Domain > mama-koroleva.ru

More information on this domain is in AlienVault OTX

Files that talk to mama-koroleva.ru

MD5	A/V
25cf73e0b67cf888331dfb7d5e7a1276	[HW32.CDB.9123] [Backdoor.Hlux.r3] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmxm] [Backdoor.Hlux!H8o7dSngIrQ] [Mal/FakeAV-UF] [UnclassifiedMalware] [BackDoor.Slym.13348] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt3] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL]

DNS Resolutions

Date	IP Address
2025-05-07	193.109.246.63 (ClassC)
2025-08-03	91.217.9.153 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Wed, 16 Apr 2025 01:00:57 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout15Set-Cookie: 5mamakorolevauCoz;

html>head>script typetext/javascript src/?AD6T9uaXTXJYfJvcnjUUc%5EvFWAI7bBWJEAFI9VvnOjSRQwKc0b6IgmCQRIMXiKLXOjCLRS%5EwSMnTg%3BeYq2wZxr22GWQL2MwKNpvLAL3eEjOMuc7hrD6rIX8AXcfT%5E9g2V4CHyO8LZ%21xtA1Wkr%3BOp8u94VVt8KuDlPwcO6eaYPVfKfDIgVORTfgdqbqmNyIOFee4YSB%5EuzBAMnV4eIcbxNPzFFgoo>/script>	script typetext/javascript>new Image().src  //counter.yadro.ru/hit;ucoznet?r+escape(document.referrer)+(screen&&;s+screen.width+*+screen.height+*+(screen.colorDepth||screen.pixelDepth))+;u+escape(document.URL)+;+Date.now();/script>	script typetext/javascript>new Image().src  //counter.yadro.ru/hit;ucoz_desktop_ad?r+escape(document.referrer)+(screen&&;s+screen.width+*+screen.height+*+(screen.colorDepth||screen.pixelDepth))+;u+escape(document.URL)+;+Date.now();/script>script typetext/javascript>if(typeof(u_global_data)!object) u_global_data{};function ug_clund(){	if(typeof(u_global_data.clunduse)!undefined && u_global_data.clunduse>0 || (u_global_data && u_global_data.is_u_main_h)){		if(typeof(console)object && typeof(console.log)function) console.log(utarget already loaded);		return;	}	u_global_data.clunduse1;	if(01){		var dnew Date();d.setTime(d.getTime()+86400000);document.cookieadbetnetshowed2; path/; expires+d;		if(location.search.indexOf(clk23985023612921937731431)-1){			return;		}	}else{		window.addEventListener(click, function(event){			if(typeof(u_global_data.clunduse)!undefined && u_global_data.clunduse>1) return;			if(typeof(console)object && typeof(console.log)function) console.log(utarget click);			var dnew Date();d.setTime(d.getTime()+86400000);document.cookieadbetnetshowed1; path/; expires+d;			u_global_data.clunduse2;			new Image().src  //counter.yadro.ru/hit;ucoz_desktop_click?r+escape(document.referrer)+(screen&&;s+screen.width+*+screen.height+*+(screen.colorDepth||screen.pixelDepth))+;u+escape(document.URL)+;+Date.now();		});	}		new Image().src  //counter.yadro.ru/hit;desktop_click_load?r+escape(document.referrer)+(screen&&;s+screen.width+*+screen.height+*+(screen.colorDepth||screen.pixelDepth))+;u+escape(document.U

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > mama-koroleva.ru

Is this malicious?

Files that talk to mama-koroleva.ru

DNS Resolutions

Port 80