Domain > agitki.ru

More information on this domain is in AlienVault OTX

Files that talk to agitki.ru

MD5	A/V
611b727af9a9041dceefd4b3b7cc98dd	[Backdoor.Bot] [WS.Reputation.1] [HEUR/Malware] [Heuristic.BehavesLike.Win32.Suspicious-BAY.S]
2408b2c4fe8208c59a303f6281f9b72b	[Trojan.DownLoader4.56255]

DNS Resolutions

Date	IP Address
2019-02-26	194.58.56.7 (ClassC)
2019-03-02	194.58.56.58 (ClassC)
2019-03-02	194.58.56.169 (ClassC)
2019-03-02	194.58.56.8 (ClassC)
2019-03-05	194.58.56.191 (ClassC)
2019-03-07	194.58.56.54 (ClassC)
2024-07-18	136.243.214.233 (ClassC)
2025-07-29	104.21.49.155 (ClassC)
2025-08-13	172.67.191.46 (ClassC)

Port 443

HTTP/1.1 200 OKServer: nginx/1.16.1Date: Wed, 10 Jan 2024 08:15:05 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encoding

html>    head>        title>agitki.ru/title>        meta charsetutf-8>meta nameviewport contentwidthdevice-width, initial-scale1, shrink-to-fitno>!--google analytics -->!--google adsense-->!-- Yandex.RTB -->script>window.yaContextCbwindow.yaContextCb||/script>script srchttps://yandex.ru/ads/system/context.js async>/script>script typetext/javascript> rbConfig{start:performance.now(),rbDomain:newrrb.bid,rotator:1fumw};/script>script asyncasync typetext/javascript src//newrrb.bid/1fumw.min.js>/script>script charsetutf-8 async srchttps://rbtwo.bid/pjs/AiIm_t0YA.js>/script>        	link relnext hrefhttp://agitki.ru/?page2 />    !--google analytics -->!--google adsense-->!-- Yandex.RTB -->script>window.yaContextCbwindow.yaContextCb||/script>script srchttps://yandex.ru/ads/system/context.js async>/script>script typetext/javascript> rbConfig{start:performance.now(),rbDomain:newrrb.bid,rotator:1fumw};/script>script asyncasync typetext/javascript src//newrrb.bid/1fumw.min.js>/script>script charsetutf-8 async srchttps://rbtwo.bid/pjs/AiIm_t0YA.js>/script>/head>    body>        header classnav-bg>  nav classcontainer navbar navbar-expand-md navbar-dark>      a classnavbar-brand logotype hrefhttp://agitki.ru/>      img src/assets/img/logo.png width50 height50 classd-inline-block align-center alt>      agitki.ru    /a>    button classnavbar-toggler typebutton data-togglecollapse data-target#navbarSupportedContent aria-controlsnavbarSupportedContent aria-expandedfalse aria-labelToggle navigation>      span classnavbar-toggler-icon>/span>    /button>    div classnavbar-collapse collapse idnavbarSupportedContent>            ul classmr-auto navbar-nav>                /ul>            !--      form classform-inline my-2 my-lg-0>        input classform-control mr-sm-2 typesearch placeholderSearch aria-labelSearch>        button classbtn search-button my-2 my-sm-0 typesubmit>Search/button>      /form>        -->    /div>  /nav>/header>                h1 classcontainer mt-3>agitki.ru/h1>                main rolemain>            div cla

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > agitki.ru

Is this malicious?

Files that talk to agitki.ru

DNS Resolutions

Port 80

Port 443