Domain > ganbibi.com

More information on this domain is in AlienVault OTX

Files that talk to ganbibi.com

MD5	A/V
eea2b0bb47bcacda9c9c7ba41f88b046	[Win32.Worm.Viking.IZ] [Heur.RoundKick] [TR/PSW.Delf.AF.2] [Win32/Looked.JX] [W32.Viking.LU] [W32.Philis-115] [Win32.HLLW.Gavir.72] [W32/Viking.fam!worm] [Worm/Viking.E] [Trojan-GameThief.Win32.OnLineGames] [Worm.Win32.Viking.mc] [Worm.Viking] [W32/HLLP.Philis.kl] [VirusWin32/Viking.KX] [win32winpe/Packed_Upack.H] [Worm.Win32.Viking.ib] [W32.Looked.BK] [PE_LOOKED.ACX-O] [MalwareScope.Worm.Viking.4] [Worm.Viking.Win32.43]
74881b706b55e98733e445198e60c92e	[Virus.Win32.Viking.D] [Win32.Worm.Viking.IZ] [TR/PSW.Delf.AF.2] [Win32/Looked.JX] [W32.Viking.LU] [W32.Philis-115] [Win32.HLLW.Gavir.72] [W32/Viking.fam!worm] [Worm/Viking.E] [Trojan-GameThief.Win32.OnLineGames] [Worm.Win32.Viking.mc] [Worm.Viking] [W32/HLLP.Philis.kl] [VirusWin32/Viking.KX] [win32win32*winpe/Packed_Upack.H] [Worm.Win32.Viking.ib] [W32/Looked-EB] [W32.Looked.BK] [PE_LOOKED.ACX] [MalwareScope.Worm.Viking.4] [Worm.Viking.Win32.43]
f691024f63d7d381f7d5af3037eab0f5
35acd02376a45239ef62f6a0babe1cc9	[Win32.Worm.Viking.IZ] [Heur.RoundKick] [TR/PSW.Delf.AF.2] [Win32/Looked.JX] [W32.Viking.LU] [W32.Philis-115] [Win32.HLLW.Gavir.72] [W32/Viking.fam!worm] [Worm/Viking.E] [Trojan-GameThief.Win32.OnLineGames] [Worm.Win32.Viking.mc] [Worm.Viking] [W32/HLLP.Philis.kl] [VirusWin32/Viking.KX] [win32winpe/Packed_Upack.H] [Worm.Win32.Viking.ib] [W32/Looked-EB] [W32.Looked.BK] [PE_LOOKED.ACX-O] [MalwareScope.Worm.Viking.4] [Worm.Viking.Win32.43]
42bab51b2888b31d4c150d2d3ba32e3d
db0111084824baa862245255eae5507a
9089abb700bf3849d0097c84416f2b00	[Virus.Win32.Viking.D] [Win32.Worm.Viking.IZ] [Heur.RoundKick] [TR/PSW.Delf.AF.2] [Win32/Looked.JX] [W32.Viking.LU] [W32.Philis-115] [Win32.HLLW.Gavir.72] [W32/Viking.fam!worm] [Worm/Viking.E] [Trojan-GameThief.Win32.OnLineGames] [Worm.Win32.Viking.mc] [Worm.Viking] [W32/HLLP.Philis.kl] [VirusWin32/Viking.KX] [win32win32*winpe/Packed_Upack.H] [Worm.Win32.Viking.ib] [W32/Looked-EB] [W32.Looked.BK] [PE_LOOKED.ACX] [MalwareScope.Worm.Viking.4] [Worm.Viking.Win32.43]
60a583c8344e64e34623d8a1951347dd	[Win32.Worm.Viking.IZ] [Heur.RoundKick] [TR/PSW.Delf.AF.2] [Win32/Looked.JX] [W32.Viking.LU] [W32.Philis-115] [Win32.HLLW.Gavir.72] [W32/Viking.fam!worm] [Worm/Viking.E] [Trojan-GameThief.Win32.OnLineGames] [Worm.Win32.Viking.mc] [Worm.Viking] [W32/HLLP.Philis.kl] [Virus*Win32/Viking.KX] [win32legacy/NetworkWorm.CAX] [Worm.Win32.Viking.ib] [W32/Looked-EB] [W32.Looked.BK] [PE_LOOKED.ACX-O] [MalwareScope.Worm.Viking.4] [Worm.Viking.Win32.43]
308c3d9ebc10c77108cf9d3857e57963
0b9e3251420c081c7493a87d6468c54b
4a42106ff134f5da7b65b1d564c5150e	[Virus.Win32.Viking.D] [Win32.Worm.Viking.IZ] [TR/PSW.Delf.AF.2] [Win32/Looked.JX] [W32.Viking.LU] [W32.Philis-115] [Win32.HLLW.Gavir.72] [W32/Viking.fam!worm] [Worm/Viking.E] [Trojan-GameThief.Win32.OnLineGames] [Worm.Win32.Viking.mc] [Worm.Viking] [W32/HLLP.Philis.kl] [Virus*Win32/Viking.KX] [win32legacy/NetworkWorm.CAX] [Worm.Win32.Viking.ib] [W32/Looked-EB] [W32.Looked.BK] [PE_LOOKED.ACX] [MalwareScope.Worm.Viking.4] [Worm.Viking.Win32.43]
1d909af594585ec4a7b17aea2da7f6fd
36654b215d69cd4aa805e037c6a3e6d6
3fef3d930a35d917ef7ad313097ecdad	[Virus.Win32.Viking.D] [Win32.Worm.Viking.IZ] [Heur.RoundKick] [TR/PSW.Delf.AF.2] [Win32/Looked.JX] [W32.Viking.LU] [W32.Philis-115] [Win32.HLLW.Gavir.72] [W32/Viking.fam!worm] [Worm/Viking.E] [Trojan-GameThief.Win32.OnLineGames] [Worm.Win32.Viking.mc] [Worm.Viking] [W32/HLLP.Philis.kl] [VirusWin32/Viking.KX] [win32win32*winpe/Packed_Upack.H] [Worm.Win32.Viking.ib] [W32/Looked-EB] [W32.Looked.BK] [PE_LOOKED.ACX] [MalwareScope.Worm.Viking.4] [Worm.Viking.Win32.43]
f0e4a95381019c380704e756748499a2
139ff27c755caed1e137c7f5b6c2af62

