Domain > test.hg-computer.de

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to test.hg-computer.de

MD5	A/V
31be4a3a8af9b97aa97a2e88fe56a6b5
a3c0b5aac333bf2a4891c86140d94640
b24785ae80d3bdbe7a9508dfe77a816e	[W97M/Downloader.bct] [HEUR.VBA.Trojan.d] [W97M/Downloader]
9923a74a690d50fe6968c6c95aab2feb	[W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [HEUR.VBA.Trojan.d] [W97M/Downloader] [W97M/Downloader.bct]
ae22d291bc3aa534b4410bb476683893	[W97M/Downloader.bct] [HEUR.VBA.Trojan.d] [W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [W97M/Downloader]
5cef74fc1b647f3c2dddb5b02ee9cf5b	[W97M/Downloader.bct] [W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [HEUR.VBA.Trojan.d] [W97M/Downloader]
fda5d7456aba610eae9720009839c832	[W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [Downloader.PHAI-] [HEUR.VBA.Trojan.d] [W97M/Downloader] [W97M/Downloader.bct]
9276444b324826f40a988dd584bd9696	[W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [W97M/Downloader.bct] [PP97M/Downloader] [HEUR.VBA.Trojan.d] [W97M/Downloader] [W97M/Downloader.bct]
f07eaaf605b1f547dadc56f72722536e	[W97M/Downloader.bct] [PP97M/Downloader] [W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [HEUR.VBA.Trojan.d] [W97M/Downloader]
84dd67a6079ac9a732d89b581a437403	[PP97M/Downloader] [W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [HEUR.VBA.Trojan.d] [W97M/Downloader] [W97M/Downloader.bct]
6e0d317ebf0b0111d8369287ee67d29c	[W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [W97M/Downloader.bct] [PP97M/Downloader] [HEUR.VBA.Trojan.d] [W97M/Downloader] [W97M/Downloader.bct]
c974823343ede3c7375f78b2def4a176	[W97M/Downloader.bct] [W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [PP97M/Downloader] [HEUR.VBA.Trojan.d] [W97M/Downloader]
987811a8e3dce654df08f146038dd02f	[W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [HEUR.VBA.Trojan.d] [W97M/Downloader] [W97M/Downloader.bct]
443c77c06acd95998004619dfb0063fe	[W97M/Downloader.bct] [W2KM_LOCKY.BYX] [W2KM_LOCKY.BYX] [PP97M/Downloader] [HEUR.VBA.Trojan.d] [W97M/Downloader]
4574f9723a69fc7c9cfd7d9c9e79ecd1

Whois

Property	Value
Email	domains@aixit.com
NameServer	ns4.ns.aixit.com
Changed	2012-08-02 06:17:53

DNS Resolutions

Date	IP Address
2016-05-06	82.149.224.16 (ClassC)
2025-05-30	195.225.198.153 (ClassC)

HTTP/1.1 200 OKDate: Mon, 23 Sep 2019 17:56:42 GMTServer: Apache/2.4.25 (Debian)Last-Modified: Fri, 31 Mar 2017 08:46:48 GMTETag: 19a8-54c02d9a1abd1Accept-Ranges: bytesContent-Length: 6568Vary: Accept

!DOCTYPE html>html langen>	head>		title>Froxlor Domain Default Page/title>		meta namerobots contentnoindex, nofollow> 		style typetext/css>			body {				font:12px/18px Lucida Grande,Lucida Sans Unicode,Helvetica,Arial,Verdana,sans-serif;				background-color:#f2f2f2;				color:#333;				margin: 0;				padding: 0;			}			article {								margin-top:20%;				margin-left:auto;				margin-right:auto;				margin-bottom:12px;				width:500px;				min-height: 70px;				padding: 1em;				background-color:#fff;				border-radius: 5px 5px 5px 5px !important;				box-shadow: 0 1px 3px rgba(0, 0, 0, 0.35);				text-align: center;			}			footer {										text-align:center;				color:rgb(136, 136, 136);				font-size:10px !important;				margin-top:10px;				margin-bottom:10px;			}			footer a,footer a:active,footer a:visited {				text-decoration:none;				color:rgb(136, 136, 136);			}			footer a:hover {				text-decoration:underline;			}			a,a:active,a:visited {				color:#176fa1;				text-decoration:none;			}			a:hover {				text-decoration:underline;			}		/style>	/head>	body>		article>			h1>Domain Default Page/h1>			p>This page was generated by a hrefhttp://www.froxlor.org>Froxlor Server Management Panel/a>.br /> If you see this page, it means that there is no content on this domain yet./p>			p>Please ask your provider for an access to your Froxlor login and remove the index.html in your domains document root if you dont want to see this page./p>		/article>		footer>			span>				img srcdata:image/png;base64,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

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > test.hg-computer.de

Is this malicious?

Files that talk to test.hg-computer.de

Whois

DNS Resolutions

Port 80