Domain > rusmaster.spb.ru

More information on this domain is in AlienVault OTX

Files that talk to rusmaster.spb.ru

MD5	A/V
828f34161f77fa88449e8ccd39416c84
23389de5677d2f7dcc53c4c55b9aef83	[JS.Downloader] [JS_NEMUCOD.XYZJ]
635ebc401cfbd089cc6d8252786c7387	[JS.Downloader] [TrojanDownloader:JS/Gamarue] [Trojan-Downloader.JS.Gamarue] [Win32/Trojan.Exploit.b4f]
a10742e3de0804cb05339bc9e4d8e919	[Trojan/W32.Yakes.115712.N] [Trojan.Downloader] [Trojan.Win32.Xpack.dztugt] [Backdoor.Trojan] [Win32/TrojanDownloader.Wauchos.BD] [TROJ_DLOADER.YMNHR] [Trojan.Win32.Yakes.otem] [Trojan.Yakes!9sZTJUwctME] [Troj.W32.Yakes!c] [Trojan.DownLoader19.6415] [TROJ_DLOADER.YMNHR] [BehavesLike.Win32.Ramnit.ch] [Trojan.Yakes.gad] [TR/Crypt.Xpack.419126] [Worm:Win32/Gamarue!rfn] [Trojan.Razy.D10C5] [Trojan/Win32.Crypt] [Artemis!A10742E3DE08] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [W32/Yakes.ELIE!tr] [Crypt5.ADOU] [Win32/Trojan.c80]
4d9e25c037ac8ae0ca6548f2d7ad613f	[JS.Downloader] [JS_NEMUCOD.XYZJ] [JS_NEMUCOD.XYZJ]
fed68e37488a9ad3a481b4fafb4d1f4d
dc9db6042cb6ee9509a7fb845866b1b7	[Artemis!DC9DB6042CB6] [Trojan.MalPack] [Uds.Dangerousobject.Multi!c] [Suspicious.Cloud.7.F] [Win32/TrojanDownloader.Wauchos.BD] [Backdoor.Win32.Androm.jcqx] [BehavesLike.Win32.Backdoor.ch] [TR/Crypt.Xpack.443614] [Trojan[Backdoor]/Win32.Androm] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [PossibleThreat.P0] [Crypt5.AGPG]
d4ca874c4ad075a187a774011a0a1ff8
73f1ca61660f590720deb00c86c40259
dbb574abbebda62bfc601dac4a558fc4
0787b4bbd1adeabf4a18c6a15b712ae5	[Backdoor.Win32.Androm.jcqk] [Win32.Trojan.Crypt.Frz] [BehavesLike.Win32.Backdoor.ch] [TR/Crypt.Xpack.443418] [Trojan[Backdoor]/Win32.Androm] [Backdoor.W32.Androm!c] [W32/Androm.EMZI!tr.bdr] [Crypt5.AGPG]
2d2ae1c8d3859315d6fa66c6891d5a8f	[Artemis!2D2AE1C8D385] [Worm.Gamarue] [Backdoor.W32.Androm] [Trojan.Razy.D3C4E] [Trojan.Win32.Xpack.eagmau] [Suspicious.Cloud.9] [Backdoor.Win32.Androm.jdlq] [Trojan.Win32.Z.Razy.105984.A[h]] [Trojan.DownLoader19.23928] [BehavesLike.Win32.Ramnit.ch] [TR/Crypt.Xpack.395642] [Trojan[Backdoor]/Win32.Androm] [Worm:Win32/Gamarue] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [W32/Androm.ENUQ!tr.bdr] [Crypt5.AIIJ]
2e6509b54f41b4f70d56a1da3ce63379	[JS/Nemucod.br] [JS.Downloader] [JS/TrojanDownloader.Nemucod.DJ] [JS_CRYPLOD.YYSJO] [JS.S.Downloader.2397[h]] [JS/DwnLdr-NBW] [JS.DownLoader.709] [JS_CRYPLOD.YYSJO] [BehavesLike.JS.Exploit.xv] [JS/Nemucod.DJ!tr.dldr] [HEUR.JS.Trojan.b] [JS/Downloader] [TrojanDownloader:JS/Nemucod] [Js.Trojan-downloader.Nemucod.Htmj] [Trojan-Downloader.JS.Nemucod]
d77fe23d98c90052230b12a4d647590a	[Worm.Gamarue] [Backdoor.Androm.Win32.32287] [Trojan.Win32.Xpack.eagmau] [Backdoor.Win32.Androm.jdln] [Backdoor.Androm!p//6TMFByb4] [Backdoor.W32.Androm] [Win32.Backdoor.Androm.Wrql] [BackDoor.Andromeda.1407] [BehavesLike.Win32.Multiplug.ch] [Backdoor.Androm.dyy] [TR/Crypt.Xpack.395551] [Trojan[Backdoor]/Win32.Androm] [Worm:Win32/Gamarue] [Trojan.Razy.D3C4E] [Worm/Win32.Gamarue] [Trojan.Win32.Crypt] [W32/Androm.JDLN!tr.bdr] [Crypt5.AIIJ]

