Domain > 14-18.ru

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 14-18.ru

MD5	A/V
b7b3a8dd86f02c5757f0288cf0fea098	[Trojan.RanSerKD.3659438] [Trojan.RanSerKD.3659438] [Trojan.Ole2.Vbs-heuristic.druvzi] [Trojan.RanSerKD.3659438] [HEUR_VBA.O2] [HEUR.VBA.Trojan.e] [Trojan.RanSerKD.3659438] [Win32.SuspectCrc] [W97M/Downloader] [O97M/Downloader] [virus.office.obfuscated.1]

DNS Resolutions

Date	IP Address
2018-09-06	31.41.40.16 (ClassC)
2019-03-31	194.58.56.90 (ClassC)
2019-04-05	194.58.56.74 (ClassC)
2019-04-07	194.58.56.73 (ClassC)
2019-04-13	194.58.56.56 (ClassC)
2019-04-13	194.58.56.92 (ClassC)
2019-05-16	31.41.41.1 (ClassC)
2019-09-21	31.41.40.2 (ClassC)
2019-12-03	192.99.14.211 (ClassC)
2020-04-13	194.58.56.238 (ClassC)
2020-04-13	194.58.56.239 (ClassC)
2020-05-10	194.247.13.78 (ClassC)
2020-05-12	185.104.45.94 (ClassC)
2021-05-28	104.21.83.90 (ClassC)
2021-05-28	172.67.220.238 (ClassC)
2024-08-02	78.108.80.33 (ClassC)
2024-09-04	178.218.218.144 (ClassC)
2024-09-20	91.226.31.82 (ClassC)
2025-09-15	91.226.30.3 (ClassC)
2025-10-13	91.226.31.86 (ClassC)
2026-01-19	103.75.127.156 (ClassC)

Port 80

Subdomains

Date	Domain	IP
and.14-18.ru	2025-08-11	91.226.30.3
land.14-18.ru	2024-09-21	91.226.31.93

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]