Domain > nekgroup.com

More information on this domain is in AlienVault OTX

Files that talk to nekgroup.com

MD5	A/V
2c2371e95bb5d87ccd5d19a114492f70	[HW32.CDB.18af] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ] [Win32/Trojan.0de]

Whois

Property	Value
Email	reg@nekgroup.com
NameServer	NS2.GLDN.NET
Created	2002-03-05 00:00:00
Changed	2016-02-24 00:00:00
Expires	2017-03-05 00:00:00
Registrar	REGIONAL NETWORK INF

DNS Resolutions

Date	IP Address
2025-06-17	195.208.0.141 (ClassC)
2025-07-31	91.189.114.20 (ClassC)
2026-01-14	194.186.9.213 (ClassC)

HTTP/1.1 200 OKServer: openrestyDate: Tue, 12 Mar 2024 06:06:12 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/5.4.45Last-Modified: Tue, 12 M

!DOCTYPE html>html>head>	meta charsetutf-8>	meta namerobots contentindex, follow>	meta namedescription content>	meta namekeywords content>        meta http-equivX-UA-Compatible contentIE100 >	title>НЭК/title>	link href/design/nek/styles/reset.css relstylesheet typetext/css>	link href/design/nek/styles/main.less relstylesheet/less typetext/css>	script src/design/nek/scripts/less-1.3.3.min.js>/script>	script srchttp://code.jquery.com/jquery-1.9.1.min.js>/script>	script src/design/nek/scripts/main.js>/script>	script src/design/nek/scripts/craftmap.js>/script>	link href/design/nek/images/favicon.ico relshortcut icon>	link hrefhttp://fonts.googleapis.com/css?familyRoboto:400,300,300italic,400italic,500,500italic&subsetlatin,cyrillic relstylesheet typetext/css>/head>body>	input typesearch styledisplay:none>	div classlayout>!--	div classhidden-form idwrite2us>			div classhf-control>				span classhf-header>Отправить сообщение/span>				div classclose-form>					i classcf-icon>/i>				/div>			/div>			div classhf-content>				form action# methodpost>					div classfield-container>						span classfield-label>Ваше имя, фамилия/span>						input typetext namefi required>					/div>					div classfield-container>						span classfield-label>Название компании/span>						input typetext namecompany required>					/div>					div classfield-container short stylemargin-right: 22px;>						span classfield-label>Контактный телефон/span>						input typetel namephone required>					/div>					div classfield-container short>						span classfield-label>Контактный e-mail/span>						input typeemail nameemail required>					/div>					div classfield-container>						span classfield-label>Вопрос сообщения/span>						textarea namemessage required>/textarea>					/div>					div classfield-container>						span classfield-label>Введите текст/span>						input typetext namecaptcha classcaptcha required>						div classrefresh>/div>						div classcaptcha-img>img src

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > nekgroup.com

Is this malicious?

Files that talk to nekgroup.com

Whois

DNS Resolutions

Port 80