DNS Resolutions

Date	IP Address
2016-03-18	91.219.194.23 (ClassC)
2019-08-16	92.53.96.136 (ClassC)
2024-08-23	92.53.96.158 (ClassC)
2025-04-24	5.23.50.27 (ClassC)
2026-02-04	188.225.23.150 (ClassC)

Port 443

HTTP/1.1 200 OKServer: nginxDate: Fri, 16 Aug 2019 03:05:31 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingP3P: policyref/bitrix/p3p.xml,

!doctype html>html>head>    !-- Google Tag Manager -->        !-- End Google Tag Manager -->    meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta namerobots contentindex, follow />meta namekeywords contentРемонт квартир в СПб, ремонт квартир под ключ />meta namedescription contentСтроительная компания РМ-Ремонт предлагает качественный ремонт квартир в Санкт-Петербурге любой сложности за приемлемую стоимость />script typetext/javascript data-skip-movingtrue>(function(w, d, n) {var cl  bx-core;var ht  d.documentElement;var htc  ht ? ht.className : undefined;if (htc  undefined || htc.indexOf(cl) ! -1){return;}var ua  n.userAgent;if (/(iPad;)|(iPhone;)/i.test(ua)){cl +  bx-ios;}else if (/Android/i.test(ua)){cl +  bx-android;}cl + (/(ipad|iphone|android|mobile|touch)/i.test(ua) ?  bx-touch :  bx-no-touch);cl + w.devicePixelRatio && w.devicePixelRatio > 2?  bx-retina:  bx-no-retina;var ieVersion  -1;if (/AppleWebKit/.test(ua)){cl +  bx-chrome;}else if ((ieVersion  getIeVersion()) > 0){cl +  bx-ie bx-ie + ieVersion;if (ieVersion > 7 && ieVersion  10 && !isDoctype()){cl +  bx-quirks;}}else if (/Opera/.test(ua)){cl +  bx-opera;}else if (/Gecko/.test(ua)){cl +  bx-firefox;}if (/Macintosh/i.test(ua)){cl +  bx-mac;}ht.className  htc ? htc +   + cl : cl;function isDoctype(){if (d.compatMode){return d.compatMode  CSS1Compat;}return d.documentElement && d.documentElement.clientHeight;}function getIeVersion(){if (/Opera/i.test(ua) || /Webkit/i.test(ua) || /Firefox/i.test(ua) || /Chrome/i.test(ua)){return -1;}var rv  -1;if (!!(w.MSStream) && !(w.ActiveXObject) && (ActiveXObject in w)){rv  11;}else if (!!d.documentMode && d.documentMode > 10){rv  10;}else if (!!d.documentMode && d.documentMode > 9){rv  9;}else if (d.attachEvent && !/Opera/.test(ua)){rv  8;}if (rv  -1 || rv  8){var re;if (n.appName  Microsoft Internet Explorer){re  new RegExp(MSIE (0-9+.0-9*));if (re.

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > rusmaster.spb.ru

Is this malicious?

Files that talk to rusmaster.spb.ru

DNS Resolutions

Port 80

Port 443