Domain > yurtdisiegitim.tv

More information on this domain is in AlienVault OTX

Reports

http://blog.dynamoo.com/2016/02/malware-spam-fmiso...

https://otx.alienvault.com/pulse/56c3ab8767db8c125...

Files that talk to yurtdisiegitim.tv

MD5	A/V
d78a6f39acd6189be5e0c345a59add7c	[HEUR.VBA.Trojan.d] [W97M/Downloader!375B7B8D2AE4] [W97M/Downloader!375B7B8D2AE4]
eeb694c1044d700b1dbdaefba1aa5c27	[W97M/Downloader!368142A0DEBF] [W97M/Downloader!368142A0DEBF] [HEUR.VBA.Trojan.d]
8cef0dae0318f17c1cb19faa23138135	[W97M/Downloader!E18EC71B0234] [W97M/Downloader!E18EC71B0234] [HEUR.VBA.Trojan.d]
63b0c521efbf96100d4f1665a6b877ea
9fd27202c1eff23fd0be851e5d47f751	[W97M/Downloader!7022F53F91C8] [W97M/Downloader!7022F53F91C8] [HEUR.VBA.Trojan.d]
8a22d51f5797eca5f128ca26cec30cd0	[W97M/Downloader!3D72EEDEF3A3] [W97M/Downloader!3D72EEDEF3A3] [HEUR.VBA.Trojan.d]
8b8cb9e34408bc0380d08d64897f9ffe	[W97M/Downloader!EFFBEEB666D1] [W97M/Downloader!EFFBEEB666D1] [HEUR.VBA.Trojan.d]
be63c254d252d9a38ff5bb5f02bfabd2
09f06cc06738e1729e9e5be25987f7a2
26e6750ad3fd8233168539a829b6272c	[W97M/Downloader!F90D22C67AFB] [HEUR.VBA.Trojan.d] [Trojan.Script.Downloader.eahofn] [W97M/Downloader!F90D22C67AFB]
ac81a62176b9607f1299e7895401f12e	[Trojan.Script.Downloader.eahofn] [W97M/Downloader!D0CFF3E5F0CF] [HEUR.VBA.Trojan.d] [W97M/Downloader!D0CFF3E5F0CF]
f47c2cf0ed285ff369e6f5d082c7c3a8	[Trojan.Script.Downloader.eahofn] [W97M/Downloader!8D57B03D905D] [HEUR.VBA.Trojan.d] [W97M/Downloader!8D57B03D905D]
67d53418b4daf944bd5bbc7226a23291	[W2KM_DRIDEX.BU] [Trojan.Script.Downloader.eahofn] [W2KM_DRIDEX.BU] [W97M/Downloader!4D1289F59BC6] [Downloader.UEUT] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan.d] [W97M/Downloader!4D1289F59BC6]
5cd7875634418c4c0c8f44529aaf9525	[W2KM_DRIDEX.YYSRF] [Trojan.Script.Downloader.eahofn] [W2KM_DRIDEX.YYSRF] [W97M/Downloader!A73D6017D9B8] [PP97M/Downldr] [HEUR/Macro.Downloader] [W97M/Downloader!A73D6017D9B8]
134acd2fa512246147fe4f8240b7a102	[HEUR.VBA.Trojan.d] [W97M/Downloader!99830804CCB7] [W97M/Downloader!99830804CCB7]
f39243c1ff0a715d57f170309e4b01eb
a09272042f32a27a49624c97918f7432	[W97M/Downloader!C69CD2C29598] [Trojan.Script.Downloader.eahofn] [PP97M/Downldr] [W97M/Downloader!C69CD2C29598] [HEUR.VBA.Trojan.d]
801396375a70625597b959291eb266b7	[W97M/Downloader!20E0B68E1503] [HEUR.VBA.Trojan.d] [W97M/Downloader!20E0B68E1503]
3c483598b9405f40e18ae2cb178090e5	[Trojan.Script.Downloader.eahofn] [W2KM_DRIDEX.YYSRF] [Troj/DocDl-BAI] [W97M.DownLoader.887] [W2KM_DRIDEX.YYSRF] [W97M/Downloader!DC42B9BF9965] [PP97M/Downldr] [HEUR.VBA.Trojan.d] [W97M/Downloader!DC42B9BF9965] [W97M/Downloader]
13973a1356b4359d0cd817cd3591b197	[W97M/Downloader!C1796439DD51] [W97M/Downloader!C1796439DD51] [HEUR.VBA.Trojan.d]

