Domain > dkforma.ru

More information on this domain is in AlienVault OTX

Files that talk to dkforma.ru

MD5	A/V
74c908fb3287e6c99981cbc50f28381a	[W97M/Downloader.aof] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan]
291371acd978442b50a31c5c7e832226
b670740acba72c42173edc03736336f9
e53d99f6a5fef83675f75aed51ac7f47
3d4ec6e4b3ea0215f52e0f7f8989ce20
561cf0fe7b2e62e10aceeafed15d9826	[Suspicious.Cloud.7.F] [Trojan.Encoder.514] [BehavesLike.Win32.PdfCrypt.ch] [Trojan.Adware.Kazy.DB8CBA] [Artemis!561CF0FE7B2E] [Trojan.Crypt2] [Adware.Win32.iBryte.ECXX]
bf3e9e7df41ba28614181ac81dd334ea
2f83f16f7e6f65c5d7ab6ef8ae06ab3e	[W32.RansomCrowtiAD.Trojan] [TrojanRansom.Crowti.MUE.A4] [Ransom.CryptoWall] [Trojan/Filecoder.co] [W32/Filecoder.VQLQ-4682] [Trojan.Cryptodefense] [Win32/Filecoder.CryptoWall.D] [TROJ_CRYPWALL.CPH15AT] [Trojan-Ransom.Win32.Cryptodef.aaih] [Trojan.Win32.Cryptodef.eairxz] [Trojan.Win32.CryptoWall.278528[h]] [Troj/Ransom-BNN] [UnclassifiedMalware] [Trojan.Encoder.1396] [Trojan.Rulbar.Win32.112] [TROJ_CRYPWALL.CPH15AT] [BehavesLike.Win32.Dropper.dm] [W32/Filecoder.X] [Trojan.Cryptodef.dx] [TR/AD.Crowti.Y.388] [Trojan[Ransom]/Win32.Cryptodef] [Ransom:Win32/Crowti!rfn] [Troj.Ransom.W32.Cryptodef!c] [Trojan/Win32.CryptoWall.N1757723146] [Trj/WLT.B] [Trojan.Filecoder] [Trojan.Filecoder!LokPqVsxc18] [Trojan.Win32.Filecoder] [W32/Filecoder.BNN!tr] [FileCryptor.EDC] [Trojan.Win32.Ransom.aaih] [Win32/Trojan.f57]

DNS Resolutions

Date	IP Address
2015-10-20	195.19.214.27 (ClassC)
2015-11-24	91.218.228.115 (ClassC)
2016-09-29	141.8.196.166 (ClassC)
2016-10-17	194.58.56.84 (ClassC)
2016-11-02	45.32.180.209 (ClassC)
2016-11-09	81.177.33.8 (ClassC)
2019-04-27	92.53.96.102 (ClassC)
2022-05-05	77.222.62.180 (ClassC)
2025-08-10	45.130.41.47 (ClassC)

HTTP/1.1 200 OKServer: nginx/1.15.8Date: Sat, 22 Jun 2019 06:37:53 GMTContent-Type: text/html; charsetUTF-8Content-Length: 85703Connection: keep-aliveKeep-Alive: timeout10Vary: Accept-EncodingLink: ht

!DOCTYPE html>html langru-RU>head>meta charsetUTF-8/>meta nametwitter:widgets:csp contenton/>link relprofile hrefhttps://gmpg.org/xfn/11/>link relpingback hrefhttps://dkforma.ru/xmlrpc.php/>title>Косметология в СПб клиника DkForma-Философия здоровья и красоты/title>!-- This site is optimized with the Yoast SEO plugin v11.4 - https://yoast.com/wordpress/plugins/seo/ -->meta namedescription contentИнъекционная Косметология, Лазерная косметология, Аппаратная косметология, Уходовые процедуры, Профессиональная косметика в СПб/>link relcanonical hrefhttps://dkforma.ru/ />meta propertyog:locale contentru_RU />meta propertyog:type contentwebsite />meta propertyog:title contentКосметология в СПб клиника DkForma-Философия здоровья и красоты />meta propertyog:description contentИнъекционная Косметология, Лазерная косметология, Аппаратная косметология, Уходовые процедуры, Профессиональная косметика в СПб />meta propertyog:url contenthttps://dkforma.ru/ />meta propertyog:site_name contentDK Forma />meta nametwitter:card contentsummary_large_image />meta nametwitter:description contentИнъекционная Косметология, Лазерная косметология, Аппаратная косметология, Уходовые процедуры, Профессиональная косметика в СПб />meta nametwitter:title contentКосметология в СПб клиника DkForma-Философия здоровья и красоты />meta nametwitter:image contenthttps://vk.com/images/blank.gif />meta namegoogle-site-verification contentUA-111261958-1 />meta nameyandex-verification content47021118 /> script typeapplication/ld+json classyoast-schema-graph yoast-schema-graph--main>{@co

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > dkforma.ru

Is this malicious?

Files that talk to dkforma.ru

DNS Resolutions

Port 443