Domain > zeltea.ru

More information on this domain is in AlienVault OTX

Files that talk to zeltea.ru

MD5	A/V
4487582307389d131de4c04ffc0b402a	[W32/Trojan.TBEX-5751] [TR/Drop.Cutwail.30] [Win32/Cutwail.XMeeGEB] [Win32/Kryptik.CIPN] [W32/Kryptik.CIMI!tr] [Crypt3.AJNE] [Trojan.Win32.Cutwail] [Trojan-Dropper.Win32.Dorifel.alzp] [TrojanDropper*Win32/Cutwail] [Troj/Cutwail-BH] [Trojan.Pandex] [TROJ_CUTWAIL.YBM] [Trojan.Cutwail]
14c4a854f5fb5925e4ffd4195993a430	[W32/S-1ff7985f!Eldorado] [TR/Cutwail.dps] [Win32/Kryptik.CJAO] [W32/Kryptik.CJCN!tr] [Crypt3.AKLG] [Trojan.Win32.Cutwail] [Trojan.Ransom.ED] [Trojan-FEOI!14C4A854F5FB] [Mal_Dalexis] [SScope.Malware-Cryptor.Hlux]
004e1fcfb084f500738f1302e36d3047	[TR/Crypt.ZPACK.89227] [TrojanPWS.Kegotip.WR4] [Trojan.DownLoad.64914] [Win32/Wigon.PH] [W32/Kryptik.GKA!tr] [SHeur4.BZBC] [Trojan.Win32.Wigon] [Trojan.Malware.Packer] [Downloader-FAKM!004E1FCFB084] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL]
47916fbb3e05c262e54f467ffb520ec4	[Win32/Kryptik.CIFH] [Trojan.Win32.Cutwail.dib]
08cdbddc75bd05123efc3faccd8cd6eb	[TR/Crypt.ZPACK.91708] [Trojan.DownLoad.64914] [Win32/Wigon.PI] [W32/Kryptik.CHOC!tr] [Trojan.Win32.Cutwail.dhp] [Trojan.Ransom.ED] [Ransom-FLS!08CDBDDC75BD] [TrojanDownloader*Win32/Cutwail]
6bc8bf766abaddc3ac6831c88300ff82	[W32/Trojan.IFVX-2447] [TrojanPWS.Kegotip.WR4] [Trojan.DownLoad.64914] [Win32/Wigon.PH] [W32/Kryptik.GKA!tr] [SHeur4.BZBC] [Trojan.Win32.Wigon] [Trojan.Malware.Packer] [Downloader-FAKM!6BC8BF766ABA] [TrojanDownloader*Win32/Cutwail] [Mal/Wonton-AK]
3755b306619194d6bc27b271798555b9	[TR/Drop.Cutwail.4] [Win32/Wigon.PH] [Trojan.Win32.Cutwail.djl] [TrojanDropper*Win32/Cutwail] [swizzor/Heur.I]
64f36893cc504523e7edf5f88ee4a365	[Win32/Kryptik.CIFH] [Trojan.Win32.Cutwail.dib]
7ff99e363f84948a30b7dd76ee273b57	[TR/Kazy.425834.1] [Win32/Wigon.PH] [Trojan.Win32.Yakes.fmat] [Mal/Cutwail-C]
7e304d36faa997f755298c4fa414ac8d	[Win32/Cutwail.MFfJLDB] [Trojan.DownLoad.64914] [Win32/Kryptik.CJHA] [Crypt3.AKXB] [TROJ_CUTWAIL.SM7] [Trojan.Cutwail]
4228a8e31ad3dfd9890a85771069f94b	[TR/Crypt.ZPACK.89227] [Trojan.DownLoad.64914] [Win32/Wigon.PH] [SHeur4.BZBC] [Trojan.Win32.Wigon] [Trojan.Malware.Packer] [TrojanDownloader*Win32/Cutwail] [winpe/Kryptik.CECM] [Mal/Zbot-QL] [Backdoor.Trojan]
f1f7bad77b0adc97bc4cf002a3c6b9be	[Trojan.PWS.ZEL] [Trojan.DownLoad.64914] [Win32/Wigon.PI] [Trojan-PSW.Win32.Fareit] [Trojan-PSW.Win32.Fareit.aqum] [Mal/Cutwail-C]
6847b4ef7b9a9b6040bc5aaec604fc60	[W32.KryptikSymmiN.Trojan] [Downloader-FAKM!6847B4EF7B9A] [Trojan.Malware.Packer] [Kryptik.CECM] [UnclassifiedMalware] [Trojan.DownLoad.64914] [BehavesLike.Win32.Downloader.lh] [Mal/Zbot-QL] [W32/Trojan.NBAB-0037] [TR/Crypt.ZPACK.89227] [TrojanDownloader:Win32/Cutwail] [Trojan/Win32.CryptoWall] [Win32/Wigon.PH] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.Win32.Wigon] [W32/Kryptik.GKA!tr] [SHeur4.BZBC] [Trojan.Win32.Wigon.bPH]
0ad2c3edf5226bce6ad9e0cbeda2df32	[TR/Drop.Cutwail.K.9] [Win32/Wigon.PH] [W32/Yakes.FMMP!tr] [Trojan.Win32.Yakes.fmmp]

