Domain > educarpetas.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://otx.alienvault.com/pulse/56b2251167db8c168...

https://techhelplist.com/spam-list/1039-money-tran...

Files that talk to educarpetas.com

MD5	A/V
a01d37a1ba32af8947db3359408faf21	[Ransom.FileLocker] [Trojan.Cryptlock.N!g2] [BehavesLike.Win32.PWSZbot.dh]
95713fe27cf3d4ab43af566e836a6534	[Trojan.Cryptlock.N!g2] [BehavesLike.Win32.Expiro.fh]
41661762466bbc7fd3a4886542f70f35
d35f8ac998d1ab023127ce95c88b4e6d	[BackDoor-FDCH!D35F8AC998D1]
24677dec505cb7e2e2f91f476b8bc17e	[Trojan.MalPack.PK] [BehavesLike.Win32.Virut.gh]
a32dfbffac8ac42de7364239953282ce	[TR/Crypt.Xpack.445558] [Win32/Kryptik.ENJR] [Trojan.Cryptolocker.N] [W32/Kryptik.ENFX!tr] [Ransom*Win32/Tescrypt.E] [Trojan.MalPack.PK] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.hxk] [TROJ_FORUCON.BMC] [Mal/Wonton-BZ] [Trojan.Encoder.3813]
c2c337b603020dc1a7de7acbe12b7f1b	[Trojan.Rovnix.C] [Trojan.Rovnix.C] [Trojan.Encoder.3813] [Trojan.Rovnix.C] [Troj/Ransom-CDI] [Trojan-Ransom.Win32.Bitman.ibq] [Trojan.Win32.Crypt] [Trojan.Rovnix.C] [Trojan.MalPack.PK] [Trojan.Rovnix.C] [Ransom*Win32/Tescrypt.E] [Trojan.Rovnix.C] [Malicious_Behavior.VEX.93] [Trojan.Cryptolocker.N] [Crypt5.AHIX] [Win32/Kryptik.ENJR] [Trojan.Rovnix.C] [TR/Crypt.Xpack.445555]
7c22f9ab93a3bad2617d08a8c37153c5	[TR/Crypt.Xpack.445526] [Win32/Kryptik.ENJR] [Trojan.Cryptlock.N!g2] [Malicious_Behavior.VEX.93] [Ransom*Win32/Tescrypt.E] [Trojan.MalPack.PK] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.hxd] [Mal/Wonton-BZ] [Trojan.Encoder.3813]
b0a76db64356bec5aacabd164685fb73	[TR/Crypt.Xpack.445558] [Win32/Kryptik.ENJR] [W32/Kryptik.ENFX!tr] [Ransom*Win32/Tescrypt.E] [Trojan.MalPack.PK] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.icd] [TROJ_FORUCON.BMC] [Mal/Wonton-BZ] [Trojan.Encoder.3813]
157bcc54ed4ed8f4c4ad49e0669e0bbf	[TR/Crypt.Xpack.444891] [Win32/Kryptik.ENCT] [Trojan.Cryptolocker.N] [W32/Kryptik.ENCT!tr] [Ransom*Win32/Tescrypt.E] [Ransom.FileLocker] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.hsc] [Trojan.Encoder.3801]
c854bf04da0b6bf601830f45c7a5a25b	[TR/Crypt.Xpack.445277] [Win32/Kryptik.ENCT] [Trojan.Cryptlock.N!g2] [W32/Kryptik.ENCT!tr] [Ransom*Win32/Tescrypt.E] [Ransom.FileLocker] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.ipw] [Trojan.Encoder.3801]
9b27e195712444a270f0a24ec66aef8e	[BackDoor.IRC.NgrBot.566] [Ransom.Crowti.WR7] [Mal/Wonton-BZ] [Ransom_.AE990D2B] [Trojan-Ransom.Win32.Bitman.hwt] [Trojan.Kryptik.Win32.861390] [Trojan.MalPack.PK] [Ransom*Win32/Tescrypt.A] [W32/Kryptik.ENZR!tr] [Crypt5.AHEV] [Win32/Kryptik.ENJD] [TR/Crypt.Xpack.445521] [BackDoor-FDCH!9B27E1957124]
