Domain > blitz174.ru

More information on this domain is in AlienVault OTX

Files that talk to blitz174.ru

MD5	A/V
c93c675deb3cba4a9fff7b0096962737	[HEUR/Macro.Downloader] [HEUR.VBA.Trojan.d] [VBS/Jenxcus.A]
2a7fe51edfdd0aeb14d8ccd9239ad751	[HEUR/Macro.Downloader] [HEUR.VBA.Trojan.d] [VBS/Jenxcus.A] [WM/TrojanDownloader.9BB7!tr]
202780c97c7009e857539152c27a4ba6
771b8289ee3cd40e1ae5899a1da8fc5e	[HEUR/Macro.Downloader] [HEUR.VBA.Trojan.d] [VBS/Jenxcus.A] [WM/TrojanDownloader.9BB7!tr]
d97496316b6179cd4cc7a5fcdef26289	[HEUR/Macro.Downloader] [HEUR.VBA.Trojan.d] [WM/TrojanDownloader.9BB7!tr] [VBS/Jenxcus.A]
baff438836dc291bd4c911bcbfd0223b	[HEUR/Macro.Downloader] [WM/TrojanDownloader.9BB7!tr] [HEUR.VBA.Trojan.d] [VBS/Jenxcus.A]
6fb4289abdabd4b793d0fb01e9a513ba
32ed648d6dd0dfdf232ec4da84030472
90ed82a1fbf00e929068471b2f2d515e	[W97M.Downloader.AVG] [W97M.Downloader.AVG] [W97M.Downloader.AVG] [W97M.Downloader.AVG] [Troj/DocDl-BCV] [W97M.DownLoader.899] [W2KM_DRIDEX.BZ] [PP97M/Downldr] [W2000M/Dldr.Dridex.asdf] [TrojanDownloader:O97M/Bartallex] [W97M.Downloader.AVG] [W97M.Downloader.AVG] [WM/TrojanDownloader.9BB7!tr] [VBS/Jenxcus.A]
823967fbd6f0bb03c16cbb5bcf99c41c	[W97M.Downloader.AVG] [W97M.Downloader.AVG] [W97M.Downloader.AVG] [W2KM_DRIDEX.BZ] [W97M.Downloader.AVG] [Troj/DocDl-BCV] [W97M.DownLoader.899] [W2KM_DRIDEX.BZ] [PP97M/Downldr] [W2000M/Dldr.Dridex.asdf] [TrojanDownloader:O97M/Bartallex] [W97M.Downloader.AVG] [W97M/Downloader] [W97M.Downloader.AVG] [WM/TrojanDownloader.9BB7!tr] [W97M/Downloader] [VBS/Jenxcus.A]
63394f6670246823538417a8252544fb

DNS Resolutions

Date	IP Address
2015-10-13	81.177.135.111 (ClassC)
2016-02-22	81.177.141.15 (ClassC)
2016-02-23	81.177.141.230 (ClassC)
2019-09-05	81.177.140.153 (ClassC)
2025-01-19	81.177.141.232 (ClassC)
2026-02-09	217.107.219.149 (ClassC)

HTTP/1.1 200 OKDate: Fri, 24 May 2019 02:23:41 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveServer: Jino.ru/mod_pizzaSet-Cookie: sidjn06olkpmprcvaimoh8jedbgu

!DOCTYPE html>html>head>    title>Блиц - запчасти для Ж/Д, вагонов и железнодорожного транспорта. МВСП /title>    meta namekeywords contentжд запчасти, материалы ВСП, МВСП, запчасти для вагонов, запчасти для железнодорожного транспорта />    meta namedescription content«Блиц» гарантирует поставки ВСП материалов верхнего строения пути и путевых инструментов для ремонта и строительства железных дорог по заводским ценам.   />    meta nameviewport contentwidthdevice-width>    link relstylesheet typetext/css href/css/reset.css mediascreen />    link relstylesheet typetext/css href/css/style.css mediascreen />    link relstylesheet href/css/anythingslider.css />    link relstylesheet typetext/css href/source/jquery.fancybox.css mediascreen />    link relstylesheet typetext/css href/source/helpers/jquery.fancybox-buttons.css />    link relstylesheet typetext/css href/source/helpers/jquery.fancybox-thumbs.css />    script src/js/jquery.js>/script>    script typetext/javascript src/js/jquery.anythingslider.js>/script>    script typetext/javascript src/source/jquery.fancybox.js>/script>    script typetext/javascript src/source/helpers/jquery.fancybox-buttons.js>/script>    script typetext/javascript src/source/helpers/jquery.fancybox-thumbs.js>/script>    script typetext/javascript src/source/helpers/jquery.fancybox-media.js>/script>    script src/js/main.js>/script>    link hrefhttps://blitz174.ru/images/logo.png relicon />/head>body>    div classwrapper>        div classheader>            a href/ classlogo>                img src/images/logo.png altКомпания «Блиц»: Лидер поставки ж/д комплектующих>/a>                        a href/>div classslogan>                div classslogan_name>Блиц/div>                div c

Subdomains

Date	Domain	IP
ekaterinburg.blitz174.ru	2026-01-26	217.107.219.149
ah.blitz174.ru	2025-11-22	217.107.219.149
mails.blitz174.ru	2025-12-29	217.107.219.149
root.blitz174.ru	2026-01-04	217.107.219.149

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > blitz174.ru

Is this malicious?

Files that talk to blitz174.ru

DNS Resolutions

Port 80

Port 443

Subdomains