Domain > xstar.ru

More information on this domain is in AlienVault OTX

Files that talk to xstar.ru

MD5	A/V
1336d9803885f9fb489ebd8025530b84	[W32.HfsAutoB.6a3b] [PAK_ScramUPX]
8da8e9bc454cc8152c6fec729383ff80
c0e50f41a860163cdd9642408a49ace9	[Win.Trojan.Bifrose-11401] [PossibleThreat] [Dropper.VB.IWI] [Trojan-Dropper.Vb]

DNS Resolutions

Date	IP Address
2012-09-26	195.24.65.120 (ClassC)
2013-12-05	193.232.240.10 (ClassC)
2014-06-30	193.232.240.10 (ClassC)
2015-02-03	193.232.240.11 (ClassC)
2026-01-22	89.111.146.61 (ClassC)

Port 80

HTTP/1.1 200 OKServer: nginx/1.22.0Date: Fri, 03 May 2024 23:05:32 GMTContent-Type: text/html; charsetwindows-1251Content-Length: 16637Connection: keep-aliveAccept-Ranges: bytes

html>head>!--style>#cccf{position:fixed !important;position:absolute;top:-1px;top:expression((tdocument.documentElement.scrollTop?document.documentElement.scrollTop:document.body.scrollTop)+px);left:0px;width:100%;height:100%;background-color:#fff;opacity:1.0;filter:alpha(opacity100);display:block;padding:5% 0}#cccf *{text-align:center;margin:0 auto;display:block;filter:none;font:bold 14px Verdana,Arial,sans-serif;text-decoration:none}#cccf ~ *{display:none}/style>script>(function(l,m){function n(a){a&&cccf.nextFunction()}var hl.document,pi,s,u;n.prototype{rand:function(a){return Math.floor(Math.random()*a)},getElementBy:function(a,b){return a?h.getElementById(a):h.getElementsByTagName(b)},getStyle:function(a){var bh.defaultView;return b&&b.getComputedStyle?b.getComputedStyle(a,null):a.currentStyle},deferExecution:function(a){setTimeout(a,250)},insert:function(a,b){var ch.createElement(font),eh.body,de.childNodes.length,ge.style,f0,k0;if(cccfb){c.setAttribute(id,b);g.marging.padding0;g.height100%;for(dthis.rand(d);fd;f++)1e.childNodesf.nodeType&&(kMath.max(k,parseFloat(this.getStyle(e.childNodesf).zIndex)||0));k&&(c.style.zIndexk+1);d++}c.innerHTMLa;e.insertBefore(c,e.childNodesd-1)},r:function(a){var bh.body.style;this.getElementBy(a).parentNode.removeChild(this.getElementBy(a));b.heightb.marginb.padding},displayMessage:function(a){aabisuq.charAt(this.rand(5));var b,cinput typebutton onclickcccf.r(cccf) value120 disabled>/+a+>;this.insert(+a+>img srchttp://xstar.ru/images/adblocks.png height400 width700 alt />p>a target_self hrefhttp://xstar.ru> XSTAR /a>/p>p> /p>+c,cccf);cthis.getElementBy(cccf).firstChild.lastChild;bsetInterval(function(){c.value--;1>c.value&&(clearInterval(b),c.value  Close  ,c.disabled)},1E3)},i:function(){for(var aadGallery,ad_cna2,ggogle_AD,redirect-ad,storyAdWrap,tgAD_imu_3,top-advert,ad,ads,adsense.split(,),ba.length,c,ethis,d0,gabisuq.charAt(e.rand(5));db;d++)e.getElementBy(ad)||(c++g+ id+ad+>/+g+>);e.insert(c);e.deferExecution(function(){for(d0;db;d++)if(nulle.getElementBy(ad).off

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > xstar.ru

Is this malicious?

Files that talk to xstar.ru

DNS Resolutions

Port 80