Domain > 5gbfree.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 5gbfree.com

MD5	A/V
3356ebab1bc8aa9e6212f584bdfc7566	[W32.CleanspyC.Trojan] [Trojan.Spy.Zbot.FJB] [Trojan-Spy/W32.ZBot.141824.EI] [Trojan-Spy.Win32.Zbot!O] [TrojanPWS.Zbot.CP3] [Spyware.Zbot] [Trojan/Spy.Zbot.biwp] [Trojan.Win32.Zbot.rhehs] [Trojan.Zbot] [ZBot.VAL] [Win32/Zbot.EGB] [Trojan.Spy.Zbot-142] [Trojan-Spy.Win32.Zbot.biwp] [Trojan.Win32.A.Zbot.141312.B] [PE:Stealer.Zbot!1.648A] [TrojWare.Win32.Kazy.MKD] [Trojan-Spy:W32/Zbot.AVTH] [Trojan.PWS.Panda.4795] [TR/Spy.ZBot.511005] [TSPY_ZBOT.SMIG] [Troj/PWS-BSF] [TrojanSpy.Zbot.abiz] [Trojan/Win32.Zbot] [SScope.Trojan.FakeAV.01110] [Win32/Spy.Zbot.YW] [Trojan.Spyeye] [W32/Zbot.AT!tr] [Trojan.Win32.Zbot.BYW] [TrojanSpy.Zbot!uNA0gNT29JU] [Trojan[Spy]/Win32.Zbot] [Win32.PSWTroj.Undef.(kcloud)] [Win32.Trojan-sp]
056bc8cfebb9a203941563405118d030
1A0F6D3D8EC9912954018272A45F0653	[Note:]
13175516cfa51a16f905e801533471b6	[Trojan.MSIL.Injector] [MSIL/Injector.LXI!tr]
af147e5b0c1b9daf69e0f7fc59662e2e
9d416ef95a330ce4a65124dd2963eb3d	[W97M/Downldr] [W97M/Downloader.act] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan.d] [W97M/Downloader.act] [WM/Moat.59A54E96!tr] [heur.macro.download.rb]
4f9b48808c060996703cdd947ce105a8
e3f72deae0c0018e655e12224f11a487
d43c3ccac95c31465465f388d89b3f91
b9cb51ade084263beca2e8f6382c4a33	[Exploit.CVE-2012-0158.AZ] [Exploit/W32.CVE-2012-0158.ACD] [Exp.RTF.CVE-2014-1761.B] [Exploit-CVE2012-0158!rtf] [Exploit.CVE-2012-0158.AZ] [Win32/Exploit.CVE-2014-1761.V] [TROJ_FRS.0NA003BN16] [Exploit.RTF.CVE2012-0158.b] [DOC.S.CVE-2012-0158.997716[h]] [Exploit.CVE-2012-0158.AZ] [Troj/DocDrop-DT] [Exploit.CVE-2012-0158.AZ] [TROJ_FRS.0NA003BN16] [Exploit-CVE2012-0158!rtf] [Exploit:Win32/CVE-2012-0158] [Exploit.CVE-2012-0158.AZ] [Exploit.Rtf.Cve2012!c] [RTF/Dropper] [Exploit.CVE-2012-0158.AZ] [Exploit.CVE-2012-0158.AZ] [Win32.Trojan.Cve2012-0158.Pijz] [Exploit.Win32.CVE-2012-0158] [PossibleThreat.P0] [Exploit_c.ADDX] [virus.exp.20120158]
3655a58642ca96d25f66c89c8727cac9
4b6492e21f75473563468635c9a1e698	[Exploit.RTF.AD] [Exploit/W32.CVE-2012-0158.ACD] [Exp.RTF.CVE-2014-1761.B] [Exploit-CVE2012-0158.n] [Bloodhound.RTF.3] [Win32/Exploit.CVE-2014-1761.V] [Exploit.RTF.AD] [Exploit.MSWord.CVE-2014-1761.u] [Exploit.RTF.AD] [Exploit.RTF.AD] [Exploit.RTF.AD] [Exploit.Rtf.CVE2012-0158] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158.n] [Troj/DocDrop-DT] [Exploit.RTF.AD] [Exploit:Win32/CVE-2012-0158] [RTF/Dropper] [Win32.Trojan.Cve-2014-1761.Pega] [Exploit_c.ADDX] [virus.exp.20120158]
50e1452918aa04cbde6aed5bb41df48a	[Exploit.RTF.AD] [Exploit/W32.CVE-2012-0158.ACD] [Exp.RTF.CVE-2014-1761.B] [Exploit-CVE2012-0158.n] [Exploit.RTF.AD] [Bloodhound.RTF.3] [Win32/Exploit.CVE-2014-1761.V] [Exploit.MSWord.CVE-2014-1761.u] [Exploit.RTF.AD] [Troj/DocDrop-DT] [Exploit.RTF.AD] [Exploit.Rtf.CVE2012-0158] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158.n] [Exploit:Win32/CVE-2012-0158] [Exploit.RTF.AD] [RTF/Dropper] [Exploit.RTF.AD] [Exploit.RTF.AD] [Win32.Trojan.Cve-2014-1761.Swaz] [Exploit_c.ADDX] [heur.rtf.obfuscated.1]
7bed0bd1a4efe318b36fbf02be90ab80	[W32.AppdataWinupdtLnr.Trojan] [Trojan.Dusvext.A5] [Trojan/Vnfraye.a] [Trojan.Win32.MLW.dpvjba] [W32/Dusvext.JEML-8693] [Backdoor.Vertexbot] [Win32/Vnfraye.A] [TROJ_DUSVEXT.SM] [Backdoor.Win32.Vernet.axt] [Trojan.Vnfraye!ZphwYheYjUY] [Backdoor.Win32.IRCBot.146944.J[h]] [Backdoor.Win32.Amtar.vna] [BackDoor.Vertex.25] [Trojan.Vnfraye.Win32.1] [TROJ_DUSVEXT.SM] [W32/Dusvext.A] [BDS/Vertex.A] [W32/Vnfraye.AAA!tr] [Trojan.Adware.Symmi.D13C1] [Trojan:Win32/Dusvext.A] [Backdoor.Vernet] [Trojan.Vnfraye.A]
a9504d735e28b915f217b902369c8d66	[Exploit/W32.CVE-2012-0158.ACD] [Exp.RTF.CVE-2014-1761.B] [Exploit-CVE2012-0158!rtf] [Win32/Exploit.CVE-2014-1761.V] [Troj/DocDrop-DT] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158!rtf] [RTF/Dropper] [Exploit:Win32/CVE-2012-0158] [Exploit_c.ADDX] [virus.exp.20120158]
46ea29412ea39243ed9a8cd9cfb222f7	[Exploit/W32.CVE-2012-0158.ACD] [Exp.RTF.CVE-2014-1761.B] [Exploit-CVE2012-0158!rtf] [Win32/Exploit.CVE-2014-1761.V] [Troj/DocDrop-DT] [HEUR_RTFMALFORME] [Exploit-CVE2012-0158!rtf] [Exploit:Win32/CVE-2012-0158] [RTF/Dropper] [Exploit_c.ADDX] [virus.exp.20120158]
deed8b633150660580ddd25b5454284d	[W97M/Downloader.act] [W2KM_DLOADR.YYSOQ] [W2Km.Dloadr.Yysoq!c] [Troj/DocDl-AZW] [W2KM_DLOADR.YYSOQ] [W97M/Downloader.act] [Downloader.MFWA-] [HEUR.VBA.Trojan.d] [WM/Moat.59A54E96!tr]
98f9b675ed4b015fbe52885244020499	[HEUR.VBA.Trojan.d] [W97M.DownLoader.874] [W97M/Downloader.act] [Troj/DocDl-AZW] [W97M/Downldr] [W97M/Downloader.act] [WM/Moat.59A54E96!tr]
efc7ee901babd8bcdafed4c830f023bb	[W97M/Downloader.act] [HEUR.VBA.Trojan.d] [W97M.DownLoader.874] [W97M/Downloader.act] [Troj/DocDl-AZW] [W97M/Downldr] [W2000M/Donoff.DC] [WM/Moat.59A54E96!tr]
dba8cdd2326c1f880a870e765d6c4f4e

