Domain > www.leprimodels.it

More information on this domain is in AlienVault OTX

Files that talk to www.leprimodels.it

MD5	A/V
246f13bb59b23baf67d9a383c9028acc
12210f07f942e8e69d4734403f695762
697c2a1cd4182d9ad1c685dae1173671	[JS.Trojan-Downloader.Nemucod.hm] [Trojan.Script.Heuristic-js.iacgm] [JS/Nemucod.CA1!Eldorado] [JS/Nemucod.ASW!tr]
2a6421f7cf6e85943c168bb035842dd6
457a13188cbabb3225a1e82f083e7af0	[JS.Trojan-Downloader.Nemucod.hm] [Trojan.Script.Heuristic-js.iacgm] [JS/Nemucod.CA1!Eldorado] [JS/Nemucod.ASW!tr]
cb5dff0023c81a67d360c01880ef43be

Whois

Property	Value
Organization	LEPRI FRANCESCO
NameServer	frodo.tiscali.it
Created	2007-12-12 15:56:53
Changed	2015-12-28 00:38:05
Expires	2016-12-12 00:00:00
Registrar	Tiscali Italia s.p.a

DNS Resolutions

Date	IP Address
2025-01-16	31.11.35.129 (ClassC)

HTTP/1.1 200 OKContent-Type: text/htmlLast-Modified: Tue, 28 Nov 2023 10:15:16 GMTAccept-Ranges: bytesETag: 52759cc8e321da1:0Server: Microsoft-IIS/10.0X-Powered-By: ASP.NETDate: Sun, 21 Apr 2024 20:48

html xmlns:vurn:schemas-microsoft-com:vmlxmlns:ourn:schemas-microsoft-com:office:officexmlns:wurn:schemas-microsoft-com:office:wordxmlns:mhttp://schemas.microsoft.com/office/2004/12/ommlxmlnshttp://www.w3.org/TR/REC-html40>head>meta http-equivContent-Type contenttext/html; charsetwindows-1252>meta nameProgId contentWord.Document>meta nameGenerator contentMicrosoft Word 15>meta nameOriginator contentMicrosoft Word 15>link relFile-List hrefindex_files/filelist.xml>link relEdit-Time-Data hrefindex_files/editdata.mso>!--if !mso>style>v:* {behavior:url(#default#VML);}o:* {behavior:url(#default#VML);}w:* {behavior:url(#default#VML);}.shape {behavior:url(#default#VML);}/style>!endif-->!--if gte mso 9>xml> o:DocumentProperties>  o:Author>SG/o:Author>  o:LastAuthor>SIGNORELLO Giuseppe  TENOVA/o:LastAuthor>  o:Revision>19/o:Revision>  o:Created>2017-01-24T13:47:00Z/o:Created>  o:LastSaved>2023-11-28T10:14:00Z/o:LastSaved>  o:Pages>3/o:Pages>  o:Words>204/o:Words>  o:Characters>1169/o:Characters>  o:Company>Techint Industrial Corporation s.p.a./o:Company>  o:Lines>9/o:Lines>  o:Paragraphs>2/o:Paragraphs>  o:CharactersWithSpaces>1371/o:CharactersWithSpaces>  o:Version>16.00/o:Version> /o:DocumentProperties> o:OfficeDocumentSettings>  o:AllowPNG/> /o:OfficeDocumentSettings>/xml>!endif-->link relthemeData hrefindex_files/themedata.thmx>link relcolorSchemeMapping hrefindex_files/colorschememapping.xml>!--if gte mso 9>xml> w:WordDocument>  w:View>Print/w:View>  w:Zoom>220/w:Zoom>  w:SpellingState>Clean/w:SpellingState>  w:GrammarState>Clean/w:GrammarState>  w:TrackMoves>false/w:TrackMoves>  w:TrackFormatting/>  w:HyphenationZone>14/w:HyphenationZone>  w:ValidateAgainstSchemas/>  w:SaveIfXMLInvalid>false/w:SaveIfXMLInvalid>  w:IgnoreMixedContent>false/w:IgnoreMixedContent>  w:AlwaysShowPlaceholderText>false/w:AlwaysShowPlaceholderText>  w:DoNotPromoteQF/>  w:LidThemeOther>IT/w:LidThemeOther>  w:LidThemeAsian>X-NONE/w:LidThemeAsian>  w:LidThemeComplexScript>X-NONE/w:LidThemeComplexScript>  w:Compatibility>   w:BreakWrappedTables/>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.leprimodels.it

Is this malicious?

Files that talk to www.leprimodels.it

Whois

DNS Resolutions

Port 80