Domain > tanatossite.narod.ru

More information on this domain is in AlienVault OTX

Date	IP Address
2013-04-01	213.180.199.45 (ClassC)
2013-08-18	195.54.174.228 (ClassC)
2013-10-04	193.109.247.228 (ClassC)
2025-06-28	193.109.247.248 (ClassC)
2025-08-05	91.213.248.56 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginxDate: Sat, 18 Nov 2023 03:44:49 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout15X-Frame-Options: SAMEORIGIN

script typetext/javascript src/?S957wHiTHxIS5sid1mSUdzjaE%21v2U%21sajQB7gjfzbaW444JseJv3junYRLLDDnf8J%3Bigr%21VH7JU%212q7Jtsl5Y%21fLC%3B8NbbxNQ%21Wm53x%5ExDOiq0Cg126vwner5h%21SCDSm8s2fdkHYvVERHxdBgkOchxXAd6yUCp2kJwe8cT%3BSjqJXk0b84vc0PUarEslJXS2X%5EZ7biAFR4fHz1VLmYkHr8h1y4WusxSmTqZMAuIJpNNeHhrr87HWSplNN1JSievYHu88xq%5EYo>/script>script typetext/javascript>if(typeof(u_global_data)!object) u_global_data{};function ug_clund(){	if(typeof(u_global_data.clunduse)!undefined && u_global_data.clunduse>0 || (u_global_data && u_global_data.is_u_main_h)){		if(typeof(console)object && typeof(console.log)function) console.log(utarget already loaded);		return;	}	u_global_data.clunduse1;	if(01){		var dnew Date();d.setTime(d.getTime()+86400000);document.cookieadbetnetshowed2; path/; expires+d;		if(location.search.indexOf(clk23985023612921937731431)-1){			return;		}	}else{		window.addEventListener(click, function(event){			if(typeof(u_global_data.clunduse)!undefined && u_global_data.clunduse>1) return;			if(typeof(console)object && typeof(console.log)function) console.log(utarget click);			var dnew Date();d.setTime(d.getTime()+86400000);document.cookieadbetnetshowed1; path/; expires+d;			u_global_data.clunduse2;			new Image().src  //counter.yadro.ru/hit;ucoz_desktop_click?r+escape(document.referrer)+(screen&&;s+screen.width+*+screen.height+*+(screen.colorDepth||screen.pixelDepth))+;u+escape(document.URL)+;+Date.now();		});	}		new Image().src  //counter.yadro.ru/hit;desktop_click_load?r+escape(document.referrer)+(screen&&;s+screen.width+*+screen.height+*+(screen.colorDepth||screen.pixelDepth))+;u+escape(document.URL)+;+Date.now();}setTimeout(function(){	if(typeof(u_global_data.preroll_video_57322)object && u_global_data.preroll_video_57322.active_videoadbetnet) {		if(typeof(console)object && typeof(console.log)function) console.log(utarget suspend, preroll active);		setTimeout(ug_clund,8000);	}	else ug_clund();},3000);/script>	script typetext/javascript>new Image().src  //counter.yadro.ru/hit;narodadst1?r+escape(document.referrer)+

Port 443

HTTP/1.1 200 OKServer: nginxDate: Sat, 18 Nov 2023 03:44:50 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveKeep-Alive: timeout15X-Frame-Options: SAMEORIGIN

script typetext/javascript src/?yqSdAEPUFptiu%3B0vUfLMdtRsPgWf4HtFqRNbZHfi8%21rjsBigrFDtzSX53%5E9IAyGAbzHZIJA8g1rWQiDeS9KR%213%5EMYRMOLcXgmmz3A8yVjWtp6O5%3B9uW8uHkL%5ENnKCpy4UHFOF9YKKb%5EDwkK6CKKLYLNmyzROhSdhPtJOdUDgcREUQ4%3B9aJTpkWq4Aec277W3Pj%21naKXIVlJXJ%21WwQqOvCqPLG%21cLO2dRbUHQrHt6%3BLWOm%21knPC%3B0mLeLeDMyuJhFQrYE%3BSko>/script>script typetext/javascript>if(typeof(u_global_data)!object) u_global_data{};function ug_clund(){	if(typeof(u_global_data.clunduse)!undefined && u_global_data.clunduse>0 || (u_global_data && u_global_data.is_u_main_h)){		if(typeof(console)object && typeof(console.log)function) console.log(utarget already loaded);		return;	}	u_global_data.clunduse1;	if(01){		var dnew Date();d.setTime(d.getTime()+86400000);document.cookieadbetnetshowed2; path/; expires+d;		if(location.search.indexOf(clk23985023612921937731431)-1){			return;		}	}else{		window.addEventListener(click, function(event){			if(typeof(u_global_data.clunduse)!undefined && u_global_data.clunduse>1) return;			if(typeof(console)object && typeof(console.log)function) console.log(utarget click);			var dnew Date();d.setTime(d.getTime()+86400000);document.cookieadbetnetshowed1; path/; expires+d;			u_global_data.clunduse2;			new Image().src  //counter.yadro.ru/hit;ucoz_desktop_click?r+escape(document.referrer)+(screen&&;s+screen.width+*+screen.height+*+(screen.colorDepth||screen.pixelDepth))+;u+escape(document.URL)+;+Date.now();		});	}		new Image().src  //counter.yadro.ru/hit;desktop_click_load?r+escape(document.referrer)+(screen&&;s+screen.width+*+screen.height+*+(screen.colorDepth||screen.pixelDepth))+;u+escape(document.URL)+;+Date.now();}setTimeout(function(){	if(typeof(u_global_data.preroll_video_57322)object && u_global_data.preroll_video_57322.active_videoadbetnet) {		if(typeof(console)object && typeof(console.log)function) console.log(utarget suspend, preroll active);		setTimeout(ug_clund,8000);	}	else ug_clund();},3000);/script>	script typetext/javascript>new Image().src  //counter.yadro.ru/hit;narodadst1?r+escape(document.refe

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
1ec02268c463d5c32d335e88b356b7a5	[W32.Clode36.Trojan.7d40] [Packed.Win32.Zcrypt.3!O] [W32/Asim.b] [Backdoor.IRCBot.Win32.7644] [Backdoor/IRCBot.kbv] [Trojan.Win32.IRCBot.bbety] [W32/Backdoor2.FAHK] [W32.IRCBot] [Ircbot.AWMU] [Win32/IRCBot.NE] [Backdoor.Win32.IRCBot.kbv] [Backdoor.IRCBot!BR+M670RZAY] [Backdoor.Win32.IRCBot.40481] [Win32.HLLP.Misa.origin] [Backdoor.Win32.IRCBot] [Worm/IrcBot.kbv] [W32/Asim-A] [Backdoor/IRCBot.gaf] [Trojan[Backdoor]/Win32.IRCBot] [Virus:Win32/Asim.B] [Worm/Win32.IRCBot] [W32/Backdoor.FUKM-7343] [Backdoor.IRCBot] [W32/Sima.A] [Win32/Asim.C] [PE:Win32.Asim.b!1075353172] [Virus.Win32.Misa] [W32/IRCBot.KBV] [BackDoor.Ircbot.IRH]

Domain > tanatossite.narod.ru

Is this malicious?

Files that talk to tanatossite.narod.ru

DNS Resolutions

Port 80

Port 443