DNS Resolutions

Date	IP Address
2014-08-08	92.38.229.235 (ClassC)
2015-05-28	37.140.192.62 (ClassC)
2019-09-07	92.53.96.144 (ClassC)
2019-12-03	176.57.216.145 (ClassC)
2022-04-27	193.164.149.81 (ClassC)
2024-06-30	185.178.45.36 (ClassC)
2026-01-15	87.236.16.245 (ClassC)

Port 443

HTTP/1.1 200 OKServer: nginxDate: Sun, 30 Jun 2019 16:59:53 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingP3P: policyref/bitrix/p3p.xml,

!DOCTYPE html>html xmlnshttp://www.w3.org/1999/xhtml xml:langru langru >head>	title>Купить чай в Москве в интернет магазине Чайная симфония/title>	meta nameviewport contentinitial-scale1.0, widthdevice-width />	meta nameHandheldFriendly contenttrue />	meta nameyes contentyes />	meta nameapple-mobile-web-app-status-bar-style contentblack />	meta nameSKYPE_TOOLBAR contentSKYPE_TOOLBAR_PARSER_COMPATIBLE />	meta http-equivContent-Type contenttext/html; charsetUTF-8 />meta namekeywords contentкупить чай, купить чай в москве, магазин чая, чай, чай в москве, китайский чай купить,  чай заказать, чай из китая />meta namedescription contentКупить чай в Москве в интернет магазине Чайная симфония />link href/bitrix/cache/css/s1/aspro_next/kernel_main/kernel_main.css?154160183126563 typetext/css relstylesheet />link hrefhttps://fonts.googleapis.com/css?familyPT+Sans+Caption:400italic,700italic,400,700&subsetlatin,cyrillic-ext typetext/css  relstylesheet />link href/bitrix/cache/css/s1/aspro_next/template_be53e21b64c53b04dfab2693f8e9e121/template_be53e21b64c53b04dfab2693f8e9e121.css?1554321041967985 typetext/css data-template-styletrue relstylesheet />link href/bitrix/panel/main/popup.min.css?152475679220704 typetext/css  data-template-styletrue  relstylesheet />script >if(!window.BX)window.BX{};if(!window.BX.message)window.BX.messagefunction(mess){if(typeof messobject) for(var i in mess) BX.messageimessi; return true;};/script>script >(window.BX||top.BX).message({JS_CORE_LOADING:Загрузка...,JS_CORE_NO_DATA:- Нет данных -,JS_CORE_WINDOW_CLOSE:Закрыть,JS_CORE_WINDOW_EXPAND:Развернуть,JS_CORE_WINDOW_NARROW:Свернуть в окно,JS_CORE_WINDOW_SAVE:Сохранить,JS_CORE_WINDOW_CANCEL:Отменить,JS_CORE_WINDOW_CONTINUE:Продолжить,JS_CORE_H:ч,JS_CORE_M:м,JS_CORE_S:с,JSADM_AI_HIDE_EXTRA:Ск

Subdomains

Date	Domain	IP
www.zeltea.ru	2014-09-27	92.38.229.235

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > zeltea.ru

Is this malicious?

Files that talk to zeltea.ru

DNS Resolutions

Port 80

Port 443

Subdomains