Domain > pil.dk

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to pil.dk

MD5	A/V
3d79b35a81f544862ae5a347831857c6	[HW32.CDB.Eb76] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dtjw] [UnclassifiedMalware] [BackDoor.Slym.13011] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.Ae] [Win32/Trojan.337]

DNS Resolutions

Date	IP Address
2025-02-09	185.126.153.27 (ClassC)

Port 443

HTTP/1.1 200 OKServer: nginxDate: Fri, 18 Aug 2023 12:30:55 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-alive

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Transitional//EN http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd> html xmlnshttp://www.w3.org/1999/xhtml xml:langda langda> head>  	title>pil.dk | det sikre valg til stabil drift/title>	 	meta http-equivContent-Type contenttext/html; charsetUTF-8 />	link relstylesheet typetext/css mediascreen href/css/main.css />	!--link relshortcut icon href/favicon.ico /> --> !-- Fjern udkommenteringen ved denne linje, hvis der er oprettet favicon -->	meta namedescription contentBeskrivelse af website />	meta namekeywords contentKeywords til website />	!-- Indsæt Google Analytics og ekstra javascript biblioteker her -->	!-- Matomo -->	script typetext/javascript>	  var _paq  window._paq || ;	  /* tracker methods like setCustomDimension should be called before trackPageView */	  _paq.push(setCookieDomain, *.pil.dk);	  _paq.push(trackPageView);	  _paq.push(enableLinkTracking);	  (function() {	    var uhttps://matomo.quickpay.net/;	    _paq.push(setTrackerUrl, u+matomo.php);	    _paq.push(setSiteId, 4);	    var ddocument, gd.createElement(script), sd.getElementsByTagName(script)0;	    g.typetext/javascript; g.asynctrue; g.defertrue; g.srcu+matomo.js; s.parentNode.insertBefore(g,s);	  })();	/script>	noscript>p>img srchttps://matomo.quickpay.net/matomo.php?idsite4&rec1 styleborder:0; alt />/p>/noscript>	!-- End Matomo Code -->/head>body>	div idcontainer>		div idheader>						div idlogo>				a href/>img src/images/pil.png altpil.dk titlepil.dk/>/a>			/div>			div idsearch>				form actionhttps://pil.dk/search/ idcse-search-box>					input typehidden namecx value002663237520744586597:v6zevf6avpw />					div>						input typehidden namecof valueFORID:11 />						input typehidden nameie valueUTF-8 />						input typetext nameq idsearchquery autocompleteon size18 />						input typesubmit namesa idsearchquerySubmit valueSøg />					/div>				/form>				script typetext/javascript srchttps://www.google.com/cse/brand?formcse-search-box&langda>/script>							/div>			div classclear>				!-- Clearfix -

Subdomains

Date	Domain	IP
ns1.pil.dk	2025-01-27	185.126.152.22
mx02.pil.dk	2014-07-06	195.41.47.12
NS2.PIL.DK	2025-01-23	178.63.167.141
ns3.pil.dk	2024-06-30	185.126.152.27
webmail.pil.dk	2024-10-11	185.126.153.75
chafpin.pil.dk	2024-12-09	185.126.152.22
rixo.pil.dk	2024-10-03	178.63.167.141
prod10-safeticket.pil.dk	2024-11-14	91.223.235.210
www.pil.dk	2025-01-28	185.126.153.27

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > pil.dk

Is this malicious?

Files that talk to pil.dk

DNS Resolutions

Port 80

Port 443

Subdomains