Domain > www.belteh.ru

More information on this domain is in AlienVault OTX

Date	IP Address
2014-09-15	195.24.71.31 (ClassC)
2016-10-16	193.26.18.8 (ClassC)
2019-01-09	185.53.179.29 (ClassC)
2019-02-04	72.52.4.90 (ClassC)
2019-04-14	185.189.15.13 (ClassC)
2019-05-17	91.195.240.126 (ClassC)
2019-08-15	91.195.240.210 (ClassC)
2019-11-27	109.206.181.75 (ClassC)
2025-08-05	62.122.170.171 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginx/1.14.1Date: Wed, 30 Dec 2020 18:26:55 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/7.2.11

!DOCTYPE html>html langen-us classno-js>	head>		meta charsetutf-8>		meta nameviewport contentwidthdevice-width, initial-scale1.0>        meta nameauthor contentSNPARKING />	/head>	body>		!-- Piwik -->				script typetext/javascript>				  var _paq  _paq || ;                  _paq.push(setCustomVariable, 1, id_provider, 99);                  _paq.push(setCustomVariable, 2, provider_type, 0);				  _paq.push(trackPageView);				  _paq.push(enableLinkTracking);				  (function() {					var u//counter.snparking.ru/;					_paq.push(setTrackerUrl, u+piwik.php);					_paq.push(setSiteId, 49668);					var ddocument, gd.createElement(script), sd.getElementsByTagName(script)0;					g.typetext/javascript; g.asynctrue; g.defertrue; g.srcu+piwik.js; s.parentNode.insertBefore(g,s);				  })();				/script>				!-- End Piwik Code -->							script>								var timerId  setInterval(function() {					if (_paq ! null && typeof _paq  object && _paq.length  undefined) {						clearInterval(timerId);												window.location  http://www.matraskin.ru?domainbelteh.ru;												return false;					}				}, 50);			/script>			/body>/html>

Subdomains

Date	Domain	IP
www.belteh.ru	2014-12-19	195.24.71.31

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
9018396de85477cefb468a0dcddb1a67
10add5ef022c501df8fa0ba97d587358	[Win32.Bagle.EX@mm] [TR/Dldr.Bagle.FR.4] [Win32/Mitglieder.DQ] [I-Worm.Bagle.fn.nw3] [Trojan.Bagle.CS-1] [Trojan.DownLoader.6508] [W32/Mitglieder.HK!tr.dldr] [I-Worm/Bagle] [Trojan-Downloader.Win32.Bagle.aq] [Email-Worm.Win32.Bagle.fn] [Troj/BagleDl-BI] [W32.Beagle.DP] [TROJ_BAGLE.CV] [Worm.Bagle]
df5b91951386429a8ac38aaa9aa29d12	[Worm.Bagle-162] [I-Worm/Bagle.BBB]
5b130e9809947e065df70d6a0a93bfa9
112532da317c597880fd4a3fa325d795	[Trojan.Bagle-9] [I-Worm/Bagle.XV]
6A42005C523F22597B71D34700580286

Domain > www.belteh.ru

Is this malicious?

Files that talk to www.belteh.ru

DNS Resolutions

Port 80

Subdomains