Domain > rpg.pl

More information on this domain is in AlienVault OTX

Files that talk to rpg.pl

MD5	A/V
651f650dfb3e715927cee5103e68e0c7	[HW32.CDB.F91a] [Packed.Win32.Katusha.1!O] [Kryptik.CCQY] [Backdoor.Win32.Hlux.cri] [Win32.Malware!Drop] [Artemis!651F650DFB3E] [Backdoor:Win32/Kelihos.F] [W32/Hlux.CBWM!tr.bdr] [Crypt_s.GQG] [Backdoor.Win32.Hlux.AB]

Whois

Property	Value
NameServer	ns2.ikp.pl
Created	1998.03.16 12:00:00
Changed	2016.02.29 17:27:24
Expires	2017.03.15 13:00:00
Registrar	nazwa.pl sp. z o.o.

DNS Resolutions

Date	IP Address
2013-10-24	5.39.89.219 (ClassC)
2015-01-22	178.33.174.97 (ClassC)
2015-01-23	149.156.96.9 (ClassC)
2015-01-24	188.165.19.40 (ClassC)
2015-01-26	37.187.45.169 (ClassC)
2025-01-15	85.128.128.104 (ClassC)

HTTP/1.1 200 OKDate: Sun, 27 Aug 2023 11:17:27 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/8.1.21X-CDN-nazwa.pl-location: SEAX-CDN-nazwa.p

!DOCTYPE html PUBLIC -//W3C//DTD XHTML 1.0 Frameset//EN    http://www.w3.org/TR/xhtml1/DTD/xhtml1-frameset.dtd>html>head>    title>/title>    meta http-equivcontent-type contenttext/html; charsetutf-8 />    script src//ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js>/script>    script typetext/javascript>        $(function() {            var d  window.location.hostname.replace(/^www./g, );            var f  $(iframe />).attr(src, https://blackdown.nazwa.pl/?sourceblackdown-kf&d + d).attr(allowfullscreen, true)            $(body).prepend(f); $(title).html(d);        });    /script>/head>style>    body {        margin: 0;    }    iframe {        display: block;        width: 100%;        border: none;        overflow-y: auto;        overflow-x: hidden;        min-height: 100vh;    }/style>body>script srchttps://static.nazwa.pl/rotator/blackdown/banner_script.js>/script>/body>/html>

Subdomains

Date	Domain	IP
arkadia.rpg.pl	2025-01-15	188.165.19.40
www.rpg.pl	2025-01-07	82.210.151.78

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rpg.pl

Is this malicious?

Files that talk to rpg.pl

Whois

DNS Resolutions

Port 80

Subdomains