Domain > ar.decastro.group

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2022-07-24	185.230.63.96 (ClassC)
2024-10-30	185.28.22.62 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Sat, 24 Aug 2024 12:08:04 GMTContent-Type: text/html; charsetutf-8Content-Length: 3114Connection: keep-aliveVary: Accept-EncodingLast-Modified: Sat, 22 Jun 2024 02:37

!DOCTYPE html>html>head>  title>DCG Error/title>  style>    @import url(https://fonts.googleapis.com/css?familyBungee);        body {      background: #1b1b1b;      color: white;      font-family: Bungee, cursive;      margin-top: 50px;      text-align: center;    }        a {      color: #2aa7cc;      text-decoration: none;    }        a:hover {      color: white;    }        svg {      width: 50vw;    }        .lightblue {      fill: #444;    }        .eye {      cx: calc(115px + 30px * var(--mouse-x));      cy: calc(50px + 30px * var(--mouse-y));    }        #eye-wrap {      overflow: hidden;    }        .error-text {      font-size: 120px;    }        .alarm {      animation: alarmOn 0.5s infinite;    }        @keyframes alarmOn {      to {        fill: darkred;      }    }  /style>/head>body>  svg xmlnshttp://www.w3.org/2000/svg idrobot-error viewBox0 0 260 118.9 roleimg>    title xml:langen>DCG Error/title>        defs>      clipPath idwhite-clip>        circle idwhite-eye fill#cacaca cx130 cy65 r20 />      /clipPath>      text idtext-s classerror-text y106> DCG /text>    /defs>        path classalarm fill#e62326 dM120.9 19.6V9.1c0-5 4.1-9.1 9.1-9.1h0c5 0 9.1 4.1 9.1 9.1v10.6 />    use xlink:href#text-s x-0.5px y-1px fillblack>/use>    use xlink:href#text-s fill#2b2b2b>/use>        g idrobot>      g ideye-wrap>        use xlink:href#white-eye>/use>        circle ideyef classeye clip-pathurl(#white-clip) fill#000 stroke#2aa7cc stroke-width2 stroke-miterlimit10 cx130 cy65 r11 />        ellipse idwhite-eye fill#2b2b2b cx130 cy40 rx18 ry12 />      /g>      circle classlightblue cx105 cy32 r2.5 idtornillo />      use xlink:href#tornillo x50>/use>      use xlink:href#tornillo x50 y60>/use>      use xlink:href#tornillo y60>/use>    /g>  /svg>    h1>Server owned by De Castro Group/h1>  h2>Go a target_blank hrefhttps://decastro.group>Home!/a>/h2>    script>    var root  document.documentElement;    var eyef  document.getElementById(eyef);    var cx  document.getElementById(eyef).getAttribute(cx);    var cy  document

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ar.decastro.group

Is this malicious?

DNS Resolutions

Port 80