Domain > sandalcraft.cba.pl

More information on this domain is in AlienVault OTX

Date	IP Address
2025-08-21	95.211.144.68 (ClassC)

Port 80

HTTP/1.1 202 AcceptedServer: nginxDate: Sun, 01 Sep 2024 05:38:13 GMTContent-Type: text/htmlContent-Length: 4927Connection: keep-aliveKeep-Alive: timeout50ETag: 66c711d3-133f

!DOCTYPE html>html>head>script typetext/javascript srchttps://www.cba.pl/scripts/punycode.js>/script>script typetext/javascript>var pattern  /www./i;var domena  location.host;if (domena.match(pattern)) {    domena  domena.substr(4);}domena  toUnicode(domena);function kuki(){    var d  new Date();    d.setTime(d.getTime() + (30*24*60*60*1000));    var expires  expires+ d.toUTCString();    document.cookie  cbatest7blablabla; + expires + ;path/;    window.location.reload();}function getDomain(){    return https://www.cba.pl/pl/donate/ + domena;}/script>title>CBA/title>meta http-equivContent-Type contenttext/html; charsetutf-8>link relshortcut icon typeimage/png hrefhttps://www.cba.pl/img/favicon.png>!--start:!isRtl-->style typetext/css>html,body{	height: 100%;	margin: 0px;	padding: 0px;	font-family: sans-serif, Verdana, Helvetica;	background-color: transparent;	color: #0D56C2;	font-weight:normal;	background: url(https://www.cba.pl/img/404.png);	background-size: cover;	background-attachment: fixed;}body > table{	filter: none !important;}a:link,a:visited,a:hover{	color: #0D56C2;}.domain{	font-weight:bold;	font-size: 120%;}h1{    color:#0D56C2;}h2{    font-weight: normal;    color:w#0D56C2;}h4{    font-weight: normal;    color:#0D56C2;}.first_part{	border-bottom: 0px solid #C5C5C5;	padding: 10px;	padding-bottom: 10px;}.first_part img{	height:auto;	margin-bottom: 5px;}.button {  background-color: #2F80F5; /* Blue */  border: none;  color: white;  padding: 15px 32px;  text-align: center;  text-decoration: none;  display: inline-block;  font-size: 16px;  margin: 4px 2px;  transition-duration: 0.4s;  cursor: pointer;}.button:hover a{  background-color: #1b4c96 /* Darker Blue */  color: white;}td	img{	vertical-align: middle;	margin-right: 1px;}.tools td div{	width: 150px;	text-align:left;	height:40px;}.tools td div a{	text-decoration: none;}.tools td:hover a{	text-decoration: underline;}.tools td div a:first-child{	float:left;	vertical-align: middle;}.tools td div a:last-child{	vertical-align: middle;	line-height: 1.2;}tabl

Subdomains

Date	Domain	IP
forum.sandalcraft.cba.pl	2025-07-11	37.48.70.83

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
88d77a3f5719779a0c7b7e9a4858147a
e90b10d61e4cead5764c3f4a7113fb94
cff990e09ed08eeb6260dc701ac7c440	[JS.Trojan-Downloader.Nemucod.ca] [Trojan.Script.Heuristic-js.iacgm]
eaef9ce320bd1178f642c61a7ae0cc62
b5801aceee08f63bddee012a17296e92	[JS/Nemucod.mt] [Trojan.Script.Heuristic-js.iacgm] [Mal/JSDldr-M] [JS/Locky.AY!Eldorado] [JS/Obfus.S118]
8f543093a9edb141082c129a72a61d83
a3adf606d3665d174c94ae1f439b6f30	[JS/TrojanDownloader.Nemucod.AUN] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [Mal/JSDldr-M] [JS/Locky.AY!Eldorado] [JS/Obfus.S118] [JS/Nemucod.mt]
aa0bf5f701a03959c2d1fc881d6dc459	[Trojan.Script.Heuristic-js.iacgm] [Mal/JSDldr-M] [JS/Locky.AY!Eldorado] [JS/Obfus.S118] [JS/Nemucod.mt] [Js.Trojan.Raas.Auto]
17e0f9998af6ce08021f045f565fe117

Domain > sandalcraft.cba.pl

Is this malicious?

Files that talk to sandalcraft.cba.pl

DNS Resolutions

Port 80

Subdomains