Domain > forum.sandalcraft.cba.pl

More information on this domain is in AlienVault OTX

Date	IP Address
2026-01-24	37.48.70.83 (ClassC)

Port 80

HTTP/1.1 202 AcceptedServer: nginxDate: Sat, 20 Apr 2024 11:20:49 GMTContent-Type: text/htmlContent-Length: 4927Connection: keep-aliveKeep-Alive: timeout50ETag: 608a70f5-133f

!DOCTYPE html>html>head>script typetext/javascript srchttps://www.cba.pl/scripts/punycode.js>/script>script typetext/javascript>var pattern  /www./i;var domena  location.host;if (domena.match(pattern)) {    domena  domena.substr(4);}domena  toUnicode(domena);function kuki(){    var d  new Date();    d.setTime(d.getTime() + (30*24*60*60*1000));    var expires  expires+ d.toUTCString();    document.cookie  cbatest7blablabla; + expires + ;path/;    window.location.reload();}function getDomain(){    return https://www.cba.pl/pl/donate/ + domena;}/script>title>CBA/title>meta http-equivContent-Type contenttext/html; charsetutf-8>link relshortcut icon typeimage/png hrefhttps://www.cba.pl/img/favicon.png>!--start:!isRtl-->style typetext/css>html,body{	height: 100%;	margin: 0px;	padding: 0px;	font-family: sans-serif, Verdana, Helvetica;	background-color: transparent;	color: #0D56C2;	font-weight:normal;	background: url(https://www.cba.pl/img/404.png);	background-size: cover;	background-attachment: fixed;}body > table{	filter: none !important;}a:link,a:visited,a:hover{	color: #0D56C2;}.domain{	font-weight:bold;	font-size: 120%;}h1{    color:#0D56C2;}h2{    font-weight: normal;    color:w#0D56C2;}h4{    font-weight: normal;    color:#0D56C2;}.first_part{	border-bottom: 0px solid #C5C5C5;	padding: 10px;	padding-bottom: 10px;}.first_part img{	height:auto;	margin-bottom: 5px;}.button {  background-color: #2F80F5; /* Blue */  border: none;  color: white;  padding: 15px 32px;  text-align: center;  text-decoration: none;  display: inline-block;  font-size: 16px;  margin: 4px 2px;  transition-duration: 0.4s;  cursor: pointer;}.button:hover a{  background-color: #1b4c96 /* Darker Blue */  color: white;}td	img{	vertical-align: middle;	margin-right: 1px;}.tools td div{	width: 150px;	text-align:left;	height:40px;}.tools td div a{	text-decoration: none;}.tools td:hover a{	text-decoration: underline;}.tools td div a:first-child{	float:left;	vertical-align: middle;}.tools td div a:last-child{	vertical-align: middle;	line-height: 1.2;}tabl

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
b5801aceee08f63bddee012a17296e92	[JS/Nemucod.mt] [Trojan.Script.Heuristic-js.iacgm] [Mal/JSDldr-M] [JS/Locky.AY!Eldorado] [JS/Obfus.S118]
8f543093a9edb141082c129a72a61d83
a3adf606d3665d174c94ae1f439b6f30	[JS/TrojanDownloader.Nemucod.AUN] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [Mal/JSDldr-M] [JS/Locky.AY!Eldorado] [JS/Obfus.S118] [JS/Nemucod.mt]
aa0bf5f701a03959c2d1fc881d6dc459	[Trojan.Script.Heuristic-js.iacgm] [Mal/JSDldr-M] [JS/Locky.AY!Eldorado] [JS/Obfus.S118] [JS/Nemucod.mt] [Js.Trojan.Raas.Auto]
17e0f9998af6ce08021f045f565fe117

Domain > forum.sandalcraft.cba.pl

Is this malicious?

Files that talk to forum.sandalcraft.cba.pl

DNS Resolutions

Port 80