Whois

Property	Value
Email	ENOMCONTACT@FIBER.NET
NameServer	NS2.5GBFREE.COM
Created	2007-01-03 00:00:00
Changed	2014-08-08 00:00:00
Expires	2023-01-03 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2011-04-07	184.107.12.170 (ClassC)
2012-01-18	216.83.154.181 (ClassC)
2012-02-05	127.0.0.1 (ClassC)
2012-04-08	209.90.88.130 (ClassC)
2012-07-18	209.90.88.133 (ClassC)
2012-08-21	209.90.88.137 (ClassC)
2013-03-30	209.90.88.135 (ClassC)
2013-05-16	209.90.88.134 (ClassC)
2013-05-19	209.90.88.131 (ClassC)
2013-07-09	209.90.88.132 (ClassC)
2013-10-18	209.90.88.136 (ClassC)
2014-01-13	209.90.88.138 (ClassC)
2014-01-13	209.90.88.139 (ClassC)
2025-10-17	209.90.85.4 (ClassC)

Port 80

Subdomains

Date	Domain	IP
leon10.5gbfree.com	2014-05-24	209.90.88.138
www.a3148922.5gbfree.com	2014-05-01	209.90.88.137
lashlola.5gbfree.com	2016-02-22	209.90.88.135
justafak.5gbfree.com	2014-08-31	209.90.88.136
www.justafak.5gbfree.com	2015-06-14	209.90.88.136
grump.5gbfree.com	2015-08-01	209.90.88.135
spartanr.5gbfree.com	2014-06-26	209.90.88.139
www.5gbfree.com	2025-10-17	209.90.85.4

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]