Domain > groupspaces.com

More information on this domain is in AlienVault OTX

Files that talk to groupspaces.com

MD5	A/V
4be57c95dd1e77ba6b00af63f6c5d79a	[BackDoor.Slym.1498] [BDS/Kelihos.F.5092] [Win32.PSWTroj.Tepfer.hd.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor/Win32.Kelihos] [Backdoor.Win32.Kelihos] [W32/Kelihos.JI!tr]

DNS Resolutions

Date	IP Address
2012-10-11	23.21.135.20 (ClassC)
2013-04-18	54.243.166.8 (ClassC)
2013-08-16	54.243.166.8 (ClassC)
2019-07-03	54.209.220.235 (ClassC)
2021-01-26	52.6.65.71 (ClassC)
2021-12-01	142.250.107.26 (ClassC)
2025-07-13	172.67.219.146 (ClassC)
2026-01-07	104.21.17.20 (ClassC)

HTTP/1.1 200 OKDate: Sun, 27 Aug 2023 13:08:32 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveCF-Ray: 7fd48b3929db276b-SEACF-Cache-Status: DYNAMICCache-Control

!DOCTYPE html>html>head>script>              (function(w,d,s,l,i){wlwl||;wl.push({gtm.start:              new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,              jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.src              https://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);              })(window,document,script,dataLayer, GTM-NRJTPJ);              /script>script async srchttps://www.googletagmanager.com/gtag/js?idUA-244942-5>/script>script>            window.dataLayer  window.dataLayer || ;            function gtag(){dataLayer.push(arguments);}            gtag(js, new Date());            gtag(config, UA-244942-5, {              page_path: window.location.pathname,            });          /script>meta nameviewport contentwidthdevice-width/>meta charSetutf-8/>title>GroupSpaces is now discontinued/title>meta namenext-head-count content3/>link relpreload href/_next/static/css/2c5e14f3a93fb8085e08.css asstyle/>link relstylesheet href/_next/static/css/2c5e14f3a93fb8085e08.css data-n-g/>noscript data-n-css>/noscript>link relpreload href/_next/static/chunks/webpack-2d9f73d6e2ccb820d8b4.js asscript/>link relpreload href/_next/static/chunks/framework-d4a6982ba4e9ece04c70.js asscript/>link relpreload href/_next/static/chunks/597-939a30d45911a4bfac59.js asscript/>link relpreload href/_next/static/chunks/778-d8e3702dc9b3edaa0b75.js asscript/>link relpreload href/_next/static/chunks/main-9ca82ec4d4aca520c43d.js asscript/>link relpreload href/_next/static/chunks/pages/_app-ec5e82696eaae4ed3aee.js asscript/>link relpreload href/_next/static/chunks/pages/index-6349ebaece6795fa1d9a.js asscript/>/head>body>noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-NRJTPJ height0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>div id__next>div>header>nav classtabs>ul>li classlogo>a href/ classroot>GroupSpaces/a>/li>li>a classroot> /a>/li>/ul>/nav>/header>section idcontent>div classwrap content>div classclearfix>div classgspage with-crumbs>h1 classg

Subdomains

Date	Domain	IP
sda.groupspaces.com	2024-11-22	216.24.57.252
secure.groupspaces.com	2025-09-21	216.24.57.7

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > groupspaces.com

Is this malicious?

Files that talk to groupspaces.com

DNS Resolutions

Port 80

Port 443

Subdomains