Whois

Property	Value
Email	whois.privacy@privacyid.com
NameServer	NS2.DOMAINRECOVER.COM
Created	2008-09-29 00:00:00
Changed	2014-09-30 00:00:00
Expires	2015-09-29 00:00:00
Registrar	INSTANTNAMES LLC

DNS Resolutions

Date	IP Address
2014-07-12	208.73.211.188 (ClassC)
2024-06-29	204.12.216.173 (ClassC)
2025-04-21	66.45.246.141 (ClassC)

HTTP/1.1 200 OKServer: nginx/1.19.5Date: Sun, 24 Dec 2023 20:47:10 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/5.3.3Set-Cookie: PHPSESSIDt

script typetext/javascript srcjs/quickform.js>/script>!DOCTYPE html>html>head>    link relshortcut icon hrefimages/favicon.png typeimage/x-icon>    meta charsetUTF-8 />    meta nameviewport contentwidthdevice-width, initial-scale1>    title>ganbibi.com :: this domain is for sale/title>    link relstylesheet href/css/select.css>    script src//code.jquery.com/jquery-1.10.2.js>/script>    script src//code.jquery.com/ui/1.11.3/jquery-ui.js>/script>    !--script typetext/javascript src/js/placeholder.js>/script-->    !-- v:9.3 -->     script>	function onSubmit(token) { 		document.getElementById(submit).submit();	}    /script>    script typetext/javascript src//stat.domainrecover.com/salesform.js>/script>    script typetext/javascript src/js/service.min.js>/script>    script>        $(function() {            $( #country-0 ).selectmenu();            $( #usa_state-0 ).selectmenu();            $( #files ).selectmenu();            $( #number )                .selectmenu()                .selectmenu( menuWidget )                .addClass( overflow );        });    /script>    link relstylesheet hrefcss/style.css>/head>body>div idfb-root>/div>div classmain>    div classheader>        div classlogo>            a href/>ganbibi.com/a>        /div>        div classheader-right-block>            a href/>/a>            span>This domain is for sale/span>        /div>        div classheader-bottom>/div>    /div>script>    $(document).ready(function() {        var myInput  document.getElementById(email_confirm-0);        myInput.onpaste  function(e) {            e.preventDefault();        }    });/script>        div classif>            p classgreen-text>If you are interested/p>            p classblack-text>in purchasing domain name, please submit this form./p>            !--div classor>or/div-->        /div>        div classform-block>            div classform-block-text>                span>*/span> We will contact you back within a href#>two business days/a> with price and terms            /div>        /div>style>    div.form div.f

Subdomains

Date	Domain	IP
cao.ganbibi.com	2014-01-27	208.73.210.233
ads.ganbibi.com	2014-04-27	208.73.210.233

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ganbibi.com

Is this malicious?

Files that talk to ganbibi.com

Whois

DNS Resolutions

Port 80

Subdomains