.Neshta.a] [Win32.Neshta.nl.30720] [Virus:Win32/Neshta.A] [Win32.Neshta.A] [Win32.Neshta.A] [Win32/Neshta] [W32/HLLP.41472.e] [Virus.Win32.Neshta.a] [W32/Neshta.A] [Win32.Neshta.A] [Virus.Win32.Neshta.a] [Win32.Neshta.A] [Virus.Win32.Neshta] [W32/Neshta.A] [Worm/Delf.FF] [Virus.Win32.Neshta.$a] [Virus.Win32.Neshta.B]
99095468a8d7f61d755bae12f50e4232
48ac4b5e32391b01adf163c6a07f8646

Whois

Property	Value
NameServer	NS40.DOMAINCONTROL.COM
Created	2012-12-14 00:00:00
Changed	2014-11-22 00:00:00
Expires	2016-12-14 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2015-05-18	103.42.12.142 (ClassC)
2015-10-22	38.68.24.58 (ClassC)
2017-03-05	104.148.42.195 (ClassC)
2019-04-17	202.182.102.37 (ClassC)
2020-06-13	104.18.40.91 (ClassC)
2020-10-27	104.18.41.91 (ClassC)
2021-01-16	172.67.203.108 (ClassC)
2023-12-13	104.21.37.30 (ClassC)
2024-08-25	84.32.84.33 (ClassC)
2025-08-12	172.67.173.98 (ClassC)
2025-08-25	104.21.63.247 (ClassC)

HTTP/1.1 200 Date: Sat, 22 Jun 2019 19:14:22 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: __cfduidd2b60b00473cc3e8f19b25eab1f749bfb1561230861; expiresSun, 21-J

?xml version1.0 encodingISO-8859-1?>!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Strict//EN   http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd>html xmlnshttp://www.w3.org/1999/xhtml xml:langen langen>head>title>Apache Tomcat/title>/head>body>h1>It works !/h1>p>If youre seeing this page via a web browser, it means youve setup Tomcat successfully. Congratulations!/p>p>This is the default Tomcat home page. It can be found on the local filesystem at: code>/var/lib/tomcat9/webapps/ROOT/index.html/code>/p>p>Tomcat veterans might be pleased to learn that this system instance of Tomcat is installed with code>CATALINA_HOME/code> in code>/usr/share/tomcat9/code> and code>CATALINA_BASE/code> in code>/var/lib/tomcat9/code>, following the rules from code>/usr/share/doc/tomcat9-common/RUNNING.txt.gz/code>./p>p>You might consider installing the following packages, if you havent already done so:/p>p>b>tomcat9-docs/b>: This package installs a web application that allows to browse the Tomcat 9 documentation locally. Once installed, you can access it by clicking a hrefdocs/>here/a>./p>p>b>tomcat9-examples/b>: This package installs a web application that allows to access the Tomcat 9 Servlet and JSP examples. Once installed, you can access it by clicking a hrefexamples/>here/a>./p>p>b>tomcat9-admin/b>: This package installs two web applications that can help managing this Tomcat instance. Once installed, you can access the a hrefmanager/html>manager webapp/a> and the a hrefhost-manager/html>host-manager webapp/a>./p>p>NOTE: For security reasons, using the manager webapp is restricted to users with role manager-gui. The host-manager webapp is restricted to users with role admin-gui. Users are defined in code>/etc/tomcat9/tomcat-users.xml/code>./p>/body>/html>

Port 443

HTTP/1.1 200 Date: Sat, 22 Jun 2019 19:14:22 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: __cfduiddb87bb845c64a48d9eef8ab81bd99c2ee1561230862; expiresSun, 21-J

Subdomains

Date	Domain	IP
i.aegiscrypter.com	2015-05-18	103.42.12.142
www.aegiscrypter.com	2013-09-01	173.194.77.121

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]