Domain > 1-metro.com

More information on this domain is in AlienVault OTX

Files that talk to 1-metro.com

MD5	A/V
390fc8a6672ba631df610de3fc76ad22	[Heur.Win32.Veebee.1!O] [Trojan.LVBP.ED] [W32/Trojan2.OAPU] [TROJ_FORUCON.BMC] [Trojan-PSW.Win32.Tepfer.swki] [Trojan.PWS.Stealer.3128] [TR/Dropper.VB.7976] [W32/Trojan.VAGS-5670] [Trojan-PWS.Win32.Tepfer] [Trojan.Win32.InfoStealer.AY]

Whois

Property	Value
NameServer	NS2.LOUGCLOUD.COM
Created	2002-08-28 00:00:00
Changed	2014-01-13 00:00:00
Expires	2015-08-28 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-12-17	67.210.119.235 (ClassC)
2015-05-19	-
2024-09-02	172.67.161.156 (ClassC)
2026-02-08	104.21.49.99 (ClassC)

HTTP/1.1 200 OKDate: Mon, 13 May 2024 19:38:11 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveExpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no

!doctype html>head>meta charsetUTF-8>meta nameviewport contentwidthdevice-width, maximum-scale1.0 />title>Metro Signs Advertising, Inc./title>base hrefhttp://www.1-metro.com/>link hrefthemes/signs/css/fluid.css relstylesheet typetext/css>link hrefthemes/signs/css/menu-style.css relstylesheet typetext/css>link hrefthemes/signs/css/accordion.css relstylesheet typetext/css />style typetext/css>.twitter-share-button {	background-image: none;}/style>script srchttps://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js>/script>script typetext/javascript srcthemes/signs/jquery.cycle/jquery.cycle.all.min.js>/script>script srcthemes/signs/js/jquery.accordion-menu.js>/script>        script typetext/javascript>$(document).ready(function() {				$(.pics).cycle({ fx:fade, speedIn:3000, speedOut:3000, delay:1500});				showSocialBox();				$(#nav-reveal-button).click(function(){        	$(#primary-nav-box-mobile).slideToggle(500);    	});			})		function scrollToId(IDvar){		$(html, body).animate({ scrollTop: $(IDvar).offset().top }, slow);	}		function showSocialBox(){		$(#social-share-box).fadeIn(1500);	}function MM_preloadImages() { //v3.0  var ddocument; if(d.images){ if(!d.MM_p) d.MM_pnew Array();    var i,jd.MM_p.length,aMM_preloadImages.arguments; for(i0; ia.length; i++)    if (ai.indexOf(#)!0){ d.MM_pjnew Image; d.MM_pj++.srcai;}}}function MM_swapImgRestore() { //v3.0  var i,x,adocument.MM_sr; for(i0;a&&ia.length&&(xai)&&x.oSrc;i++) x.srcx.oSrc;}function MM_findObj(n, d) { //v4.01  var p,i,x;  if(!d) ddocument; if((pn.indexOf(?))>0&&parent.frames.length) {    dparent.framesn.substring(p+1).document; nn.substring(0,p);}  if(!(xdn)&&d.all) xd.alln; for (i0;!x&&id.forms.length;i++) xd.formsin;  for(i0;!x&&d.layers&&id.layers.length;i++) xMM_findObj(n,d.layersi.document);  if(!x && d.getElementById) xd.getElementById(n); return x;}function MM_swapImage() { //v3.0  var i,j0,x,aMM_swapImage.arguments; document.MM_srnew Array; for(i0;i(a.length-2);i+3)   if ((xMM_findObj(ai))!null){document.MM_srj++x; if(!x.oSrc) x.oSrcx.src;

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > 1-metro.com

Is this malicious?

Files that talk to 1-metro.com

Whois

DNS Resolutions

Port 80

Port 443