Domain > rootsweb.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to rootsweb.com

MD5	A/V
69105950b2bb95843dea5937bea0e8f0	[HW32.CDB.5919] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
1929530a1f2d6d48a87aac928220e460	[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]
75147b8dd7796762a48bd315293f0817	[FakeSecTool-FCI!75147B8DD779] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.BDPK!tr] [Crypt_s.EPS]
3223f61af50aa26a1c3bb96fe1779011	[HW32.CDB.D56b] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux.Win32.9065] [Trojan.Win32.Kryptik.czfnsp] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.dueu] [Backdoor.Hlux!DdFHfWii/ns] [UnclassifiedMalware] [TR/Kryptik.oenzk] [Backdoor:Win32/Kelihos] [Trojan/Win32.FakeAV] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.cri] [Trojan.Crypt3] [W32/Kryptik.CBOM!tr] [Crypt3.ORV] [Backdoor.Win32.Hlux.Acmu] [Win32/Trojan.7bf]
00e2f3498f737dc82cd2b17e8d797638
a51d3c758d54aa3024379b1cd28f11ab	[Trojan.JS.Downloader.BWC] [Trojan.JS.Downloader.BWC] [JS/Exploit-Blacole.em] [Trojan.JS.Downloader.BWC] [Html.Win32.Script.501428] [Trojan.JS.Downloader.BWC] [Trojan.JS.Downloader.BWC] [JS.Redirector.130] [HEUR_HTJS.PACRYP] [JS/Exploit-Blacole.em] [JS/BlacoleRef.W.66] [Trojan:JS/BlacoleRef.CE] [Trojan.JS.Downloader.BWC] [Trojan.JS.Downloader.BWC] [Trojan.JS.Downloader.BWC] [Trojan.Script] [JS/Crypt.BBEB!tr] [JS/Redir]

Whois

Property	Value
Email	domreg@ancestry.com
NameServer	NS2.P49.DYNECT.NET
Created	1996-01-30 00:00:00
Changed	2014-06-16 00:00:00
Expires	2018-01-31 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2013-03-16	66.43.28.160 (ClassC)
2013-10-17	213.129.93.32 (ClassC)
2014-06-18	66.43.28.142 (ClassC)
2014-06-24	216.146.46.10 (ClassC)
2014-10-31	5.9.125.163 (ClassC)
2015-05-18	66.43.28.142 (ClassC)
2024-11-21	104.18.0.50 (ClassC)
2024-12-28	104.18.1.50 (ClassC)

HTTP/1.1 200 OKDate: Tue, 15 Aug 2023 17:19:03 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveX-DNS-Prefetch-Control: offX-Frame-Options: SAMEORIGINStrict-Tran

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    !--if IE 7>script>document.documentElement.className +  ie ie7;/script>!endif-->    !--if IE 8>script>document.documentElement.className +  ie ie8;/script>!endif-->    !--if IE 9>script>document.documentElement.className +  ie ie9;/script>!endif-->    title>RootsWeb.com Home Page/title>    META NAMEdescription CONTENTRootsWeb - the Internet's oldest and largest FREE genealogical community.  An award winning genealogical resource with searchable databases, free Web space, mailing lists, message boards, and more.>    META NAMEkeywords CONTENTgenealogy, WorldConnect, ancestry, World Connect, GEDCOM, Free, homepages, Social Security Death Index, mailing lists, message boards, search engine, databases, Web sites, websites, archives, ancestors, geneology>    link relcanonical hrefhttp://home.rootsweb.com>    !-- This is for our internal CSS files.  -->    link typetext/css relstylesheet hrefhttps://www.ancestrycdn.com/aa-rw-home/2079/stylesheets/layout.css>    link typetext/css relstylesheet hrefhttps://cmsasset.ancestrycdn.com/etc.clientlibs/ancestry/clientlibs/clientlib-base.min.ACSHASH3c7cfee16e52a4e38ab8a0ca3579fd040a380d1775cc71374ac22b1dd845f175.css>    link typetext/css relstylesheet hrefhttps://www.ancestrycdn.com/aa-rw-home/2079/stylesheets/rwHome.css>    link typetext/css relstylesheet hrefhttps://www.ancestrycdn.com/ui/2.10.0/css/core.css>    !-- Standard .css files -->    !--    link relstylesheet hrefhttps://www.ancestrycdn.com/ui/2.18.0/css/core.css relstylesheet />-->    link hrefhttps://www.ancestrycdn.com/ui/2.18.0/css/core.css relstylesheet />    meta namegoogle-site-verification contentRRGdihAuU8IzdOZBjeJYWfxlQKBEkJvDfyQlWuUUvF4 />    script idjQuery srchttps://www.ancestrycdn.com/ui-static/lib/jquery/1.11.1/jquery.min.js>/script>    script typetext/javascript srchttps://www.ancestrycdn.com/aa-rw-home/2079/scripts/o3.js>/script>    !-- Google Tag Manager -->script>(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:new Date().getTime(),event:gtm

Subdomains

Date	Domain	IP
img.rootsweb.com	2014-07-18	63.85.36.57
mail.rootsweb.com	2014-06-18	66.43.28.152
images.rootsweb.com	2014-06-14	66.43.28.155
support.rootsweb.com	2024-10-02	104.18.38.32

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rootsweb.com

Is this malicious?

Files that talk to rootsweb.com

Whois

DNS Resolutions

Port 443

Subdomains