Domain > xoom.virgilio.it

More information on this domain is in AlienVault OTX

Files that talk to xoom.virgilio.it

MD5	A/V
4bd5a50dda57dd586d0ef5b3a333af65	[W32.Clod7f5.Trojan.b93d] [Artemis!4BD5A50DDA57] [W32/Downldr2.IFQP] [Downloader.Bancos] [Downloader] [Trojan.Win32.A.Downloader.46080.JG] [Trojan.DownLoad.27410] [Artemis!4BD5A50DDA57] [Mal/DelpDldr-C] [TrojanDownloader.Dadobra.apw] [Trojan/Win32.Banload] [W32/Downloader.HDPD-2701] [TrojanDownloader] [Trj/Downloader.MDW] [Trojan-Downloader.Delphi] [W32/Delf.XCT!tr.dldr] [Win32/DH{JVdO}] [Trojan.Win32.Downloader.ADh] [Win32/Trojan.db0]
dd87b09edea0306bb43bfc275fe3c9ba
a6f667fd082238662b50284468425b1c	[W32.Clodf19.Trojan.93e5] [PWS-Banker.dldr] [Downloader] [Downloader] [UnclassifiedMalware] [Trojan.Naver.209] [PWS-Banker.dldr] [Mal/Banload-E] [Trojan.Win32.A.Downloader.462336.N] [W32/Banload.ADBV!tr.dldr] [Win32/DH{JVdO}] [Trojan.Win32.Downloader.Ad] [Win32/Trojan.Downloader.04c]
4c85207fcd787a479e938d0f831a5fb9	[W32.Clodba8.Trojan.4561] [Trojan.Downloader.Banload.NVX] [Downloader] [Trojan.Downloader.Banload.NVX] [Packed/eXPressor] [Virus.Win32.Heur.c] [Trojan.Downloader.Banload.NVX] [Mal/Banker-K] [TrojWare.Win32.Banker.etk74] [Trojan.Downloader.Banload.NVX] [Trojan.DownLoad.6501] [Mal_Banld-1] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Win32.TrojDownloader.Banload.(kcloud)] [Trojan.Win32.Downloader.165800] [Trojan.Downloader.Banload.NVX] [Win32/ExprPacked.suspicious] [TrojanBanker.Banbra] [Trojan.Win32.Downloader.ak] [PE:Trojan.DL.Win32.Undef.iv!1075130293] [Trojan-Downloader.Win32.Banload] [Win32/Trojan.db0]
57f163f860e4260a307244556bad03dc	[Artemis!57F163F860E4] [Downloader] [Trojan.Downloader-13210] [Trojan.Downloader.Banload.CH] [Trojan.Win32.A.Downloader.44032.QE] [Trojan.Downloader.Banload.CH] [Trojan.DownLoad.13210] [Mal_Banker11] [Artemis!57F163F860E4] [Trojan.Downloader.Banload.CH] [PE:Trojan.DL.Win32.Undef.qef!1075264791] [Trojan-Downloader.Delphi] [W32/Delf.ACT!tr.dldr] [Downloader.Rozena] [Trojan.Win32.Downloader.alj] [Win32/Trojan.db0]

Whois

Property	Value
Organization	Italiaonline S.p.A.
NameServer	dns2.virgilio.net
Created	2000-09-29 00:00:00
Changed	2015-09-17 10:22:38
Expires	2016-05-10 00:00:00
Registrar	ITnet s.r.l.

DNS Resolutions

Date	IP Address
2013-10-18	212.48.10.58 (ClassC)
2019-09-07	213.209.17.182 (ClassC)
2024-06-09	213.209.30.182 (ClassC)
2026-01-19	213.209.17.209 (ClassC)

HTTP/1.1 200 OKDate: Sat, 07 Sep 2019 16:09:17 GMTServer: ApacheX-Powered-By: PHP/7.0.10Set-Cookie: PHPSESSID5ok3337nirr961ahbp4i9idkb7; path/Expires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: publi

!DOCTYPE html>html class langit-IT>head>    meta charsetutf-8>    meta http-equivX-UA-Compatible contentIEedge>    meta nameviewport contentwidthdevice-width, initial-scale1>    meta nameformat-detection contenttelephoneno>    title propertydc:title>/title>    meta propertydc:description namedescription content >    meta propertyog:url contenthttp://xoom.virgilio.it/ >    meta propertyog:type contentwebsite >    meta propertyog:title content >    meta propertyog:image contenthttp://xoom.virgilio.it/img/fb-tw-ph.png >    meta propertyog:description content >    meta propertyog:site_name contentSiti Xoom >    meta namerobots contentNOODP>    link relcanonical href>    link reldns-prefetch href//xoom.plug.it/>    link relapple-touch-icon sizes180x180 href//xoom.plug.it/img/fi/apple-touch-icon.png>    link relicon typeimage/png sizes32x32 href//xoom.plug.it/img/fi/favicon-32x32.png>    link relicon typeimage/png sizes16x16 href//xoom.plug.it/img/fi/favicon-16x16.png>    link relmanifest href//xoom.plug.it/img/fi/manifest.json>    link relmask-icon href//xoom.plug.it/img/fi/safari-pinned-tab.svg color#e74b18>    link relshortcut icon href/favicon.ico typeimage/x-icon>        meta namemsapplication-config contenthttp://xoom.virgilio.it/img/fi/browserconfig.xml>    meta nametheme-color content#ffffff>		script typetext/javascript srchttps://i.plug.it/common/tech_includes/lib/policy_cookieCMP.js >/script>	script typetext/javascript srchttps://i.plug.it/common/tech_includes/lib/cmp.min.js>/script>	        link relstylesheet href//xoom.plug.it/css/hc_siti.css>    	link relstylesheet href//xoom.plug.it/css/style.css>    script>var isPhoneTablfalse, isTablDesktrue, isSmartphonefalse, isTabletfalse, isDesktoptrue, isIe8false, isIe9false, isiOSfalse, isAndroidfalse, staticDomain//xoom.plug.it/;/script>    script>    var lteIE8  false;    if (typeof jQuery  undefined) {        (function() {            var useSSL  https:  document.location.protocol;            var src  (useSSL ? https://ssl-i.plug.it : http://i.plug.it) + /iplug/

Subdomains

Date	Domain	IP
ns2.xoom.virgilio.it	2014-09-16	212.48.16.67

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > xoom.virgilio.it

Is this malicious?

Files that talk to xoom.virgilio.it

Whois

DNS Resolutions

Port 443

Subdomains