Domain > UKR.NET

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to UKR.NET

MD5	A/V
abe19665682ad3e10ba09471775c150b	[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E]
4211b2d7121c11d5f032e6620030a384	[HW32.CDB.Cd7e] [Packed.Win32.Katusha.3!O] [Hlux.ZY] [VirTool:Win32/Obfuscator.WT]
a02dbc158de4bc680950fa18c5122dc0
3220ab9b63a767c299000ea9d9e3a056	[HW32.CDB.1b0b] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!u8SUOkHyYnA] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.RbUfAWB] [Backdoor.Win32.Hlux.dpoo] [Trojan.Win32.Hlux.cxxuzn] [TrojWare.Win32.Kryptik.CAUP] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Backdoor.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Lgjg] [Trojan.Crypt_s] [W32/Kryptik.CAXO!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]
e9a5bc168334d1c8371468d3e033ad32
7abb1e7e80e0f342f0452ae91375fce3
e6d960bf587f5cb1497520fe716f1fb4	[Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [Backdoor:Win32/Kelihos.F] [PE:Malware.XPACK/RDM!5.1]
165f5084043893cc35334b568d0f6ec0	[HW32.CDB.73df] [Packed.Win32.Katusha.3!O] [Win32.Malware!Drop] [Backdoor.Hlux!tc7SLh6zR0c] [WS.Reputation.1] [Kryptik.CCFN] [UnclassifiedMalware] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Backdoor.Win32.Kelihos] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.aBgj] [Win32/Trojan.337]
888cf6888e476ab89daef8385b7ae881	[HW32.CDB.B8e4] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcinh] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfk] [Backdoor.Hlux!Jm3TflIszzA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]
3be8faf7b111dadde0d8e17b428125b0	[Backdoor/W32.Androm.39936.C] [Trojan.Androm.vsg.cw4] [Trojan.Inject] [Trojan/Kryptik.bdbi] [Trojan.Win32.Androm.btkkib] [WS.Reputation.1] [TROJ_CUTWAIL.PQP] [Backdoor.Win32.Androm.vsg] [Backdoor.Androm!mmztmFLZ69E] [UnclassifiedMalware] [BackDoor.Bulknet.958] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail] [Client-SMTP.39936] [W32/Backdoor.DIPS-1259] [Backdoor.Androm] [Virus.Win32.Cryptor] [W32/Androm.VSG!tr.bdr] [Win32/Cryptor] [W32/Palevo.GEZ.worm]
d38a3646d932d062528aea48d2122315
981a83b3f0d4a74b0b38becda7c8cb9c	[Artemis!981A83B3F0D4] [Trojan.Win32.Crypt.cxd] [W32/Yakes.FHJN!tr] [Win32/Cryptor]
bf4fa138741ec4af0a0734b28142f7ae	[Crypt2.BLVD] [TrojanDownloader*Win32/Cutwail.BS]
a423bbddf78450753f1a239711408b91	[Crypt_c.ABJD] [TrojanDownloader*Win32/Cutwail.BS]
b3a2add36f28dad15b6901eca370af87	[W32/Trojan.ROYM-5986] [TrojanDownloader.Cutwail.r4] [BackDoor.Bulknet.958] [Win32/Kryptik.BECW] [W32/KRYPTK.SMO2!tr] [Win32/Heur] [Trojan.Crypt] [Trojan.Win32.Cutwail.epf] [RDN/Downloader.a!th] [TrojanDownloader*Win32/Cutwail.BS] [TROJ_KRYPTK.SMO2] [BScope.Trojan.Pushdo]
20837cfed9fcc3df5a3e414c18eff646	[Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
a7374ac98c1099737beb4043b6336c7c
6499206ef99b92bf5002197c3f4b372c	[Trojan.Dropper.USI] [Trojan.Cutwail.AQ] [Backdoor.Pushdo] [Trojan.Dropper.USI] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Win32/Wigon.PB] [BKDR_PUSHDO.SMJ] [Trojan.Win32.Pushdo.bbseki] [Trojan.Dropper.USI] [Troj/Dropr-EK] [UnclassifiedMalware] [Trojan.Dropper.USI] [Trojan.DownLoad3.17030] [Trojan.Wigon.Win32.5105] [BKDR_PUSHDO.SMJ] [BehavesLike.Win32.ZBot.nc] [Backdoor.Pushdo.c] [Trojan[Backdoor]/Win32.Pushdo] [TrojanDownloader:Win32/Cutwail.BE] [Trojan.Dropper.USI] [Trojan.Dropper.USI] [Win32/Tnega.ARIE] [Trojan.Dropper.USI] [Backdoor.Pushdo] [Win32.Trojan.Dropper.bmcn] [Backdoor.Pushdo!x042poc7/s0] [Backdoor.Win32.Pushdo] [W32/CutMail.EE!tr] [SHeur4.ASVE] [Trj/CI.A]
5d099031ca56c9d1bbefca448da2c5b7
49def1b4084ff03c947f80db3065b01f	[Spyware.Zbot.ED] [W32/Trojan3.ITT] [Trojan.Zbot] [Win32/Tnega.LXRNZJC] [TROJ_FRS.ZMA000FK14] [Backdoor.Win32.Androm.empm] [Win32.Malware!Drop] [Artemis!49DEF1B4084F] [Worm:Win32/Gamarue] [W32/Trojan.BFBZ-7110] [Trj/CI.A] [Win32/TrojanDownloader.Wauchos.AD] [Win32.Backdoor.Androm.Pgdq] [Trojan.Crypt.ZPACK9] [Downloader.Small.KUH] [Win32/Trojan.a81] [Trojan.Zbot.IIC]

Whois

Property	Value
Name	PERFECT PRIVACY, LLC
Email	db2x42n742u@networksolutionsprivateregistration.com
Address	12808 Gran Bay Parkway West
Zip Code	32258
City	Jacksonville
State	FL
Country	US
Phone	+1.5707088780
NameServer	NS2.FWDCDN.NET
Created	1999-02-10 05:00:00
Changed	2015-02-11 01:19:26
Expires	2025-02-10 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2009-11-11	195.214.195.101 (ClassC)
2012-11-26	195.214.195.106 (ClassC)
2012-11-26	195.214.195.12 (ClassC)
2012-11-26	213.186.119.86 (ClassC)
2013-07-19	195.214.195.105 (ClassC)
2013-07-19	195.214.195.105 (ClassC)
2013-12-02	212.42.76.253 (ClassC)
2014-06-16	212.42.76.252 (ClassC)
2014-06-24	195.214.195.30 (ClassC)
2014-10-26	195.214.194.27 (ClassC)
2015-02-04	195.214.195.40 (ClassC)
2018-11-03	212.42.76.252 (ClassC)
2019-10-27	212.42.76.253 (ClassC)
2023-08-27	104.18.8.128 (ClassC)
2025-02-09	35.186.218.67 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
hata.ukr.net	2024-11-26	212.42.83.240
zakladki.ukr.net	2024-07-21	212.42.76.248
hmail.ukr.net	2025-02-04	212.42.83.240
cpl.ukr.net	2024-11-26	212.42.83.240
counter.ukr.net	2024-07-31	212.42.73.60
mxs.ukr.net	2013-12-02	212.42.77.251
target.ukr.net	2024-08-04	212.42.82.26
www.target.ukr.net	2024-06-27	212.42.82.26
www.ukr.net	2025-02-04	35.186.218.67

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]