ransomware.fi  

---

Details

 

Server IP geolocation

 

Word cloud

 

Web page details & SOME

 

Cookie data

 

Screenshot

 

DNS records

 

Whois history

 

Server response

 

Used technologies

 

Subdomains

 

Hosting

 

Holders domains

 

---

Details

Source: Finnish Transport and Communications Agency (Traficom) and Internet Assigned Numbers Authority (IANA)

State	Registered
Holder	Innovation Labs Limited  (Company), 18874732 GB Buildings, level 4, Triq Il-Watar, Malta +972545691897
Grant Date	2019-10-18
Last Validity Date	2020-10-18
Registrar	Web Lovers AB XBX1301 Ta'Xbiex
Name Servers Please see DNS section for details
Is The DNSSec in Use	No
IANA details for suffix	Top Level Domain (TLD): FI TLD manager: Finnish Transport and Communications Agency Traficom Domain type: Country-code Details

Server IP location

Source: Actual web page - Timestamp: 2020-09-07 23:54
WARNING: Please notice that the location may be totally wrong if server uses e.g. reverse proxy like Cloudflare

IP source	IP address	ASN block data	IP Geolocation
User IP	18.218.127.141	This is not retrieved for now	Country: United States   (US) State: Ohio (OH) City: Columbus Postal code: 43215 Latitude: 39.9653 Longitude: -83.0235 Network: 18.218.0.0/16
Server IP	93.158.119.142	Autonomous System (AS) #: BGP prefix: Country Code: Registry: Allocated: Info:	Country: Sweden   (SE) City: Postal code: Latitude: 59.3247 Longitude: 18.056 Network: 93.158.116.0/22

This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

Word cloud for ransomware.fi

Source: Actual web page - Timestamp: 2020-09-07 23:54
Notice: Miscellaneous words removed from the cloud to enhance the analytics

Web page details for ransomware.fi

Source: Actual web page - Timestamp: 2020-10-17 02:44

Header data & Meta tags	title ransomware.vip - Kasvava verkkorikollisuus robots index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1 viewport width=device-width, initial-scale=1, maximum-scale=1 generator WordPress 5.5.1 not_found emptyen_US. website. ransomware.vip - Kasvava verkkorikollisuus. Kasvava verkkorikollisuus. https://ransomware.vip/. ransomware.vip. description Kasvava verkkorikollisuus
Open Graph (OG) meta tags	og:url https://ransomware.vip/ og:type website og:title ransomware.vip - Kasvava verkkorikollisuus og:locale en_US og:site_name ransomware.vip og:description Kasvava verkkorikollisuus
Twitter cards	twitter:card summary_large_image
Cascading Style Sheets (CSS) (CSS)	https://ransomware.vip/wp-content/themes/fabulist/style.css?ver=5.5.1 https://ransomware.vip/wp-content/themes/fabmasonry/style.css?ver=5.5.1 https://ransomware.vip/wp-content/themes/fabulist/assets/css/slick-theme.min.css?ver=5.5.1 https://fonts.googleapis.com/css?family=oxygen%3a200%2c300%2c400%2c700%7cplayfair+display%3a200%2c300%2c400%2c700%2c900&subset=latin%2clatin-ext https://ransomware.vip/wp-content/themes/fabulist/assets/css/blocks.min.css?ver=5.5.1 https://ransomware.vip/wp-includes/css/dist/block-library/theme.min.css?ver=5.5.1 https://ransomware.vip/wp-content/themes/fabulist/assets/css/slick.min.css?ver=5.5.1 https://ransomware.vip/wp-includes/css/dist/block-library/style.min.css?ver=5.5.1 https://ransomware.vip/wp-content/themes/fabmasonry/style.css?ver=1.0.0
Social Media (SOME) links	Having Social Media content is highly recommended for Search Engine Optimization (SEO)
JavaScript libraries	https://ransomware.vip/wp-content/themes/fabulist/assets/js/packery.min.js?ver=5.5.1 https://ransomware.vip/wp-includes/js/imagesloaded.min.js?ver=4.1.4 https://ransomware.vip/wp-content/themes/fabulist/assets/js/navigation.min.js?ver=20151215 https://ransomware.vip/wp-content/themes/fabulist/assets/js/custom.min.js?ver=20151215 https://ransomware.vip/wp-content/themes/fabulist/assets/js/isotope.min.js?ver=5.5.1 https://ransomware.vip/wp-content/themes/fabulist/assets/js/skip-link-focus-fix.min.js?ver=20151215 https://ransomware.vip/wp-content/themes/fabulist/assets/js/slick.min.js?ver=5.5.1 https://ransomware.vip/wp-includes/js/wp-embed.min.js?ver=5.5.1 https://ransomware.vip/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp

