Domain > petebaxter.com

More information on this domain is in AlienVault OTX

Date	IP Address
2014-06-18	117.104.160.134 (ClassC)
2024-09-11	198.185.159.145 (ClassC)
2025-01-03	198.185.159.144 (ClassC)

Port 80

HTTP/1.1 400 Bad RequestCache-Control: no-cache, must-revalidateContent-Length: 2061Content-Type: text/html; charsetUTF-8Date: Wed, 11 Sep 2024 01:17:33 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma

!DOCTYPE html>head>  title>400 Bad Request/title>  meta nameviewport contentwidthdevice-width, initial-scale1>  style typetext/css>  body {    background: white;  }  main {    position: absolute;    top: 50%;    left: 50%;    transform: translate(-50%, -50%);    text-align: center;    min-width: 95vw;  }  main h1 {    font-weight: 400;    font-size: 4.6em;    color: #191919;    margin: 0 0 11px 0;  }  main p {    font-size: 1.4em;    color: #3a3a3a;    font-weight: 400;    line-height: 2em;    margin: 0;  }  main p a {    color: #3a3a3a;    text-decoration: none;    border-bottom: solid 1px #3a3a3a;  }  body {    font-family: Helvetica Neue, Helvetica, Arial, sans-serif;    font-size: 12px;  }  #status-page {    display: none;  }  footer {    position: absolute;    bottom: 22px;    left: 0;    width: 100%;    text-align: center;    line-height: 2em;  }  footer span {    margin: 0 11px;    font-size: 1em;    font-weight: 400;    color: #a9a9a9;    white-space: nowrap;  }  footer span strong {    font-weight: 400;    color: #191919;  }  @media (max-width: 600px) {    body {      font-family: Helvetica Neue, Helvetica, Arial, Sans-Serif;    }  }  /style>/head>body>  main>    h1>400 Bad Request/h1>    p idstatus-page>Please visit a hrefhttps://status.squarespace.com>status.squarespace.com/a> for updates/p>  /main>  footer>    span>strong>FCROt7vR/CRN4q9fN @ Wed, 11 Sep 2024 01:17:33 GMT/strong>/span>    span>SEC-43/span>  /footer>  script>    function showStatusPage(){      var statusCode  400;      var statusPageEl  document.getElementById(status-page);      if(!statusPageEl) { return; }      if (statusCode && statusCode > 500 && statusCode  599) {        statusPageEl.style.display  block;      } else {        statusPageEl.style.display  none;      }    };    try {      showStatusPage();    } catch (error) {      console.log(error)    }  /script>/body>/html>

Port 443

!DOCTYPE html>head>  title>400 Bad Request/title>  meta nameviewport contentwidthdevice-width, initial-scale1>  style typetext/css>  body {    background: white;  }  main {    position: absolute;    top: 50%;    left: 50%;    transform: translate(-50%, -50%);    text-align: center;    min-width: 95vw;  }  main h1 {    font-weight: 400;    font-size: 4.6em;    color: #191919;    margin: 0 0 11px 0;  }  main p {    font-size: 1.4em;    color: #3a3a3a;    font-weight: 400;    line-height: 2em;    margin: 0;  }  main p a {    color: #3a3a3a;    text-decoration: none;    border-bottom: solid 1px #3a3a3a;  }  body {    font-family: Helvetica Neue, Helvetica, Arial, sans-serif;    font-size: 12px;  }  #status-page {    display: none;  }  footer {    position: absolute;    bottom: 22px;    left: 0;    width: 100%;    text-align: center;    line-height: 2em;  }  footer span {    margin: 0 11px;    font-size: 1em;    font-weight: 400;    color: #a9a9a9;    white-space: nowrap;  }  footer span strong {    font-weight: 400;    color: #191919;  }  @media (max-width: 600px) {    body {      font-family: Helvetica Neue, Helvetica, Arial, Sans-Serif;    }  }  /style>/head>body>  main>    h1>400 Bad Request/h1>    p idstatus-page>Please visit a hrefhttps://status.squarespace.com>status.squarespace.com/a> for updates/p>  /main>  footer>    span>strong>MwHrhZNY/2pCSFkVv @ Wed, 11 Sep 2024 01:17:33 GMT/strong>/span>    span>SEC-43/span>  /footer>  script>    function showStatusPage(){      var statusCode  400;      var statusPageEl  document.getElementById(status-page);      if(!statusPageEl) { return; }      if (statusCode && statusCode > 500 && statusCode  599) {        statusPageEl.style.display  block;      } else {        statusPageEl.style.display  none;      }    };    try {      showStatusPage();    } catch (error) {      console.log(error)    }  /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
315325f544912a68464bf38e3edf6371	[HW32.CDB.9e5e] [Backdoor/W32.Hlux.829456.H] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux!aauIqdu764w] [Trojan.FakeAV] [Kryptik.CDQY] [Backdoor.Win32.Hlux.dqyy] [Win32.Backdoor.Hlux.Lhdb] [UnclassifiedMalware] [Trojan.Packed.26581] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aZvR] [Win32/Trojan.337]

Domain > petebaxter.com

Is this malicious?

Files that talk to petebaxter.com

DNS Resolutions

Port 80

Port 443