Domain > cristalix.ru

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to cristalix.ru

MD5	A/V
ccb93c8eae10c3476a0ade520d5d7e31	[W32.NeshtaB.PE] [Win32.Neshta.A] [Virus/W32.Neshta] [Virus.Win32.Neshta!O] [W32.Neshta.A] [W32/HLLP.41472.e] [W32/HLLP.41472] [W32.Neshuta] [Neshta.C] [Win32/Neshta.A] [PE_NESHTA.A] [W32.Neshuta.A] [Virus.Win32.Neshta.a] [Trojan.Win32.Neshta.cwfstr] [Win32.Neshta.B] [Win32.HLLP.Neshta] [W32/Neshta.A] [Heuristic.BehavesLike.Win32.Suspicious.H] [W32/Bloat-A] [Virus.Neshta.a] [Virus/Win32.Neshta.a] [Win32.Troj.Neshta.c.(kcloud)] [Virus:Win32/Neshta.A] [Win32/Neshta] [PE:Win32.Netsha.a!411233] [Virus.Win32.Neshta] [Worm/Delf.FF] [Virus.Win32.Neshta.$a] [Virus.Win32.Neshta.B]
d3703a38cdcff9d60a02c6227cc15a0a	[TrojanPSW.MSIL.r4] [Trojan.Win32.Usteal.wpkmu] [W32/Backdoor2.HOBU] [Suspicious.Cloud.5] [Win32/CInject.OF] [Trojan.Win32.A.Scar.451584.A] [TrojWare.Win32.TrojanDropper.Delf.SOC] [Trojan.Packed.20771] [TR/Dropper.A.22885] [Trojan/Win32.Ruftar] [W32/Backdoor.YJHV-4670] [Hoax.WLock] [Win32/TrojanDropper.Delf.OEF] [Trojan-Dropper] [W32/DROPPER.PAG!tr]

DNS Resolutions

Date	IP Address
2015-02-17	37.187.154.129 (ClassC)
2015-04-15	141.101.126.168 (ClassC)
2015-05-11	104.20.22.250 (ClassC)
2016-07-01	104.28.5.103 (ClassC)
2016-07-03	104.28.4.103 (ClassC)
2021-03-31	104.21.33.109 (ClassC)
2024-11-24	172.67.203.200 (ClassC)
2025-01-19	104.21.22.93 (ClassC)

HTTP/1.1 403 ForbiddenDate: Sat, 30 Mar 2024 23:35:34 GMTContent-Type: text/html; charsetUTF-8Content-Length: 4515Connection: keep-aliveX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Con

!DOCTYPE html>!--if lt IE 7> html classno-js ie6 oldie langen-US> !endif-->!--if IE 7>    html classno-js ie7 oldie langen-US> !endif-->!--if IE 8>    html classno-js ie8 oldie langen-US> !endif-->!--if gt IE 8>!--> html classno-js langen-US> !--!endif-->head>title>Attention Required! | Cloudflare/title>meta charsetUTF-8 />meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta http-equivX-UA-Compatible contentIEEdge />meta namerobots contentnoindex, nofollow />meta nameviewport contentwidthdevice-width,initial-scale1 />link relstylesheet idcf_styles-css href/cdn-cgi/styles/cf.errors.css />!--if lt IE 9>link relstylesheet idcf_styles-ie-css href/cdn-cgi/styles/cf.errors.ie.css />!endif-->style>body{margin:0;padding:0}/style>!--if gte IE 10>!-->script>  if (!navigator.cookieEnabled) {    window.addEventListener(DOMContentLoaded, function () {      var cookieEl  document.getElementById(cookie-alert);      cookieEl.style.display  block;    })  }/script>!--!endif-->/head>body>  div idcf-wrapper>    div classcf-alert cf-alert-error cf-cookie-error idcookie-alert data-translateenable_cookies>Please enable cookies./div>    div idcf-error-details classcf-error-details-wrapper>      div classcf-wrapper cf-header cf-error-overview>        h1 data-translateblock_headline>Sorry, you have been blocked/h1>        h2 classcf-subheadline>span data-translateunable_to_access>You are unable to access/span> cristalix.ru/h2>      /div>!-- /.header -->      div classcf-section cf-highlight>        div classcf-wrapper>          div classcf-screenshot-container cf-screenshot-full>                          span classcf-no-screenshot error>/span>                      /div>        /div>      /div>!-- /.captcha-container -->      div classcf-section cf-wrapper>        div classcf-columns two>          div classcf-column>            h2 data-translateblocked_why_headline>Why have I been blocked?/h2>            p data-translateblocked_why_detail>This website is using a security service to protect itself from online attacks. The actio

Port 443

Subdomains

Date	Domain	IP
launch.cristalix.ru	2015-07-26	104.20.22.250
auth.cristalix.ru	2024-07-27	104.21.22.93
forum.cristalix.ru	2014-06-17	37.187.77.83
www.cristalix.ru	2015-05-16	104.20.22.250

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > cristalix.ru

Is this malicious?

Files that talk to cristalix.ru

DNS Resolutions

Port 80

Port 443

Subdomains