Domain > cosmosprime.com

More information on this domain is in AlienVault OTX

Property	Value
NameServer	PNS2.W3SERVICES.NET
Created	2006-04-27 00:00:00
Changed	2014-12-31 00:00:00
Expires	2020-04-27 00:00:00
Registrar	PDR LTD. D/B/A PUBLI

DNS Resolutions

Date	IP Address
2014-05-30	100.42.52.96 (ClassC)
2024-05-10	194.233.94.129 (ClassC)
2024-08-10	13.200.162.205 (ClassC)
2025-01-19	94.136.184.37 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Wed, 17 Apr 2024 16:39:58 GMTContent-Type: text/htmlContent-Length: 16210Last-Modified: Wed, 11 Jan 2023 13:17:43 GMTConnection: keep-aliveVary: Accept-EncodingETag:

!DOCTYPE HTML>html langen>head>        !-- Google Tag Manager -->script>(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.srchttps://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);})(window,document,script,dataLayer,GTM-NBN8QC3);/script>!-- End Google Tag Manager -->    meta charsetutf-8>meta nameviewport contentwidthdevice-width, initial-scale1>meta namedescription content>meta nameauthor content>link relshortcut icon hreffavicon.png>link relapple-touch-icon hrefapple-touch-icon.png>link relapple-touch-icon sizes72x72 hrefapple-touch-icon-72x72.png>link relapple-touch-icon sizes114x114 hrefapple-touch-icon-114x114.png>title>Cosmos Group l Flats in thane, Flats on ghodbunder road thane, Ready possession flats in thane, Properties in thane./title>link hrefhttps://fonts.googleapis.com/css?familyPlayfair+Display:400,400i,700,700i|Poppins:300,400,500,600,700 relstylesheet>link hrefhttps://fonts.googleapis.com/css?familyLibre+Baskerville:400i relstylesheet>link hrefcss/style.css relstylesheet mediascreen>link hrefcss/main.css relstylesheet mediascreen>link hrefcss/custom.css relstylesheet mediascreen>/head>body classbody-fullpage>        !-- Google Tag Manager (noscript) -->noscript>iframe srchttps://www.googletagmanager.com/ns.html?idGTM-NBN8QC3height0 width0 styledisplay:none;visibility:hidden>/iframe>/noscript>!-- End Google Tag Manager (noscript) -->!--Banner Popup start-->!--div idboxes>  div iddialog classwindow popp>        div idcarousel-example-generic classcarousel slide carousel-fade data-ridecarousel>    ol classcarousel-indicators>        li data-target#carousel-example-generic data-slide-to0 classactive>/li>        li data-target#carousel-example-generic data-slide-to1 class>/li>    /ol>    div classcarousel-inner classiq rolelistbox>        div classitem active>            img srcimages/slider/cosmos-classique.jpg alt classhidden-xs stylemargin-top:25px>

Port 443

HTTP/1.1 200 OKServer: nginxDate: Wed, 17 Apr 2024 16:39:59 GMTContent-Type: text/htmlContent-Length: 16210Last-Modified: Wed, 11 Jan 2023 13:17:43 GMTConnection: keep-aliveVary: Accept-EncodingETag:

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]

Domain > cosmosprime.com

Is this malicious?

Files that talk to cosmosprime.com

Whois

DNS Resolutions

Port 80

Port 443