Cookie data for ransomware.fi

Source: Actual web page - Timestamp: 2020-10-17 02:44
Number of cookies: 0

Cookie domain	Cookie values

Screenshot for ransomware.fi

Source: Actual web page - Timestamp: 2020-09-07 23:54

DNS records for ransomware.fi

Source: DNS reponse - Timestamp: 2020-09-07 23:54

A	ransomware.fi    193.14.90.203  (Time to Live: 3588)
NS	b.portsdns.net 104.225.35.101  (Time to Live: 3599) 2607:f740:e635::1  (Time to Live: 3599) a.portsdns.se 45.54.35.101  (Time to Live: 3599) 2607:f740:e009::1  (Time to Live: 3599)
SOA	ransomware.fi    a.portsdns.se (Time to Live: 3599) registry.ports.net

Whois record history for ransomware.fi

Source: Finnish Transport and Communications Agency (Traficom)
Showing latest max 5 detected changes in the records. Changes are highlighted

Date	2018-04-02	2018-05-05	2019-08-07	2019-09-19	2019-10-19
Name	ransomware.fi	ransomware.fi	ransomware.fi	ransomware.fi	ransomware.fi
State	Registered	Registered	Registered	Validity expired	Registered
Holder	Itä-Uudenmaan poliisilaitos	Itä-Uudenmaan poliisilaitos	Itä-Uudenmaan poliisilaitos	Itä-Uudenmaan poliisilaitos	Innovation Labs Limited
Address	Kielotie 21	Kielotie 21	Kielotie 21	Kielotie 21	GB Buildings, level 4, Triq Il-Watar
Country	Finland (FI)	Finland (FI)	Finland (FI)	Finland (FI)	Malta (MT)
GrantDate	2013-09-23T09:38:04	2013-09-23T09:38:04	2013-09-23T09:38:04	2013-09-23T09:38:04	2019-10-18T09:47:29.643
Registrar	Valtion tieto- ja viestintäkeskus, Tuve-yksikkö	Valtion tieto- ja viestintäkeskus, Tuve-yksikkö	Valtion tieto- ja viestintäkeskus, Tuve-yksikkö	Valtion tieto- ja viestintäkeskus, Tuve-yksikkö	Web Lovers AB
PostalArea	Vantaa	Vantaa	Vantaa	Vantaa	Ta'Xbiex
PostalCode	01300	01300	01300	01300	XBX1301
PhoneNumber	+358 295 436 540	+358 295 436 540	+358295436540	+358295436540	+972545691897
IsDNSSecInUse	no	no	no	no	no
OrganizationId	2288666-6	2288666-6	2288666-6	2288666-6	18874732
AssociationType	Government	Government	Government	Government	Company
LastValidityDate	2019-09-18T09:47:05	2019-09-18T09:47:05	2019-09-18T09:47:05	2019-09-18T09:47:05	2020-10-18T09:47:29.643
DepartmentOrContactPerson	Jari Javanainen

Server response for ransomware.fi

Source: Web server reponse - Timestamp: 2020-09-07 23:54

Final URL	https://ransomware.vip/
HTTP Return Code	HTTP/1.1 200 OK
IP Address	93.158.119.142  Autonomous System (AS) #: BGP prefix: Country Code:   () Registry: Allocated: Info:
Server Header	Server: Nginx Via:
Certificate	Issued By: Let's Encrypt Issuer details: O=Let's Encrypt,   United States (US) Issuer details: CN=Let's Encrypt Authority X3 Version: 2 Algorithm: RSA-SHA256 Issued On: 2020-07-27 00:00:00 Expires On: 2020-10-25 00:00:00
Certificate Subject	Country (C): Location (L): Organization (O): Common Name (CN): ransomware.vip
Certificate Alternative Names	ransomware.vip  www.ransomware.vip

Used technologies on ransomware.fi

Source: Web page analysis - Timestamp: 2020-09-07 23:54

Latest review	2020-09-07 23:54
Page language (from header)	fi (This is often false!)
Technologies	Bootstrap (UI Frameworks) (100% propable) Font Awesome (Font Scripts) (100% propable) Google Font API (Font Scripts) (100% propable) Nginx (Web ServersReverse Proxy) (100% propable) PHP 7.2.33 (Programming Languages) (100% propable) animate.css (UI Frameworks) (100% propable)

Known subdomains for ransomware.fi

Source: Search engines and DNS records (NOTICE: Most may not be reachable (internal/DMZ/obsolete)). Showing max rows 700
Number of subdomains found: 1

Subdomain	IP address
www.ransomware.fi	193.14.90.203

Web hosting providers

Source: All valid company websites with content (see below table)
Not enough data to present a graph

Domains owned by same owner (current and past)

Source: Finnish Transport and Communications Agency (Traficom)