Domain > aibolitavto.ru

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to aibolitavto.ru

MD5	A/V
960de7fdbe42f9ca1c6e3f47cdefd96f	[JS:Trojan.JS.Downloader.FG] [JS:Trojan.JS.Downloader.FG] [JS:Trojan.JS.Downloader.FG] [JS.Downloader] [JS/TrojanDownloader.Nemucod.NX] [Trojan.Script.Nemucod.ebdqco] [JS:Trojan.JS.Downloader.FG] [Troj/JSDldr-GV] [JS:Trojan.JS.Downloader.FG] [TrojanDownloader:JS/Swabfex] [JS:Trojan.JS.Downloader.FG] [JS:Trojan.JS.Downloader.FG] [JS/Obfus.S20] [JS/Nemucod.ge] [Js.Trojan.Raas.Auto] [Trojan-Downloader.JS.Nemucod]

DNS Resolutions

Date	IP Address
2025-01-09	62.122.170.171 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginx/1.14.1Date: Thu, 09 Jan 2025 09:13:41 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/7.2.24

!DOCTYPE html>html langen-us classno-js>	head>		meta charsetutf-8>		meta nameviewport contentwidthdevice-width, initial-scale1.0>        meta nameauthor contentSNPARKING />        !-- Yandex.Metrika counter -->        script typetext/javascript >            (function(m,e,t,r,i,k,a){mimi||function(){(mi.ami.a||).push(arguments)};                mi.l1*new Date();                for (var j  0; j  document.scripts.length; j++) {if (document.scriptsj.src  r) { return; }}                ke.createElement(t),ae.getElementsByTagName(t)0,k.async1,k.srcr,a.parentNode.insertBefore(k,a)})            (window, document, script, https://mc.yandex.ru/metrika/tag.js, ym);            ym(97166200, init, {                clickmap:true,                trackLinks:true,                accurateTrackBounce:true            });        /script>        noscript>div>img srchttps://mc.yandex.ru/watch/97166200 styleposition:absolute; left:-9999px; alt />/div>/noscript>        !-- /Yandex.Metrika counter -->	/head>	body>		    script typetext/javascript>	var _paq  _paq || ;    /script>							script>				//var timerId  setInterval(function() {					//if (_paq ! null && typeof _paq  object && _paq.length  undefined) {						//clearInterval(timerId);												window.location  http://domains.domainname.ru/?aibolitavto.ru;												//return false;					// }				//}, 50);			/script>			/body>/html>

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > aibolitavto.ru

Is this malicious?

Files that talk to aibolitavto.ru

DNS Resolutions

Port 80