Whois

Property	Value
NameServer	NS53.KEBIRHOST.COM
Created	2010-07-08 09:13:48
Changed	2015-06-24 09:34:44
Expires	2016-07-08 09:13:48
Registrar	REG2C.COM, INC.

DNS Resolutions

Date	IP Address
2015-08-26	85.25.201.121 (ClassC)
2016-11-14	217.79.181.50 (ClassC)
2017-07-05	85.14.248.157 (ClassC)
2018-12-05	78.135.89.141 (ClassC)
2024-12-26	185.179.27.104 (ClassC)

Port 80

HTTP/1.1 200 OKLast-Modified: Mon, 07 Aug 2017 10:59:53 GMTContent-Type: text/htmlContent-Length: 5122Accept-Ranges: bytesDate: Thu, 11 Jul 2019 20:34:43 GMTServer: LiteSpeedConnection: Keep-Alive

html xmlnshttp://www.w3.org/1999/xhtml langen>head>	meta http-equivContent-Type contenttext/html; charsetiso-8859-1 />	meta namedescription contentHTTrack is an easy-to-use website mirror utility. It allows you to download a World Wide website from the Internet to a local directory,building recursively all structures, getting html, images, and other files from the server to your computer. Links are rebuiltrelatively so that you can freely browse to the local site (works with any browser). You can mirror several sites together so that you can jump from one toanother. You can, also, update an existing mirror site, or resume an interrupted download. The robot is fully configurable, with an integrated help />	meta namekeywords contenthttrack, HTTRACK, HTTrack, winhttrack, WINHTTRACK, WinHTTrack, offline browser, web mirror utility, aspirateur web, surf offline, web capture, www mirror utility, browse offline, local  site builder, website mirroring, aspirateur www, internet grabber, capture de site web, internet tool, hors connexion, unix, dos, windows 95, windows 98, solaris, ibm580, AIX 4.0, HTS, HTGet, web aspirator, web aspirateur, libre, GPL, GNU, free software />	title>Local index - HTTrack Website Copier/title>  !-- Mirror and index made by HTTrack Website Copier/3.46 XR&CO2010 -->	style typetext/css>	!--body {	margin: 0;  padding: 0;  margin-bottom: 15px;  margin-top: 8px;	background: #77b;}body, td {	font: 14px Trebuchet MS, Verdana, Arial, Helvetica, sans-serif;	}#subTitle {	background: #000;  color: #fff;  padding: 4px;  font-weight: bold; 	}#siteNavigation a, #siteNavigation .current {	font-weight: bold;  color: #448;	}#siteNavigation a:link    { text-decoration: none; }#siteNavigation a:visited { text-decoration: none; }#siteNavigation .current { background-color: #ccd; }#siteNavigation a:hover   { text-decoration: none;  background-color: #fff;  color: #000; }#siteNavigation a:active  { text-decoration: none;  background-color: #ccc; }a:link    { text-decoration: underline;  color: #00f; }a:visited { tex

Port 443

HTTP/1.1 200 OKLast-Modified: Mon, 07 Aug 2017 10:59:53 GMTContent-Type: text/htmlContent-Length: 5122Accept-Ranges: bytesDate: Thu, 11 Jul 2019 20:34:44 GMTServer: LiteSpeedAlt-Svc: quic:443; ma25920

Subdomains

Date	Domain	IP
www.yurtdisiegitim.tv	2024-11-01	185.179.27.104

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]