Domain > geobuilder.ru

More information on this domain is in AlienVault OTX

Files that talk to geobuilder.ru

MD5	A/V
e21b3469b4fc1efddf76d8c89f1ebb2a	[Malware.Packer.HGX1] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]

DNS Resolutions

Date	IP Address
2013-05-16	194.135.20.55 (ClassC)
2025-08-12	37.140.192.105 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Fri, 15 Nov 2024 11:02:26 GMTContent-Type: text/html;charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-Powered-By: PHP/5.2.17Cache-Co

!DOCTYPE html>html langru>head>	meta charsetutf-8>	title>Главная/title>	  	link relstylesheet href/skin/css/print.css typetext/css mediaprint>	link relstylesheet href/skin/css/core.css typetext/css mediascreen>	link relstylesheet href/skin/css/styles.css typetext/css mediascreen>	link hrefhttp://fonts.googleapis.com/css?familyPT+Sans:400,700,400italic,700italic&subsetcyrillic,cyrillic-ext,latin,latin-ext relstylesheet typetext/css>	link href/skin/bxslider/jquery.bxslider.css relstylesheet typetext/css>	link href/skin/fancybox/jquery.fancybox.css relstylesheet typetext/css>/head>body idlayout_body>	div classcontainer>		!-- Yandex.Metrika counter --> 		script typetext/javascript> (function (d, w, c) { (wc  wc || ).push(function() { try { w.yaCounter38013290  new Ya.Metrika({ id:38013290, clickmap:true, trackLinks:true, accurateTrackBounce:true, webvisor:true, trackHash:true }); } catch(e) { } }); var n  d.getElementsByTagName(script)0, s  d.createElement(script), f  function () { n.parentNode.insertBefore(s, n); }; s.type  text/javascript; s.async  true; s.src  https://mc.yandex.ru/metrika/watch.js; if (w.opera  object Opera) { d.addEventListener(DOMContentLoaded, f, false); } else { f(); } })(document, window, yandex_metrika_callbacks); 		  /script> 		noscript>			div>				img srchttps://mc.yandex.ru/watch/38013290 styleposition:absolute; left:-9999px; alt />			/div>		/noscript> 		!-- /Yandex.Metrika counter -->		div idheader classheader>			div classtop clearfix>				div classlogo>					a href/>img src/skin/images/logo.png altГЕОКИБЕРНЕТИКА>/a>				/div>				div classsocial>				a classhead-mail hrefmailto:info@geobuilder.ru>info@geobuilder.ru/a>									/div>				div classright>					div classphone>						p>+7 span>(499)/span> 280span classbigChar>-09-06/span>/p>					/div>					div classsearch-wrap>						form namesearchForm action/search/ classsearch-form methodGET>						input typetext nameq placeholderПоиск>						button classsearch-btn namesearchBtn>/button>						/form>					/div>				/div>			/div>

Subdomains

Date	Domain	IP
mail2.geobuilder.ru	2013-05-16	212.5.170.26

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > geobuilder.ru

Is this malicious?

Files that talk to geobuilder.ru

DNS Resolutions

Port 80

Port 443

Subdomains