Domain > syrianmalware.com

More information on this domain is in AlienVault OTX

Property	Value
Email	NG324385SSC2ATW@PROXY.DREAMHOST.COM
NameServer	NS2.DREAMHOST.COM
Created	2012-06-26 00:00:00
Changed	2015-06-27 00:00:00
Expires	2016-06-26 00:00:00
Registrar	DREAMHOST, LLC

DNS Resolutions

Date	IP Address
2025-04-08	67.205.25.115 (ClassC)

HTTP/1.1 200 OKDate: Mon, 24 Jun 2024 23:12:03 GMTServer: ApacheUpgrade: h2Connection: UpgradeLast-Modified: Wed, 27 Oct 2021 17:42:53 GMTETag: 20bb-5cf591fa99ce2Accept-Ranges: bytesContent-Length: 83

!DOCTYPE html>html langen>  head>  meta charsetutf-8>  meta http-equivX-UA-Compatible contentIEedge>  meta nameviewport contentwidthdevice-width, initial-scale1>  title>Syrian Malware | Samples from the conflict in Syria/title>  meta namedescription contentA catalog of malware used in the Syrian civil war.>  link relstylesheet href/assets/main.css>  link relcanonical hrefhttps://syrianmalware.com/>  link relalternate typeapplication/rss+xml titleSyrian Malware | Samples from the conflict in Syria href/feed.xml>    /head>  body>    header classsite-header rolebanner>  div classwrapper>    a classsite-title href/>Syrian Malware | Samples from the conflict in Syria/a>    nav classsite-nav>      span classmenu-icon>        svg viewBox0 0 18 15 width18px height15px>          path fill#424242 dM18,1.484c0,0.82-0.665,1.484-1.484,1.484H1.484C0.665,2.969,0,2.304,0,1.484l0,0C0,0.665,0.665,0,1.484,0 h15.031C17.335,0,18,0.665,18,1.484L18,1.484z/>          path fill#424242 dM18,7.516C18,8.335,17.335,9,16.516,9H1.484C0.665,9,0,8.335,0,7.516l0,0c0-0.82,0.665-1.484,1.484-1.484 h15.031C17.335,6.031,18,6.696,18,7.516L18,7.516z/>          path fill#424242 dM18,13.516C18,14.335,17.335,15,16.516,15H1.484C0.665,15,0,14.335,0,13.516l0,0 c0-0.82,0.665-1.484,1.484-1.484h15.031C17.335,12.031,18,12.696,18,13.516L18,13.516z/>        /svg>      /span>      div classtrigger>                            a classpage-link href/about/>About/a>                                                        a classpage-link href/requests/>Requests/a>                                                                              /div>    /nav>  /div>/header>    main classpage-content aria-labelContent>      div classwrapper>        h2>Samples/h2>The password to all sample archives is: infectedbr>br>table border1px styleborder-collapse: collapse;>	tr>		th>Filename/th>		th>MD5/th>	/tr>		tr>		td>XTremeRAT_silvia.exe/td>		td>a href/fb6e419e0fd9c2f39be43bcadbd2879f.html>fb6e419e0fd9c2f39be43bcadbd2879f/a>/td>	/tr>		tr>		td>اسماء بعض الممولين في س

Subdomains

Date	Domain	IP
www.syrianmalware.com	2025-03-21	67.205.25.115

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
752a4e3c321fa7748afa44b6887df52d
c065ec0607537b3e948158b5bc41d93a
ba95a1aa28c275bbde77f1eb9d3625b8
7e947a0240029754e0ea97215e8f15a3
e16952253d0d42f4139430cfc8eedd73
e6bc4dda21a5231f2f6cd67d6ac9c324
1707fc7e4874547ba3e3745902dd5ae1
808a2cd809d1747fd978b82ee709410c
296f6259236820f35be8662a5021aded
8cdf6ec22440c563d105bde4889ecf92
9bc8f8855cf2cdfdc83359347a586a84
70a345e83a513b219ac992847bd5f659
c8fe28765731d941b0f24ea0ac01d77b
7927d9ea795290488f8cd7924ec6053a
59559b2928fc287539f10662c6d3e4c1
e02f8e53f4d57f69047b3fe12a8cd9de
7d867ca90fe4482644edc76ff073f402
5c7e8eb83cf4c0ec2ee983b5321dd572
52b2d7c9b32f9fa28de147e38864f7de
d7c37400a31e359dbd20e29f84bebf7b

Domain > syrianmalware.com

Is this malicious?

Files that talk to syrianmalware.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains