Domain > danilevici.ro

More information on this domain is in AlienVault OTX

Files that talk to danilevici.ro

MD5	A/V
5072fd1648388c78be15a4f8093152bf
89738dbbd644820b21610765fd04f717	[HEUR(high).VBA.Trojan]
dcba7f0912985959af0aa6682906aeb6
d2dc04ecdadb4d9c2af846e4c46ad694	[W2KM_BARTALEX.CQ] [Troj/DocDl-ASF] [W2KM_BARTALEX.CQ] [HEUR(high).VBA.Trojan] [W97M/Downloader]
d4d27236fea8945a29ceee60efd681f6	[HEUR(high).VBA.Trojan]
7ed92e35a0d3494301de2c862d7458d2	[W97M.Dropper.UK] [W97M.Downloader] [W2KM_BARTALEX.PXC] [Trojan.Script.MulDrop.eaftvb] [W97M.DownLoader.825] [W2KM_BARTALEX.PXC] [W97M/Downloader.aul] [Troj/DocDl-ASF] [W2000M/Donoff.AX] [TrojanDownloader:O97M/Adnel] [HEUR.VBA.Trojan.e] [W97M/Downloader] [W97M/Downloader.aul] [W97M/Downloader]
860f5020d7555c28136074c88ad1f177	[Troj/DocDl-ASF] [HEUR(high).VBA.Trojan]
6833577ef10524a8c72e12cb99209f7b	[W97M.Downloader] [W2KM_BARTALEX.PXC] [W2KM_BARTALEX.PXC] [Troj/DocDl-ASF] [TrojanDownloader:O97M/Adnel] [W97M/Downloader] [W97M/Downloader]
045b89888e843f494009a7ffba9d9532
53ce54d7db2903b1170ff44efc2a026c	[W97M/Downloader.aul] [W2KM_BARTALEX.PXC] [W2KM_BARTALEX.PXC] [W97M/Downloader.aul] [Troj/DocDl-ASF] [HEUR(high).VBA.Trojan] [TrojanDownloader:O97M/Adnel] [W97M/Downloader] [W97M/Downloader]
d6e6a83ce1149f0b1b8f4cb0e78dfe96	[W2KM_BARTALEX.PXC] [Troj/DocDl-ASF] [W2KM_BARTALEX.PXC] [TrojanDownloader:O97M/Adnel] [HEUR(high).VBA.Trojan] [W97M/Downloader] [W97M/Downloader.aul] [W97M/Downloader]
cccf798378dd79ba8957338a9423ebfd	[HEUR(high).VBA.Trojan]

Whois

Property	Value
NameServer	ns2.mxserver.ro
Created	2011-04-14 00:00:00
Registrar	Net Design SRL

DNS Resolutions

Date	IP Address
2024-03-28	185.92.195.129 (ClassC)
2025-05-03	104.21.112.1 (ClassC)
2025-07-08	104.21.80.1 (ClassC)
2025-07-14	104.21.96.1 (ClassC)
2025-08-06	104.21.16.1 (ClassC)
2025-09-14	104.21.32.1 (ClassC)
2025-09-17	104.21.48.1 (ClassC)
2025-12-01	172.67.136.13 (ClassC)
2026-02-22	104.21.46.67 (ClassC)

HTTP/1.1 200 OKDate: Wed, 28 Feb 2024 22:31:15 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cacheyes; ExpiresWed, 28-Feb-24 23:31:15 GMT; Domaindanilevici

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    title>Captcha/title>    link relstylesheet          hrefhttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.6/css/bootstrap.min.css          integritysha384-1q8mTJOASx8j1Au+a5WDVnPi2lkFfwwEAa8hDDdjZlpLegxhjVME1fgjWPGmkzs7          crossoriginanonymous>    link hrefdata:image/x-icon;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQEAYAAABPYyMiAAAABmJLR0T///////8JWPfcAAAACXBIWXMAAABIAAAASABGyWs+AAAAF0lEQVRIx2NgGAWjYBSMglEwCkbBSAcACBAAAeaR9cIAAAAASUVORK5CYII          relicon typeimage/x-icon/>    link hrefhttps://fonts.googleapis.com/css?familyNoto+Sans          relstylesheet>    script srchttps://ajax.googleapis.com/ajax/libs/jquery/3.6.3/jquery.min.js>/script>    script srchttps://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js>/script>    script srchttps://www.google.com/recaptcha/api.js?hlen            async defer>    /script>    style>        html, body {            height: 100%;        }        .wraper {            padding-bottom: 56px;            position: relative;            min-height: 100%;        }        .invisible_mode .wraper {            display: none;        }        .header {            height: 63px;            background-color: white;        }        .middle {            height: 186px;            background-color: rgba(55, 171, 99, 0.75);        }        .bottom {            background-color: #f2f2f2;            position: absolute;            bottom: 0px;            top: 249px;            width: 100%;        }        .captcha_absolute {            margin-top: -153px;        }        .captcha_div {            width: 485px;            margin: 0 auto;            box-shadow: 0 5px 8px 0 rgba(0, 0, 0, 0.18), 0 0 8px 0 rgba(0, 0, 0, 0.12);            background-color: white;            padding: 47px 48px 18px 48px;            position: relative;        }        .cap_head {            border-bottom: 1px solid #d8d8d8;            padding-bottom: 17px;            margin: 0 10px 20px 10px;        }        .logo_shield {            display: inline-block;

Port 443

HTTP/1.1 200 OKDate: Wed, 28 Feb 2024 22:31:16 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeSet-Cookie: cl-bypass-cacheyes; ExpiresWed, 28-Feb-24 23:31:16 GMT; Domaindanilevici

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > danilevici.ro

Is this malicious?

Files that talk to danilevici.ro

Whois

DNS Resolutions

Port 80

Port 443