Domain > movewithgrace.ca

More information on this domain is in AlienVault OTX

Property	Value
NameServer	darwin.ns.cloudflare.com
Created	2004-02-06 00:00:00
Changed	2016-11-25 00:00:00
Expires	2017-02-06 00:00:00
Registrar	Tucows.com Co.

DNS Resolutions

Date	IP Address
2024-01-14	45.56.216.10 (ClassC)
2025-04-02	172.67.178.45 (ClassC)
2025-04-25	104.21.35.177 (ClassC)

HTTP/1.1 200 OKDate: Mon, 25 Dec 2023 08:14:52 GMTServer: ApacheAccept-Ranges: bytesContent-Length: 304214Cache-Control: max-age0, publicExpires: Mon, 25 Dec 2023 08:14:52 GMTVary: Accept-Encoding,Use

!DOCTYPE html>html langen-US prefixog: https://ogp.me/ns#>head>meta charsetUTF-8>script>if(navigator.userAgent.match(/MSIE|Internet Explorer/i)||navigator.userAgent.match(/Trident/7..*?rv:11/i)){var hrefdocument.location.href;if(!href.match(/?&nowprocket/)){if(href.indexOf(?)-1){if(href.indexOf(#)-1){document.location.hrefhref+?nowprocket1}else{document.location.hrefhref.replace(#,?nowprocket1#)}}else{if(href.indexOf(#)-1){document.location.hrefhref+&nowprocket1}else{document.location.hrefhref.replace(#,&nowprocket1#)}}}}/script>script>class RocketLazyLoadScripts{constructor(){this.v1.2.3,this.triggerEventskeydown,mousedown,mousemove,touchmove,touchstart,touchend,wheel,this.userEventHandlerthis._triggerListener.bind(this),this.touchStartHandlerthis._onTouchStart.bind(this),this.touchMoveHandlerthis._onTouchMove.bind(this),this.touchEndHandlerthis._onTouchEnd.bind(this),this.clickHandlerthis._onClick.bind(this),this.interceptedClicks,window.addEventListener(pageshow,t>{this.persistedt.persisted}),window.addEventListener(DOMContentLoaded,()>{this._preconnect3rdParties()}),this.delayedScripts{normal:,async:,defer:},this.trash,this.allJQueries}_addUserInteractionListener(t){if(document.hidden){t._triggerListener();return}this.triggerEvents.forEach(e>window.addEventListener(e,t.userEventHandler,{passive:!0})),window.addEventListener(touchstart,t.touchStartHandler,{passive:!0}),window.addEventListener(mousedown,t.touchStartHandler),document.addEventListener(visibilitychange,t.userEventHandler)}_removeUserInteractionListener(){this.triggerEvents.forEach(t>window.removeEventListener(t,this.userEventHandler,{passive:!0})),document.removeEventListener(visibilitychange,this.userEventHandler)}_onTouchStart(t){HTML!t.target.tagName&&(window.addEventListener(touchend,this.touchEndHandler),window.addEventListener(mouseup,this.touchEndHandler),window.addEventListener(touchmove,this.touchMoveHandler,{passive:!0}),window.addEventListener(mousemove,this.touchMoveHandler),t.target.addEventListener(click,this.clickHandler),this._rena

Subdomains

Date	Domain	IP
cpanel.movewithgrace.ca	2025-04-25	172.67.178.45
autodiscover.movewithgrace.ca	2025-04-03	172.67.178.45
cpcalendars.movewithgrace.ca	2025-04-16	172.67.178.45
cpcontacts.movewithgrace.ca	2025-04-03	104.21.35.177

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
64e500efb891f0b59668987ad32607f3	[W97M/Downloader.brv] [Trojan.Ole2.Vbs-heuristic.druvzi] [HEUR_VBA.O2] [W97M/Downloader.brv] [HEUR.VBA.Trojan.e] [HERU.VBA.8okc] [VBA/Malma] [VBS/Jenxcus.A] [virus.office.obfuscated.1]
a598bd82cbf4097ba32582eeb9ca96aa	[W97M/Downloader.brv] [W2KM_LO.F7D92464] [Trojan.Ole2.Vbs-heuristic.druvzi] [HERU.VBA.8okc] [Macro.Trojan.Dropperd.Auto] [W97M.DownLoader.1325] [W2KM_LO.F7D92464] [W97M/Downloader.brv] [HEUR.VBA.Trojan.e] [VBA/Malma] [VBS/Jenxcus.A] [virus.office.obfuscated.1]
dff369ba70507ab5427cc406ff41f312	[W97M/Downloader.brv] [HERU.VBA.8okc] [W2KM_LO.F7D92464] [Trojan.Ole2.Vbs-heuristic.druvzi] [W2KM_LO.F7D92464] [W97M/Downloader.brv] [HEUR.VBA.Trojan.e] [VBA/Malma] [Macro.Trojan.Dropperd.Auto] [VBS/Jenxcus.A] [virus.office.obfuscated.1]

Domain > movewithgrace.ca

Is this malicious?

Files that talk to movewithgrace.ca

Whois

DNS Resolutions

Port 80

Port 443

Subdomains