Domain > amaru.me

More information on this domain is in AlienVault OTX

Files that talk to amaru.me

MD5	A/V
ea2d03fe41db2ff3e5b29c1a08c84217	[TR/Crypt.ZPACK.125365] [TrojanRansom.Crowti.A4] [Win32/Kryptik.CWZM] [W32/Kryptik.CXBS!tr] [Crypt3.BXSF] [Trojan.Win32.Crypt] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
1de86948dd9570631ecdefe9b5996847	[TR/Crypt.Xpack.138415] [Win32/Tnega.cKUZYdD] [Win32/Kryptik.DAVX] [W32/Kryptik.CWSU!tr] [Crypt3.BWMP] [Trojan.Win32.Crypt] [Ransom-FWE!1DE86948DD95] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-Z] [Trojan.Asprox.B]
829cd977ecb35878443c0cbb2dd2af35	[TR/Crypt.Xpack.139927] [Win32/Tnega.UDAVCWB] [TrojanRansom.Crowti.A4] [Win32/Kryptik.CWTY] [W32/Kryptik.CXBS!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWF!829CD977ECB3] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
5e79c6c2ce384ce40b680586d0c98a32	[TR/Crypt.Xpack.139709] [Win32/Tnega.IBAaLb] [Trojan.Betabot.3] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!5E79C6C2CE38] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
1013486c1a4c4b60de39fe804c1c6bba	[TR/Crypt.Xpack.139709] [Win32/Tnega.IBAaLb] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!1013486C1A4C] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
9f683591b7b156f44c902776a0d75f03	[TR/Crypt.Xpack.139709] [Win32/Tnega.IBAaLb] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!9F683591B7B1] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
b57261e61e1593d2db3e4ee8d5a67a22	[TR/Crypt.Xpack.139927] [Win32/Tnega.UDAVCWB] [TrojanRansom.Crowti.A4] [Win32/Kryptik.CWTY] [W32/Kryptik.CXBS!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWF!B57261E61E15] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
fc7ce2f21e8366b9c671241a3cf5195c	[TR/Crypt.Xpack.138415] [Win32/Tnega.cKUZYdD] [Win32/Kryptik.DAVX] [W32/Kryptik.CWSU!tr] [Crypt3.BWMP] [Trojan.Win32.Crypt] [Ransom-FWE!FC7CE2F21E83] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-Z] [Trojan.Asprox.B]
a27a377c673b0d9cf709cc413924037c	[TR/Crypt.ZPACK.125052] [TrojanRansom.Crowti.A4] [Trojan.Encoder.514] [Win32/Kryptik.CWWK] [W32/Kryptik.CXFI!tr] [Crypt3.BXBZ] [Trojan.Crypt] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Infostealer.Limitail]
8a50a392b230b67e6e5e0f7002bdbff0	[TR/Crypt.Xpack.138415] [Win32/Tnega.cKUZYdD] [Trojan.DownLoad3.35619] [Win32/Kryptik.DAVX] [W32/Kryptik.CWSU!tr] [Crypt3.BWMP] [Trojan.Win32.Crypt] [Ransom-FWE!8A50A392B230] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-Z] [Trojan.Asprox.B]
bed8dbc8379dd8294e74582a82544676	[TR/Crypt.Xpack.139709] [Win32/Tnega.IBAaLb] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!BED8DBC8379D] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
ca51840439d19e70001c4e8038b7c102	[TR/Crypt.Xpack.139709] [Win32/Tnega.IBAaLb] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!CA51840439D1] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
f6ce84c87e4b438380a58d64291cd085	[TR/Crypt.ZPACK.125365] [TrojanRansom.Crowti.A4] [Trojan.Packed.18626] [Win32/Kryptik.CWZM] [W32/Kryptik.CXBS!tr] [Crypt3.BXSF] [Trojan.Win32.Crypt] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
ed526538cfac7e20609543542bc87c50	[TR/Crypt.Xpack.140093] [Win32/Tnega.dHROTLB] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!ED526538CFAC] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
3a7725cdc51fcaed2ea79816c9508be8	[TR/Crypt.Xpack.139709] [Win32/Tnega.IBAaLb] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!3A7725CDC51F] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
3a123f4ffa8e3444d5046ef87f9b3fcc	[TR/Crypt.Xpack.139709] [Win32/Tnega.IBAaLb] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!3A123F4FFA8E] [RansomWin32/CrowtiTrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
364cbd68607560ec8ce1e8576663c148	[TR/Crypt.Xpack.140093] [Win32/Tnega.dHROTLB] [Trojan.Betabot.3] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!364CBD686075] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
dfa43a8d13e770ced160e0072276e2d2	[TR/Crypt.Xpack.139927] [Win32/Tnega.UDAVCWB] [TrojanRansom.Crowti.A4] [Win32/Kryptik.CWTY] [W32/Kryptik.CXBS!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWF!DFA43A8D13E7] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
52c45a8819c5866376a00c02f2daa456	[TR/Crypt.Xpack.140093] [Win32/Tnega.dHROTLB] [Win32/Kryptik.CWSU] [W32/Kryptik.CWSU!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Ransom-FWG!52C45A8819C5] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]
6ff4b218854da7a753913390d449b4b0	[TR/Crypt.ZPACK.124067] [Win32/Crowti.MOeMUd] [TrojanRansom.Crowti.A4] [W32/Kryptik.CXBS!tr] [Win32/Cryptor] [Ransom-FWF!6FF4B218854D] [RansomWin32/Crowti.ATrojan*Win32/Fleercivet.D] [Mal/Wonton-AN] [Trojan.Asprox.B]

