Domain > eretz.org

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to eretz.org

MD5	A/V
4487582307389d131de4c04ffc0b402a	[W32/Trojan.TBEX-5751] [TR/Drop.Cutwail.30] [Win32/Cutwail.XMeeGEB] [Win32/Kryptik.CIPN] [W32/Kryptik.CIMI!tr] [Crypt3.AJNE] [Trojan.Win32.Cutwail] [Trojan-Dropper.Win32.Dorifel.alzp] [TrojanDropper*Win32/Cutwail] [Troj/Cutwail-BH] [Trojan.Pandex] [TROJ_CUTWAIL.YBM] [Trojan.Cutwail]
14c4a854f5fb5925e4ffd4195993a430	[W32/S-1ff7985f!Eldorado] [TR/Cutwail.dps] [Win32/Kryptik.CJAO] [W32/Kryptik.CJCN!tr] [Crypt3.AKLG] [Trojan.Win32.Cutwail] [Trojan.Ransom.ED] [Trojan-FEOI!14C4A854F5FB] [Mal_Dalexis] [SScope.Malware-Cryptor.Hlux]
004e1fcfb084f500738f1302e36d3047	[TR/Crypt.ZPACK.89227] [TrojanPWS.Kegotip.WR4] [Trojan.DownLoad.64914] [Win32/Wigon.PH] [W32/Kryptik.GKA!tr] [SHeur4.BZBC] [Trojan.Win32.Wigon] [Trojan.Malware.Packer] [Downloader-FAKM!004E1FCFB084] [TrojanDownloader*Win32/Cutwail] [Mal/Zbot-QL]
47916fbb3e05c262e54f467ffb520ec4	[Win32/Kryptik.CIFH] [Trojan.Win32.Cutwail.dib]
2e699f7c85aea451561afba587986138	[TR/Drop.Cutwail.K.10] [Win32/Wigon.PH] [W32/Yakes.FMMP!tr] [Trojan.Win32.Yakes.fmmp]
08cdbddc75bd05123efc3faccd8cd6eb	[TR/Crypt.ZPACK.91708] [Trojan.DownLoad.64914] [Win32/Wigon.PI] [W32/Kryptik.CHOC!tr] [Trojan.Win32.Cutwail.dhp] [Trojan.Ransom.ED] [Ransom-FLS!08CDBDDC75BD] [TrojanDownloader*Win32/Cutwail]
6bc8bf766abaddc3ac6831c88300ff82	[W32/Trojan.IFVX-2447] [TrojanPWS.Kegotip.WR4] [Trojan.DownLoad.64914] [Win32/Wigon.PH] [W32/Kryptik.GKA!tr] [SHeur4.BZBC] [Trojan.Win32.Wigon] [Trojan.Malware.Packer] [Downloader-FAKM!6BC8BF766ABA] [TrojanDownloader*Win32/Cutwail] [Mal/Wonton-AK]
b9795c916e8a31cfaaa85bf9cffef052	[TR/Drop.Cutwail.K.1] [Win32/Wigon.PH] [W32/Yakes.FMMP!tr] [Trojan.Win32.Yakes.fmmp]
3755b306619194d6bc27b271798555b9	[TR/Drop.Cutwail.4] [Win32/Wigon.PH] [Trojan.Win32.Cutwail.djl] [TrojanDropper*Win32/Cutwail] [swizzor/Heur.I]
64f36893cc504523e7edf5f88ee4a365	[Win32/Kryptik.CIFH] [Trojan.Win32.Cutwail.dib]
a7af1d2eaacc70aa87e45d1551355fcf	[Win32/Kryptik.CEET]
7ff99e363f84948a30b7dd76ee273b57	[TR/Kazy.425834.1] [Win32/Wigon.PH] [Trojan.Win32.Yakes.fmat] [Mal/Cutwail-C]
7e304d36faa997f755298c4fa414ac8d	[Win32/Cutwail.MFfJLDB] [Trojan.DownLoad.64914] [Win32/Kryptik.CJHA] [Crypt3.AKXB] [TROJ_CUTWAIL.SM7] [Trojan.Cutwail]