9460807e4c5f2492dc169c51dbd796a1	[FakeAlert-FMN!9460807E4C5F] [TR/Crypt.Xpack.444875] [Win32/Kryptik.ENCT] [Trojan.Cryptlock.N!g2] [Ransom*Win32/Tescrypt.E] [Ransom.FileLocker] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Blocker.ibem] [Troj/Wonton-VB] [Worm.Dorkbot.WR4] [Trojan.Encoder.3801]
842323adb95fc6097197310605a58e6d	[Trojan.Encoder.3813] [Worm.Dorkbot.WR4] [Mal/Wonton-BZ] [TROJ_FORUCON.BMC] [Trojan-Ransom.Win32.Bitman.ibe] [Trojan.Kryptik.Win32.862298] [Trojan.Win32.Crypt] [Trojan.MalPack.PK] [Ransom*Win32/Tescrypt.E] [W32/Kryptik.ENFX!tr] [Trojan.Cryptlock.N!g2] [Win32/Kryptik.ENJR] [TR/Crypt.Xpack.445558] [Ransomware-FDZ!842323ADB95F]
72de4d81d2cd66edbea1a5b20df7b8fd	[Trojan.Encoder.3813] [Worm.Dorkbot.WR4] [Troj/Ransom-CDI] [Trojan-Ransom.Win32.Bitman.ibo] [Trojan.Bitman.Win32.930] [Trojan.Win32.Crypt] [Trojan.MalPack.PK] [Ransom*Win32/Tescrypt.E] [W32/Kryptik.ENFX!tr] [Trojan.Cryptolocker.N] [Crypt5.AHIX] [Win32/Kryptik.ENJR] [TR/Crypt.Xpack.445555] [Ransomware-FDZ!72DE4D81D2CD]
a6a8df2361d797248a624fc311b7d24e	[BackDoor-FDCH!A6A8DF2361D7] [TR/Crypt.Xpack.445521] [Win32/Kryptik.ENJD] [Crypt5.AHEV] [W32/Kryptik.ENEM!tr] [Ransom*Win32/Tescrypt.A] [Trojan.MalPack.PK] [Trojan.Kryptik.Win32.861390] [Trojan-Ransom.Win32.Bitman.hxz] [TROJ_FORUCON.BMC] [Mal/Wonton-BZ] [Ransom.Crowti.WR7] [BackDoor.IRC.NgrBot.566]
eb8cfd8e179c58d6c223da55666ec34b	[Ransomware-FDT!EB8CFD8E179C] [TR/Crypt.Xpack.445426] [Win32/Kryptik.ENJR] [Crypt5.AHJT] [Trojan.Cryptlock.N!g2] [W32/Kryptik.ENFX!tr] [Ransom*Win32/Tescrypt.E] [Trojan.MalPack.PK] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.hxc] [TROJ_FORUCON.BMC] [Mal/Wonton-BZ] [Worm.Dorkbot.WR4] [Trojan.Encoder.3813]
6407e9f432604725384070c851338cab	[Trojan.Encoder.3813] [Mal/Wonton-BZ] [TROJ_FORUCON.BMC] [Trojan-Ransom.Win32.Bitman.hwx] [Trojan.Win32.Crypt] [Trojan.MalPack.PK] [Ransom*Win32/Tescrypt.E] [Malicious_Behavior.VEX.93] [Trojan.Cryptlock.N!g2] [Win32/Kryptik.ENJR] [TR/Crypt.Xpack.445364]
236774ecdd072f59a4e201e04e0cc7f0
a15bf54c04d18436d60a79e4c327e074

Whois

Property	Value
Email	AZUCABALLERO@GMAIL.COM
NameServer	NS2.HOSTMONSTER.COM
Created	2010-06-12 00:00:00
Changed	2015-06-13 00:00:00
Expires	2016-06-12 00:00:00
Registrar	FASTDOMAIN, INC.

DNS Resolutions

Date	IP Address
2013-07-11	74.220.207.196 (ClassC)
2024-02-22	104.247.82.54 (ClassC)
2024-08-10	202.172.25.53 (ClassC)
2024-09-13	64.190.63.222 (ClassC)
2025-03-24	34.216.117.25 (ClassC)
2025-03-30	54.149.79.189 (ClassC)
2025-04-09	172.67.164.236 (ClassC)
2025-05-15	104.21.57.167 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]