Domain > gromasgboleslawiec.cba.pl

More information on this domain is in AlienVault OTX

Files that talk to gromasgboleslawiec.cba.pl

MD5	A/V
4ab986ae6d16ef28bc904368daef2631	[JS/Locky.AR!Eldorado] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [JS/Locky.AR!Eldorado]
139bb5342764f830b7df4a40b732b2ec	[Trojan.Script.DLJ] [JS/Nemucod.mr] [Trojan.Script.DLJ] [JS.Trojan-Downloader.Nemucod.im] [JS/Locky.AR] [JS.Downloader] [JS/TrojanDownloader.Nemucod.ASH] [Trojan.Script.DLJ] [Trojan.Script.Heuristic-js.iacgm] [Troj.Downloader.Script!c] [Js.Trojan.Raas.Auto] [Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS.DownLoader.2028] [BehavesLike.JS.ExploitBlacole.qx] [Troj/JsDwnLdr-T] [JS/Locky.AR] [JS/Dldr.Locky.111777] [TrojanDownloader:JS/Nemucod.GU] [Trojan.Script.DLJ] [JS/Obfus.S111] [Trojan.Script.DLJ] [Trojan-Downloader.JS.Nemucod] [JS/Nemucod.ASB!tr.dldr]
64b6233a81182311916c41eb145d3ea0	[Trojan.Script.DLJ] [JS/Nemucod.mr] [Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS.Trojan-Downloader.Nemucod.im] [JS/Locky.AR] [JS.Downloader] [JS/TrojanDownloader.Nemucod.ASH] [JS_NEMUCOD.DLDSANS] [Trojan.Script.Heuristic-js.iacgm] [Js.Trojan.Raas.Auto] [Trojan.Script.DLJ] [Trojan.Script.DLJ] [JS.DownLoader.2028] [JS_NEMUCOD.DLDSANS] [BehavesLike.JS.ExploitBlacole.qx] [Troj/JsDwnLdr-T] [JS/Locky.AR] [JS/Dldr.Locky.111777] [TrojanDownloader:JS/Nemucod] [Js.Dldr.Locky!c] [JS/Obfus.S111] [Trojan.Script.DLJ] [Trojan.Script.DLJ] [Trojan-Downloader.JS.Nemucod] [JS/Nemucod.ASB!tr.dldr]

Whois

Property	Value
NameServer	ns2.cba.pl
Created	2005.01.14 14:36:58
Changed	2016.02.29 12:17:21
Expires	2017.03.15 14:36:58
Registrar	Abc Hosting Ltd.

DNS Resolutions

Date	IP Address
2025-08-09	95.211.144.68 (ClassC)

Port 80

HTTP/1.1 202 AcceptedServer: nginxDate: Fri, 12 Jan 2024 02:32:40 GMTContent-Type: text/htmlContent-Length: 4927Connection: keep-aliveKeep-Alive: timeout50ETag: 65776894-133f

!DOCTYPE html>html>head>script typetext/javascript srchttps://www.cba.pl/scripts/punycode.js>/script>script typetext/javascript>var pattern  /www./i;var domena  location.host;if (domena.match(pattern)) {    domena  domena.substr(4);}domena  toUnicode(domena);function kuki(){    var d  new Date();    d.setTime(d.getTime() + (30*24*60*60*1000));    var expires  expires+ d.toUTCString();    document.cookie  cbatest7blablabla; + expires + ;path/;    window.location.reload();}function getDomain(){    return https://www.cba.pl/pl/donate/ + domena;}/script>title>CBA/title>meta http-equivContent-Type contenttext/html; charsetutf-8>link relshortcut icon typeimage/png hrefhttps://www.cba.pl/img/favicon.png>!--start:!isRtl-->style typetext/css>html,body{	height: 100%;	margin: 0px;	padding: 0px;	font-family: sans-serif, Verdana, Helvetica;	background-color: transparent;	color: #0D56C2;	font-weight:normal;	background: url(https://www.cba.pl/img/404.png);	background-size: cover;	background-attachment: fixed;}body > table{	filter: none !important;}a:link,a:visited,a:hover{	color: #0D56C2;}.domain{	font-weight:bold;	font-size: 120%;}h1{    color:#0D56C2;}h2{    font-weight: normal;    color:w#0D56C2;}h4{    font-weight: normal;    color:#0D56C2;}.first_part{	border-bottom: 0px solid #C5C5C5;	padding: 10px;	padding-bottom: 10px;}.first_part img{	height:auto;	margin-bottom: 5px;}.button {  background-color: #2F80F5; /* Blue */  border: none;  color: white;  padding: 15px 32px;  text-align: center;  text-decoration: none;  display: inline-block;  font-size: 16px;  margin: 4px 2px;  transition-duration: 0.4s;  cursor: pointer;}.button:hover a{  background-color: #1b4c96 /* Darker Blue */  color: white;}td	img{	vertical-align: middle;	margin-right: 1px;}.tools td div{	width: 150px;	text-align:left;	height:40px;}.tools td div a{	text-decoration: none;}.tools td:hover a{	text-decoration: underline;}.tools td div a:first-child{	float:left;	vertical-align: middle;}.tools td div a:last-child{	vertical-align: middle;	line-height: 1.2;}tabl

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gromasgboleslawiec.cba.pl

Is this malicious?

Files that talk to gromasgboleslawiec.cba.pl

Whois

DNS Resolutions

Port 80