Domain > myextreme.1x.de

More information on this domain is in AlienVault OTX

Files that talk to myextreme.1x.de

MD5	A/V
4bf94db53e0926e12d55685e4c1826aa	[Upatre.FH] [BehavesLike.Win32.Downloader.mm] [Trojan.Email.FakeDoc] [W32/Trojan3.MJC] [Downloader.Upatre] [Trojan-Downloader.Win32.Upatre.ecr] [Trojan.Downloader.JRGB] [Trojan.DownLoader11.46399] [W32/Trojan.MIWA-1617] [TR/Kryptik.aita] [TrojanDownloader:Win32/Upatre.BA] [Trojan.Win32.Waski.bA] [Win32/TrojanDownloader.Waski.A] [Trojan-Downloader.Waski] [W32/Kryptik.CRAR!tr] [Artemis!4BF94DB53E09] [W32/Trojan.PMUA-8677] [TROJ_UPATRE.WYI] [Trojan.Win32.Kryptik.BCRAR] [Win32/Upatre.SNDcGd] [TrojanDownloader.Upatre.rw3] [Win.Trojan.Downloader-64127] [Trojan-Downloader.Win32.Waski] [Trojan-Downloader*W32/Upatre.I] [Zbot.VKU] [Trojan-Downloader.Win32.Upatre]
352e6c4d92cf67e8b854cf0005f36096
f92217ff5d3cbe8e33df34e409badfa8	[Trojan.Downloader.JRGB] [Trojan.Email.FakeDoc] [W32/Trojan3.MJC] [Downloader.Upatre] [Upatre.FH] [TROJ_UPATRE.WYI] [Trojan-Downloader.Win32.Upatre.ecr] [Trojan.DownLoader11.46399] [W32/Trojan.MIWA-1617] [TR/Kryptik.aita] [TrojanDownloader:Win32/Upatre.BA] [Win32/TrojanDownloader.Waski.A] [Trojan-Downloader.Waski] [W32/Kryptik.CRAR!tr] [Trojan.Win32.Waski.bA]

Whois

Property	Value
Email	info@birawu.com
NameServer	ns2.subdomain.com
Changed	2012-09-05 12:34:23

DNS Resolutions

Date	IP Address
2014-11-24	5.9.48.143 (ClassC)
2014-11-27	46.4.149.202 (ClassC)
2014-12-11	46.4.149.202 (ClassC)
2015-03-08	188.40.138.148 (ClassC)
2019-08-15	144.76.162.245 (ClassC)
2024-12-27	95.217.58.108 (ClassC)

Port 80

HTTP/1.0 503 Service UnavailableDate: Tue, 16 Jul 2019 12:02:41 GMTServer: Apache/2.4.10 (Debian)Retry-After: 604800Connection: closeContent-Type: text/html; charsetUTF-8

!DOCTYPE html>html langen>    head>        meta charsetutf-8>        meta http-equivX-UA-Compatible contentIEedge>        meta nameviewport contentwidthdevice-width, initial-scale1>        meta http-equivcontent-type contenttext/html; charsetutf-8>        meta namerobots contentNOINDEX, NOFOLLOW>        meta namedescription contentThe domain myextreme.1x.de is still free>        title>myextreme.1x.de is still free/title>        script typetext/javascript>  var _gaq  ;  _gaq.push(_setAccount, UA-35990445-8);  _gaq.push(_setDomainName, myextreme.1x.de);  _gaq.push(_setCustomVar, 1, bereich, Free, 3);  _gaq.push(_setCustomVar, 2, Domain, 1x.de, 3);  _gaq.push(_setCustomVar, 5, Subdomain, myextreme.1x.de, 3);  _gaq.push(_setCustomVar, 4, Domain-Target, subdomain.net, 3);  _gaq.push(_gat._anonymizeIp);  _gaq.push(_trackPageview);  (function() {    var ga  document.createElement(script); ga.type  text/javascript; ga.async  true;    ga.src  (https:  document.location.protocol ? https://ssl : http://www) + .google-analytics.com/ga.js;    var s  document.getElementsByTagName(script)0; s.parentNode.insertBefore(ga, s);  })();  _gaq  ;/script>        link href/assets/custom.css relstylesheet>                !--if lt IE 9>            script srchttps://oss.maxcdn.com/html5shiv/3.7.2/html5shiv.min.js>/script>            script srchttps://oss.maxcdn.com/respond/1.4.2/respond.min.js>/script>        !endif-->    /head>    body>        div idwrapper>            div idmain>div idheaders>                div idheader1>                    div idlogo>                        div classwidth-50 stylefloat: left;>                            a hrefhttp://www.subdomain.com/redirect/1x.de/ target_top>                                img srchttp://www.subdomain.com/redirect/1x.de/static/images/logo.gif alt1x.de logo>                            /a>                        /div>                    /div>                /div>                div idbody>                    div idcontent>                        div classbox>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > myextreme.1x.de

Is this malicious?

Files that talk to myextreme.1x.de

Whois

DNS Resolutions

Port 80