Domain > ximag.ro

More information on this domain is in AlienVault OTX

Files that talk to ximag.ro

MD5	A/V
5d4f02a33bfea1b037000bd6d212c938	[Artemis!5D4F02A33BFE] [Trojan.Banker] [Virus] [Spyware] [TrojanSpy.Delf!TXKZUW28d8U] [W32/Trojan-Gypikon-based.DE!Max] [Win32/FakeIE_i] [Cryp_Banker-6] [Trojan-Spy.Win32.Delf.jkn] [Trojan.Win32.Delf.epvwu] [Trojan.Win32.A.Delf.494592.B[UPX]] [Heur.Suspicious] [Trojan.AVKill.13846] [Trojan/Win32.Xema] [TrojanSpy.Delf] [BehavesLike] [W32/Delf.JKN!tr] [Trj/CI.A]

Whois

Property	Value
NameServer	ns2.hostway.ro
Created	2007-04-18 00:00:00
Registrar	ROSPOT SRL

DNS Resolutions

Date	IP Address
2014-07-14	176.223.207.5 (ClassC)
2019-12-01	89.36.25.138 (ClassC)
2026-03-06	89.44.109.103 (ClassC)

Port 80

HTTP/1.1 200 OKConnection: Keep-AliveX-Powered-By: PHP/7.3.33Content-Type: text/html; charsetUTF-8Content-Length: 5994Date: Sun, 03 Dec 2023 11:14:10 GMTServer: LiteSpeed

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd>html xmlnshttp://www.w3.org/1999/xhtml>head>meta http-equivContent-Type contenttext/html; charsetiso-8859-1 />META NAMEcopyright CONTENTXtreme Imagination>META NAMErating CONTENTSafe for kids>META NAMEdistribution CONTENTGlobal>META NAMErevisit-after CONTENT7 days>META NAMEauthors CONTENTAdrian - contact@ximag.ro>META HTTP-EQUIVreply-to CONTENTcontact@ximag.ro>META NAMErobots CONTENTindex, follow, ALL>META NAMEclassification CONTENTbusiness>META NAMEdescription CONTENTXtreme Imagination - va pune la dispozitie o gama variata de oferte pentru succesul dumneavoastra in online.>META NAMEkeywords CONTENTwebdesign, webhosting, design, logo, site>title>Xtreme Imagination - Profesionisti pentru afacerea ta online!/title>link relShortcut Icon href/files/favicon.ico>link hrefstyle.css relstylesheet typetext/css>script srcjquery-latest.min.js typetext/javascript>/script>script srcscript.js>/script>meta namegoogle-site-verification contentpV-hWqN-D0LvPnBFg-ohEeTT3XdlRYlBuWhSe7lhn8w />script languageJavaScript typetext/JavaScript>!--function MM_preloadImages() { //v3.0  var ddocument; if(d.images){ if(!d.MM_p) d.MM_pnew Array();    var i,jd.MM_p.length,aMM_preloadImages.arguments; for(i0; ia.length; i++)    if (ai.indexOf(#)!0){ d.MM_pjnew Image; d.MM_pj++.srcai;}}}function MM_findObj(n, d) { //v4.01  var p,i,x;  if(!d) ddocument; if((pn.indexOf(?))>0&&parent.frames.length) {    dparent.framesn.substring(p+1).document; nn.substring(0,p);}  if(!(xdn)&&d.all) xd.alln; for (i0;!x&&id.forms.length;i++) xd.formsin;  for(i0;!x&&d.layers&&id.layers.length;i++) xMM_findObj(n,d.layersi.document);  if(!x && d.getElementById) xd.getElementById(n); return x;}function MM_swapImgRestore() { //v3.0  var i,x,adocument.MM_sr; for(i0;a&&ia.length&&(xai)&&x.oSrc;i++) x.srcx.oSrc;}function MM_swapImage() { //v3.0  var i,j0,x,aMM_swapImage.arguments; document.MM_srnew Array; for(i0;i(a.length-2);i+3)   if ((xMM_findObj(ai))!null){d

Port 443

HTTP/1.1 200 OKConnection: Keep-AliveX-Powered-By: PHP/7.3.33Content-Type: text/html; charsetUTF-8Content-Length: 5994Date: Sun, 03 Dec 2023 11:14:11 GMTServer: LiteSpeed

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]