Whois

Property	Value
Name	Domain Administrator
Organization	Domain Administrator
Email	postmaster@fleep.com
Zip Code	108-0072
City	Minato-ku
State	Tokyo
Country	JP
Phone	+81.0362770055
NameServer	ns2.amaru.me
Created	2012-01-29 07:44:39
Changed	2015-01-13 16:14:40
Expires	2016-01-29 07:44:39
Registrar	GMO Internet, Inc. R

DNS Resolutions

Date	IP Address
2015-03-08	219.94.235.33 (ClassC)
2025-01-16	118.27.95.22 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Thu, 20 Jul 2023 09:04:43 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveLink: https://amaru.me/wp-json/>; relhttps://api.w.o

!DOCTYPE html>html langja>head>meta charsetutf-8>meta namegoogle-site-verification contentD_GjDMxPfxS2L2XB2o1SR_B21KanldgA7qGL505BB_c>!--Google WebMaster-->meta namemsvalidate.01 content844FB73B36CFCF2F030DDBA8C85FC161>!--Bing WebMaster-->meta nameviewport contentwidthdevice-width,initial-scale1.0,minimum-scale1.0>title>Amaru.me/title>link relicon href/wp-content/uploads/common/favicon.webp>!-- Google Adsense -->script async srchttps://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?clientca-pub-3158164816440754 crossoriginanonymous>/script>!-- Google Tag Manager -->script>(function(w,d,s,l,i){wlwl||;wl.push({gtm.start:new Date().getTime(),event:gtm.js});var fd.getElementsByTagName(s)0,jd.createElement(s),dll!dataLayer?&l+l:;j.asynctrue;j.srchttps://www.googletagmanager.com/gtm.js?id+i+dl;f.parentNode.insertBefore(j,f);})(window,document,script,dataLayer,GTM-NVLGNJM);/script>!-- End Google Tag Manager -->link relcanonical hrefhttps://amaru.me/>meta namerobots contentmax-image-preview:large />link reldns-prefetch href//ajax.googleapis.com />link reldns-prefetch href//use.fontawesome.com />link relstylesheet idclassic-theme-styles-css hrefhttps://amaru.me/wp-includes/css/classic-themes.min.css?ver6.2.2 typetext/css mediaall />link relstylesheet idmain-css hrefhttps://amaru.me/wp-content/themes/amaru/style.css?ver6.2.2 typetext/css mediaall />link relstylesheet idfontawesome-css hrefhttps://use.fontawesome.com/releases/v5.11.2/css/all.css?ver6.2.2 typetext/css mediaall />script typetext/javascript src//ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js?ver6.2.2 idjquery-js>/script>link relhttps://api.w.org/ hrefhttps://amaru.me/wp-json/ />link relalternate typeapplication/json hrefhttps://amaru.me/wp-json/wp/v2/pages/6 />link relEditURI typeapplication/rsd+xml titleRSD hrefhttps://amaru.me/xmlrpc.php?rsd />link relwlwmanifest typeapplication/wlwmanifest+xml hrefhttps://amaru.me/wp-includes/wlwmanifest.xml />meta namegenerator contentWordPress 6.2.2 />link relshortlink hrefhttps://amaru.me/ />link relalt

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > amaru.me

Is this malicious?

Files that talk to amaru.me

Whois

DNS Resolutions

Port 80

Port 443