Domain > yury2.nichost.ru

More information on this domain is in AlienVault OTX

Files that talk to yury2.nichost.ru

MD5	A/V
4d71accacdb637ed83232c22ef252ea0
08eb95aa1c12d85e63d4a34b57de749c
778c251c52a06ccf8f06cce19fd15e98	[JS:Trojan.JS.Downloader.HT] [JS/Nemucod.ik] [JS:Trojan.JS.Downloader.HT] [JS.Downloader] [JS/TrojanDownloader.Nemucod.UH] [Trojan-Downloader.JS.Cryptoload.tj] [Trojan.Script.Nemucod.ebwcxu] [Js.Trojan.Raas.Auto] [JS:Trojan.JS.Downloader.HT] [JS:Trojan.JS.Downloader.HT] [JS/Nemucod.ik] [JS/Dldr.Locky.PW] [TrojanDownloader:JS/Swabfex.P] [JS:Trojan.JS.Downloader.HT] [JS:Trojan.JS.Downloader.HT] [JS/Obfus.S28] [JS:Trojan.JS.Downloader.HT] [Trojan-Ransom.Script.Locky] [JS/TrojanDldr.7827!tr]
b256139c76a2cbccc78e53d51c0290ed	[JS:Trojan.JS.Downloader.HT] [JS:Trojan.JS.Downloader.HT] [Trojan-Downloader.JS.Cryptoload.tj] [JS:Trojan.JS.Downloader.HT] [Js.Trojan.Raas.Auto] [JS:Trojan.JS.Downloader.HT] [JS:Trojan.JS.Downloader.HT] [JS/Dldr.Locky.QG] [JS:Trojan.JS.Downloader.HT] [TrojanDownloader:JS/Swabfex.P] [JS/Obfus.S28] [JS/Nemucod.gf] [JS/TrojanDownloader.Nemucod.UH] [Trojan.DL-Locky!1.A4D0] [Trojan-Ransom.Script.Locky] [JS/TrojanDldr.7827!tr]

DNS Resolutions

Date	IP Address
2025-08-08	91.189.114.30 (ClassC)

Port 80

HTTP/1.1 200 OKServer: openrestyDate: Wed, 10 Apr 2024 13:42:31 GMTContent-Type: text/html; charsetwindows-1251Content-Length: 87072Connection: keep-aliveAccept-Ranges: bytes

!DOCTYPE html>html langen>head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    title>Не опубликован/title>    link hrefhttps://fonts.googleapis.com/css2?familyNoto+Sans:wght@400;700&displayswap relstylesheet>    script srchttps://yastatic.net/pcode/adfox/loader.js crossoriginanonymous>/script>    script typetext/javascript languagejavascript>        var punycode  new function Punycode() {            this.utf16  {                decode: function (input) {                    var output  , i  0, len  input.length, value, extra;                    while (i  len) {                        value  input.charCodeAt(i++);                        if ((value & 0xF800)  0xD800) {                            extra  input.charCodeAt(i++);                            if (((value & 0xFC00) ! 0xD800) || ((extra & 0xFC00) ! 0xDC00)) {                                throw new RangeError(UTF-16(decode): Illegal UTF-16 sequence);                            }                            value  ((value & 0x3FF)  10) + (extra & 0x3FF) + 0x10000;                        }                        output.push(value);                    }                    return output;                },                encode: function (input) {                    var output  , i  0, len  input.length, value;                    while (i  len) {                        value  inputi++;                        if ((value & 0xF800)  0xD800) {                            throw new RangeError(UTF-16(encode): Illegal UTF-16 value);                        }                        if (value > 0xFFFF) {                            value - 0x10000;                            output.push(String.fromCharCode(((value >>> 10) & 0x3FF) | 0xD800));                            value  0xDC00 | (value & 0x3FF);                        }                        output.push(String.fromCharCode(value));                    }                    return output.join();                }            }            var initial_n  0x80;

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > yury2.nichost.ru

Is this malicious?

Files that talk to yury2.nichost.ru

DNS Resolutions

Port 80