Domain > netangels.ru

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to netangels.ru

MD5	A/V
2bd03b248e2a977d7e0249c9da136a5f	[BackDoor.Bladabindi.4987]
328f80e357cc60287e3090858f9384bb
828f34161f77fa88449e8ccd39416c84
23389de5677d2f7dcc53c4c55b9aef83	[JS.Downloader] [JS_NEMUCOD.XYZJ]
635ebc401cfbd089cc6d8252786c7387	[JS.Downloader] [TrojanDownloader:JS/Gamarue] [Trojan-Downloader.JS.Gamarue] [Win32/Trojan.Exploit.b4f]
a10742e3de0804cb05339bc9e4d8e919	[Trojan/W32.Yakes.115712.N] [Trojan.Downloader] [Trojan.Win32.Xpack.dztugt] [Backdoor.Trojan] [Win32/TrojanDownloader.Wauchos.BD] [TROJ_DLOADER.YMNHR] [Trojan.Win32.Yakes.otem] [Trojan.Yakes!9sZTJUwctME] [Troj.W32.Yakes!c] [Trojan.DownLoader19.6415] [TROJ_DLOADER.YMNHR] [BehavesLike.Win32.Ramnit.ch] [Trojan.Yakes.gad] [TR/Crypt.Xpack.419126] [Worm:Win32/Gamarue!rfn] [Trojan.Razy.D10C5] [Trojan/Win32.Crypt] [Artemis!A10742E3DE08] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [W32/Yakes.ELIE!tr] [Crypt5.ADOU] [Win32/Trojan.c80]
4d9e25c037ac8ae0ca6548f2d7ad613f	[JS.Downloader] [JS_NEMUCOD.XYZJ] [JS_NEMUCOD.XYZJ]
fed68e37488a9ad3a481b4fafb4d1f4d
dc9db6042cb6ee9509a7fb845866b1b7	[Artemis!DC9DB6042CB6] [Trojan.MalPack] [Uds.Dangerousobject.Multi!c] [Suspicious.Cloud.7.F] [Win32/TrojanDownloader.Wauchos.BD] [Backdoor.Win32.Androm.jcqx] [BehavesLike.Win32.Backdoor.ch] [TR/Crypt.Xpack.443614] [Trojan[Backdoor]/Win32.Androm] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [PossibleThreat.P0] [Crypt5.AGPG]
d4ca874c4ad075a187a774011a0a1ff8
73f1ca61660f590720deb00c86c40259
dbb574abbebda62bfc601dac4a558fc4
0787b4bbd1adeabf4a18c6a15b712ae5	[Backdoor.Win32.Androm.jcqk] [Win32.Trojan.Crypt.Frz] [BehavesLike.Win32.Backdoor.ch] [TR/Crypt.Xpack.443418] [Trojan[Backdoor]/Win32.Androm] [Backdoor.W32.Androm!c] [W32/Androm.EMZI!tr.bdr] [Crypt5.AGPG]
2d2ae1c8d3859315d6fa66c6891d5a8f	[Artemis!2D2AE1C8D385] [Worm.Gamarue] [Backdoor.W32.Androm] [Trojan.Razy.D3C4E] [Trojan.Win32.Xpack.eagmau] [Suspicious.Cloud.9] [Backdoor.Win32.Androm.jdlq] [Trojan.Win32.Z.Razy.105984.A[h]] [Trojan.DownLoader19.23928] [BehavesLike.Win32.Ramnit.ch] [TR/Crypt.Xpack.395642] [Trojan[Backdoor]/Win32.Androm] [Worm:Win32/Gamarue] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [W32/Androm.ENUQ!tr.bdr] [Crypt5.AIIJ]
2e6509b54f41b4f70d56a1da3ce63379	[JS/Nemucod.br] [JS.Downloader] [JS/TrojanDownloader.Nemucod.DJ] [JS_CRYPLOD.YYSJO] [JS.S.Downloader.2397[h]] [JS/DwnLdr-NBW] [JS.DownLoader.709] [JS_CRYPLOD.YYSJO] [BehavesLike.JS.Exploit.xv] [JS/Nemucod.DJ!tr.dldr] [HEUR.JS.Trojan.b] [JS/Downloader] [TrojanDownloader:JS/Nemucod] [Js.Trojan-downloader.Nemucod.Htmj] [Trojan-Downloader.JS.Nemucod]
d77fe23d98c90052230b12a4d647590a	[Worm.Gamarue] [Backdoor.Androm.Win32.32287] [Trojan.Win32.Xpack.eagmau] [Backdoor.Win32.Androm.jdln] [Backdoor.Androm!p//6TMFByb4] [Backdoor.W32.Androm] [Win32.Backdoor.Androm.Wrql] [BackDoor.Andromeda.1407] [BehavesLike.Win32.Multiplug.ch] [Backdoor.Androm.dyy] [TR/Crypt.Xpack.395551] [Trojan[Backdoor]/Win32.Androm] [Worm:Win32/Gamarue] [Trojan.Razy.D3C4E] [Worm/Win32.Gamarue] [Trojan.Win32.Crypt] [W32/Androm.JDLN!tr.bdr] [Crypt5.AIIJ]
1d1521fe9c51618aedf7d35823e5ddab
ae924b238f96875b4f3670557d2364cd
a91fd35a8c8364df517377c211e9cc36
508f098c1f471fdf3b589ca728f3f24e

DNS Resolutions

Date	IP Address
2013-06-04	91.201.52.97 (ClassC)
2013-09-04	91.201.52.49 (ClassC)
2014-08-14	91.201.52.84 (ClassC)
2014-11-19	91.201.52.65 (ClassC)
2015-01-01	91.201.52.78 (ClassC)
2015-02-16	91.201.52.122 (ClassC)
2026-02-21	213.189.223.5 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
ns1.netangels.ru	2025-12-14	91.201.54.2
h22.netangels.ru	2025-12-11	91.201.52.222
u21042.netangels.ru	2014-12-08	91.201.52.17
ns2.netangels.ru	2026-02-15	91.201.52.2
be26.netangels.ru	2018-12-11	185.93.108.153
panel.netangels.ru	2025-08-21	213.189.223.5
www.netangels.ru	2025-12-14	213.189.223.5

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]