Domain > rdover.net

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Whois

Property	Value
Name	PERFECT PRIVACY, LLC
Email	u636w9zt9ku@networksolutionsprivateregistration.com
Address	12808 Gran Bay Parkway West
Zip Code	32258
City	Jacksonville
State	FL
Country	US
Phone	+1.5707088780
NameServer	NS2.DIGITALMINDS.NET
Created	2000-02-11 05:00:00
Changed	2016-06-08 19:52:10
Expires	2022-02-11 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-05-30	66.18.102.194 (ClassC)
2024-11-25	198.185.159.144 (ClassC)
2025-01-30	198.185.159.145 (ClassC)

HTTP/1.1 400 Bad RequestAge: 0Cache-Control: no-cacheContent-Length: 2061Content-Type: text/html; charsetUTF-8Date: Mon, 25 Nov 2024 00:51:39 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma: no-cacheS

!DOCTYPE html>head>  title>400 Bad Request/title>  meta nameviewport contentwidthdevice-width, initial-scale1>  style typetext/css>  body {    background: white;  }  main {    position: absolute;    top: 50%;    left: 50%;    transform: translate(-50%, -50%);    text-align: center;    min-width: 95vw;  }  main h1 {    font-weight: 400;    font-size: 4.6em;    color: #191919;    margin: 0 0 11px 0;  }  main p {    font-size: 1.4em;    color: #3a3a3a;    font-weight: 400;    line-height: 2em;    margin: 0;  }  main p a {    color: #3a3a3a;    text-decoration: none;    border-bottom: solid 1px #3a3a3a;  }  body {    font-family: Helvetica Neue, Helvetica, Arial, sans-serif;    font-size: 12px;  }  #status-page {    display: none;  }  footer {    position: absolute;    bottom: 22px;    left: 0;    width: 100%;    text-align: center;    line-height: 2em;  }  footer span {    margin: 0 11px;    font-size: 1em;    font-weight: 400;    color: #a9a9a9;    white-space: nowrap;  }  footer span strong {    font-weight: 400;    color: #191919;  }  @media (max-width: 600px) {    body {      font-family: Helvetica Neue, Helvetica, Arial, Sans-Serif;    }  }  /style>/head>body>  main>    h1>400 Bad Request/h1>    p idstatus-page>Please visit a hrefhttps://status.squarespace.com>status.squarespace.com/a> for updates/p>  /main>  footer>    span>strong>I5khe6Sm/wTPseIem @ Mon, 25 Nov 2024 00:51:39 GMT/strong>/span>    span>SEC-43/span>  /footer>  script>    function showStatusPage(){      var statusCode  400;      var statusPageEl  document.getElementById(status-page);      if(!statusPageEl) { return; }      if (statusCode && statusCode > 500 && statusCode  599) {        statusPageEl.style.display  block;      } else {        statusPageEl.style.display  none;      }    };    try {      showStatusPage();    } catch (error) {      console.log(error)    }  /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]

Domain > rdover.net

Is this malicious?

Files that talk to rdover.net

Whois

DNS Resolutions

Port 80