Domain > 12gbfree.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 12gbfree.com

MD5	A/V
95c570dd3a5153dda5e6e66bd80ed1c2	[W32.AlwarevenQZ.Trojan] [Trojan-Spy/W32.Banker.279280] [PWS-Banker] [Trojan/Banker.hrw] [Packed/Upack] [W32/Heuristic-210!Eldorado] [Infostealer.Bancos] [Cryp_Xed-12] [Trojan-Banker.Win32.Banker.hrw] [Trojan.Win32.Banker.phuv] [Packed.Win32.UPack] [Trojan.PWS.Banker.17839] [Cryp_Xed-12] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Mal/Banspy-K] [TrojanSpy.Banker.ncb] [Win32.Troj.Banker.(kcloud)] [Worm:Win32/Bancorkut.B] [Win-Trojan/Banker.279280] [W32/Heuristic-210!Eldorado] [TrojanBanker.Banker] [Trj/Pupack.A] [SHeur.ANQS] [Trojan.Win32.Banker.AUb] [Win32/Trojan.d37]
0d838d2c1d9baaf18b042bc1753924da	[W32.AlwarevenQZ.Trojan] [Trojan-Spy/W32.Banker.255184] [PWS-Banker] [Trojan.Banker.Win32.60536] [W32/Behav-Heuristic-060] [Trojan.Win32.Banker.cwmlwv] [W32/Heuristic-210!Eldorado] [W32.Bancorkut@mm] [Cryp_Xed-12] [Trojan-Banker.Win32.Banker.jge] [Trojan.PWS.Banker!pobAfsBNvuc] [Packed.Win32.UPack] [Trojan.DownLoader.61661] [Cryp_Xed-12] [PWS-Banker] [Mal/Banspy-K] [W32/Heuristic-210!Eldorado] [Trojan/Banker.Banker.wjb] [Trojan[Banker]/Win32.Banker] [Worm.Rokut.v.(kcloud)] [Worm:Win32/Bancorkut.B] [Win-Trojan/Banker.255504] [Trj/Pupack.A] [W32/Banker.JGE!tr.spy] [PSW.Banker4.WNB] [Trojan.Win32.Banker.As]
a68c41f7cc4ba04d17ddad173dc2a905	[W32.AlwarevenQZ.Trojan] [W32/Behav-Heuristic-060] [Trojan.PWS.Banker!/M39JWT3F44] [W32/Heuristic-210!Eldorado] [Cryp_Xed-12] [Trojan-Banker.Win32.Banker.jgf] [Trojan.Win32.Banker.cwmmsp] [Mal/Banspy-K] [Trojan.Banker.Win32.33530] [Cryp_Xed-12] [W32/Heuristic-210!Eldorado] [Trojan/Banker.Banker.xbo] [Win32.Troj.Banker.(kcloud)] [Worm:Win32/Bancorkut.B] [Win-Trojan/Banker.284300] [TrojanBanker.Banker] [Trj/Pupack.A] [Win32.Trojan-Banker.Banker.clbw] [Trojan-PWS.Win32.Delf] [SHeur.ALHO] [Trojan.Win32.Banker.awU] [Win32/Trojan.f27]
0707511cc0df79e56633676f2f9c1161	[W32.AlwarevenQZ.Trojan] [TrojanBanker.Banker.lnb] [PWS-Banker] [W32/Behav-Heuristic-060] [Trojan.Win32.Banker.phig] [W32/Heuristic-210!Eldorado] [W32.Bancorkut@mm] [Trojan-Banker.Win32.Banker.lnb] [TrojanSpy.Banker!mtDfJasMcbI] [Packed.Win32.UPack] [Trojan.PWS.Banker.22193] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Mal/Banspy-K] [TrojanSpy.Banker.qvn] [Worm.Rokut.v.(kcloud)] [Worm:Win32/Bancorkut.B] [W32/Heuristic-210!Eldorado] [Trj/Pupack.A] [PE:Backdoor.Win32.Delf.ymo!1075158164] [Trojan-Spy.Win32.Banpaes] [PSW.Banker4.ABUK] [Trojan.Win32.Banker.AOt]
37e0435124d109afe3adb85158ffa4b3	[W32.AlwarevenQZ.Trojan] [Artemis!37E0435124D1] [W32/Behav-Heuristic-060] [W32/Heuristic-210!Eldorado] [Cryp_Xed-12] [Packed/Upack] [Cryp_Xed-12] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Trojan:Win32/PossibleMalware.A] [Packed.Win32.UPack] [Backdoor.Hupigon] [PossibleThreat] [Trj/Pupack.A]

Whois

Property	Value
Email	privacy@dynadot.com
NameServer	PNS2.CLOUDNS.NET
Created	2013-05-27 00:00:00
Changed	2015-03-28 00:00:00
Expires	2016-05-27 00:00:00
Registrar	DYNADOT, LLC

DNS Resolutions

Date	IP Address
2015-04-27	185.53.177.20 (ClassC)
2016-02-02	54.72.9.51 (ClassC)
2016-02-28	185.53.177.9 (ClassC)
2019-06-09	185.53.178.9 (ClassC)
2019-07-05	185.53.179.6 (ClassC)
2019-07-07	67.225.218.50 (ClassC)
2019-07-25	69.16.230.43 (ClassC)
2019-09-17	72.52.179.175 (ClassC)
2023-10-16	18.140.56.104 (ClassC)
2025-08-03	212.24.177.231 (ClassC)

Subdomains

Date	Domain	IP
necrophilo.12gbfree.com	2013-12-03	62.116.143.19
dominusvis.12gbfree.com	2015-05-21	185.53.177.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]