Domain > roomkeepers.org

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to roomkeepers.org

MD5	A/V
a33f4d98ec3bfb9d24d85f0f9fdc27ff	[W32.KgomowR.Trojan] [Trojan.CryptoWall] [Trojan.Cryptodef!] [W32/Trojan.EBHI-1793] [Trojan.Cryptodefense] [TROJ_HPMYAPP.SMA] [Trojan-Ransom.Win32.Cryptodef.vua] [Trojan.Win32.Rack.dtlpbu] [Mal/Zbot-TY] [Trojan.Encoder.514] [TROJ_HPMYAPP.SMA] [TR/Crypt.Xpack.2471] [Trojan[Backdoor]/Win32.Androm] [Ransom:Win32/Crowti.A] [Trojan.Win32.CryptoLocker.270336[h]] [Trojan/Win32.Ransomcrypt] [Trojan.Win32.Ransom.vua] [Win32/Filecoder.CO] [Win32.Trojan.Cryptodef.Ljtv] [Trojan.Win32.Filecoder] [W32/Cryptodef.TY!tr] [SHeur4.CKOT] [Trj/Chgt.O]
770e47407a01a55418585956d1f8265b	[Win32/Filecoder.CO] [Trojan-Ransom.Win32.Cryptodef.vvg] [TR/Crypt.ZPACK.3635] [Trojan/Win32.Crowti] [FileCryptor.CLP]
f52679c115377e42943b0427d968f891	[RDN/Suspicious.bfr!bk] [Trojan.Cryptodefense] [TROJ_CRYPWALL.BTM] [Artemis!Trojan] [TR/Crypt.ZPACK.3011] [Trj/Chgt.O] [Crypt4.BDEN] [Adware.Win32.iBryte.DOGK]
c0f325c8ecbb8b1f2f9970606ac8a16d	[W32.VariantMikeyAL.Trojan] [TrojanPWS.Zbot.A4] [Trojan.Kovter] [Trojan.Cryptodef.Win32.462] [Trojan/Injector.ceej] [Trojan.Cryptodefense] [TROJ_CRYPWALL.XXTXK] [Trojan.Win32.Encoder.dtmzlh] [UnclassifiedMalware] [TROJ_CRYPWALL.XXTXK] [BehavesLike.Win32.PWSZbot.dc] [Mal/Zbot-UE] [TR/Injector.217088.68] [Trojan[Backdoor]/Win32.Androm] [Trojan.Symmi.DD7BA] [Trojan.Win32.U.CryptoLocker.274432[h]] [VirTool:Win32/Injector] [Trojan/Win32.Ransomcrypt] [Backdoor.Androm] [Trj/Chgt.O] [Trojan.Cryptodef!] [Trojan-Spy.Zbot] [W32/Injector.CEEJ!tr] [Trojan.Win32.Ransom.vyv]

DNS Resolutions

Date	IP Address
2015-07-02	78.153.215.201 (ClassC)
2024-12-28	198.49.23.144 (ClassC)

HTTP/1.1 400 Bad RequestCache-Control: no-cache, must-revalidateContent-Length: 2061Content-Type: text/html; charsetUTF-8Date: Sun, 25 Aug 2024 04:41:26 UTCExpires: Thu, 01 Jan 1970 00:00:00 UTCPragma

!DOCTYPE html>head>  title>400 Bad Request/title>  meta nameviewport contentwidthdevice-width, initial-scale1>  style typetext/css>  body {    background: white;  }  main {    position: absolute;    top: 50%;    left: 50%;    transform: translate(-50%, -50%);    text-align: center;    min-width: 95vw;  }  main h1 {    font-weight: 400;    font-size: 4.6em;    color: #191919;    margin: 0 0 11px 0;  }  main p {    font-size: 1.4em;    color: #3a3a3a;    font-weight: 400;    line-height: 2em;    margin: 0;  }  main p a {    color: #3a3a3a;    text-decoration: none;    border-bottom: solid 1px #3a3a3a;  }  body {    font-family: Helvetica Neue, Helvetica, Arial, sans-serif;    font-size: 12px;  }  #status-page {    display: none;  }  footer {    position: absolute;    bottom: 22px;    left: 0;    width: 100%;    text-align: center;    line-height: 2em;  }  footer span {    margin: 0 11px;    font-size: 1em;    font-weight: 400;    color: #a9a9a9;    white-space: nowrap;  }  footer span strong {    font-weight: 400;    color: #191919;  }  @media (max-width: 600px) {    body {      font-family: Helvetica Neue, Helvetica, Arial, Sans-Serif;    }  }  /style>/head>body>  main>    h1>400 Bad Request/h1>    p idstatus-page>Please visit a hrefhttps://status.squarespace.com>status.squarespace.com/a> for updates/p>  /main>  footer>    span>strong>qATkN4BQ/x6RUBA0K @ Sun, 25 Aug 2024 04:41:26 GMT/strong>/span>    span>SEC-43/span>  /footer>  script>    function showStatusPage(){      var statusCode  400;      var statusPageEl  document.getElementById(status-page);      if(!statusPageEl) { return; }      if (statusCode && statusCode > 500 && statusCode  599) {        statusPageEl.style.display  block;      } else {        statusPageEl.style.display  none;      }    };    try {      showStatusPage();    } catch (error) {      console.log(error)    }  /script>/body>/html>

Port 443

!DOCTYPE html>head>  title>400 Bad Request/title>  meta nameviewport contentwidthdevice-width, initial-scale1>  style typetext/css>  body {    background: white;  }  main {    position: absolute;    top: 50%;    left: 50%;    transform: translate(-50%, -50%);    text-align: center;    min-width: 95vw;  }  main h1 {    font-weight: 400;    font-size: 4.6em;    color: #191919;    margin: 0 0 11px 0;  }  main p {    font-size: 1.4em;    color: #3a3a3a;    font-weight: 400;    line-height: 2em;    margin: 0;  }  main p a {    color: #3a3a3a;    text-decoration: none;    border-bottom: solid 1px #3a3a3a;  }  body {    font-family: Helvetica Neue, Helvetica, Arial, sans-serif;    font-size: 12px;  }  #status-page {    display: none;  }  footer {    position: absolute;    bottom: 22px;    left: 0;    width: 100%;    text-align: center;    line-height: 2em;  }  footer span {    margin: 0 11px;    font-size: 1em;    font-weight: 400;    color: #a9a9a9;    white-space: nowrap;  }  footer span strong {    font-weight: 400;    color: #191919;  }  @media (max-width: 600px) {    body {      font-family: Helvetica Neue, Helvetica, Arial, Sans-Serif;    }  }  /style>/head>body>  main>    h1>400 Bad Request/h1>    p idstatus-page>Please visit a hrefhttps://status.squarespace.com>status.squarespace.com/a> for updates/p>  /main>  footer>    span>strong>om3RiHf9/D6AtRuAv @ Sun, 25 Aug 2024 04:41:26 GMT/strong>/span>    span>SEC-43/span>  /footer>  script>    function showStatusPage(){      var statusCode  400;      var statusPageEl  document.getElementById(status-page);      if(!statusPageEl) { return; }      if (statusCode && statusCode > 500 && statusCode  599) {        statusPageEl.style.display  block;      } else {        statusPageEl.style.display  none;      }    };    try {      showStatusPage();    } catch (error) {      console.log(error)    }  /script>/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > roomkeepers.org

Is this malicious?

Files that talk to roomkeepers.org

DNS Resolutions

Port 80

Port 443