Help
RSS
API
Feed
Maltego
Contact
Domain > activator-windows.ru
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
Files that talk to activator-windows.ru
MD5
A/V
37bb62bc53ec5f404122beabb2612810
[
Trojan.DOMG.jkyl
] [
Application.LoadMoney.DE
] [
Win32/Kryptik.DRTF
] [
Win32/Heim
] [
Application.LoadMoney.DE
] [
Application.LoadMoney.DE
] [
Trojan.MSIL.VT
] [
W32/S-32bc7958!Eldorado
] [
Win32.Heim
] [
Application.LoadMoney.DE
] [
Application.LoadMoney.DE
] [
Application.LoadMoney.DE
] [
Trojan.DownLoader15.6042
]
DNS Resolutions
Date
IP Address
2014-12-12
193.109.247.235
(
ClassC
)
2016-10-08
37.187.83.72
(
ClassC
)
2019-08-29
87.236.16.142
(
ClassC
)
2024-09-18
95.215.205.165
(
ClassC
)
2025-12-02
91.226.31.86
(
ClassC
)
2026-01-28
91.226.30.3
(
ClassC
)
Port 80
HTTP/1.1 301 Moved PermanentlyServer: nginx/1.18.0Date: Sun, 18 Feb 2024 22:33:14 GMTContent-Type: text/html; charsetiso-8859-1Transfer-Encoding: chunkedConnection: keep-aliveLocation: https://activat !DOCTYPE HTML PUBLIC -//IETF//DTD HTML 2.0//EN>html>head>title>301 Moved Permanently/title>/head>body>h1>Moved Permanently/h1>p>The document has moved a hrefhttps://activator-windows.ru/>here/a>./p>/body>/html>
Port 443
HTTP/1.1 200 OKServer: nginx/1.18.0Date: Sun, 18 Feb 2024 22:33:15 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/7.2.34Strict-Transport-Secu !DOCTYPE html>html classno-js langru-RU>head>link reldns-prefetch href//s.w.org>script>!function(e,t){function n(){for(var e,nt.getElementsByTagName(link),r0;rn.length;r++)preload(enr).rel&&stylee.getAttribute(as)&&(!function(e,n,r){function a(){l.addEventListener&&l.removeEventListener(load,a),l.mediar||all}var lt.createElement(link);l.relstylesheet,l.hrefe,l.mediaonly x;l.addEventListener&&l.addEventListener(load,a);(function e(){t.body?n.parentNode.insertBefore(l,n):setTimeout(e)})(),function e(){for(var nt.styleSheets,rn.length;r--;)if(nr.hrefl.href)return a();setTimeout(e)}()}(e.href,e,e.media),e.relnull)}function r(){n(),clearInterval(a)}try{if(t.createElement(link).relList.supports(preload))return}catch(e){}var asetInterval(n,300);e.addEventListener&&e.addEventListener(load,r),e.attachEvent&&e.attachEvent(onload,r),n()}(window,document);/script>script>use strict;!function(e,t,n,r,a,o){function i(e,r,a){for(at.getElementsByTagName(script),e0;rae++;)text/ressr.type&&n.push(r);o,t.writefunction(e){o+e},t.writelnfunction(e){o+e+ },l()}function l(e,r,i,d,s){if(o){for((dt.createElement(p)).innerHTMLo,ea.nextSibling;sd.firstChild;)a.parentNode.insertBefore(s,e);o}if(en.shift()){for(at.createElement(script),d0;se.attributesd++;)a.setAttribute(s.nodeName,s.nodeValue);a.typetext/javascript,(re.getAttribute(ress-src))?(a.onloada.onerrora.onreadystatechangefunction(){!a.onload||a.readyState&&loaded!a.readyState&&complete!a.readyState||(a.onloada.onerrora.onreadystatechangenull,setTimeout(l))},a.srcr):(re.text||e.textContent||e.innerHTML,a.text?a.textr:a.appendChild(t.createTextNode(r)),setTimeout(l)),(ie.parentNode).insertBefore(a,e),i.removeChild(e)}}completet.readyState?i():e.addEventListener?e.addEventListener(load,i):e.attachEvent(onload,i)}(window,document,);/script>link reldns-prefetch href//fonts.googleapis.com>link reldns-prefetch href//fonts.gstatic.com>link relpreconnect href//fonts.googleapis.com crossoriginanonymous>link relpreconnect href//fonts.gstatic.com crossoriginanonymous>script>!function(e){ress_lo
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]