4228a8e31ad3dfd9890a85771069f94b	[TR/Crypt.ZPACK.89227] [Trojan.DownLoad.64914] [Win32/Wigon.PH] [SHeur4.BZBC] [Trojan.Win32.Wigon] [Trojan.Malware.Packer] [TrojanDownloader*Win32/Cutwail] [winpe/Kryptik.CECM] [Mal/Zbot-QL] [Backdoor.Trojan]
f1f7bad77b0adc97bc4cf002a3c6b9be	[Trojan.PWS.ZEL] [Trojan.DownLoad.64914] [Win32/Wigon.PI] [Trojan-PSW.Win32.Fareit] [Trojan-PSW.Win32.Fareit.aqum] [Mal/Cutwail-C]
6847b4ef7b9a9b6040bc5aaec604fc60	[W32.KryptikSymmiN.Trojan] [Downloader-FAKM!6847B4EF7B9A] [Trojan.Malware.Packer] [Kryptik.CECM] [UnclassifiedMalware] [Trojan.DownLoad.64914] [BehavesLike.Win32.Downloader.lh] [Mal/Zbot-QL] [W32/Trojan.NBAB-0037] [TR/Crypt.ZPACK.89227] [TrojanDownloader:Win32/Cutwail] [Trojan/Win32.CryptoWall] [Win32/Wigon.PH] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.Win32.Wigon] [W32/Kryptik.GKA!tr] [SHeur4.BZBC] [Trojan.Win32.Wigon.bPH]
8a0ab8b988ca0a9f78c304e02faee1d4	[W32/Trojan.DFPV-0212] [TR/Obfuscate.183808] [Win32/Kryptik.CIVW] [W32/Dorifel.ALXX!tr] [Crypt3.AJWR] [Trojan.Win32.Cutwail] [Trojan.Krypt] [Downloader-FAKV!8A0AB8B988CA] [VirTool*Win32/Obfuscator.AKU] [Trojan.Cutwail]
67b06935b3c919d8dfbe2166fc6f8305	[Trojan.VbInject.LD3] [Spyware.Zbot.ED] [Trojan/Wigon.ph] [Trojan.Inject!ipJXAOCNFEU] [W32/Trojan3.KFF] [W32.Imaut.CN] [DLoader.ATMGC] [Win32/Inject.SaeAbcC] [TROJ_INJECT.YYPM] [Trojan.Win32.Inject.oqld] [Trojan.Win32.Inject.dekgve] [UnclassifiedMalware] [BackDoor.Tishop.122] [Trojan.Inject.Win32.85623] [BehavesLike.Win32.Swisyn.ch] [Mal/VB-ANH] [W32/Trojan.AFQK-0234] [TR/Dropper.VB.17613] [Win32.Troj.Undef.(kcloud)] [Trojan/Win32.MDA] [Virus.Win32.Heur.p] [Trojan.Inject] [Win32/Wigon.PH] [Win32.Trojan.Inject.Wqmy] [Trojan.Win32.Injector] [W32/Injector.BKHA!tr] [Trojan.Win32.Inject.ANfu]
0ad2c3edf5226bce6ad9e0cbeda2df32	[TR/Drop.Cutwail.K.9] [Win32/Wigon.PH] [W32/Yakes.FMMP!tr] [Trojan.Win32.Yakes.fmmp]
3d10d6fff948a86abc058e69c99afca1	[TrojanDownloader.Cutwail.r4] [Trojan.Kryptik!aj6bYhalUt0] [Kryptik.CEAM] [Trojan.Win32.Cutwail.dpb] [Trojan.Win32.Kryptik.dbulla] [UnclassifiedMalware] [Trojan.MulDrop3.14959] [Trojan.Cutwail.Win32.335] [BehavesLike.Win32.Downloader.pc] [Troj/Cutwail-BG] [W32/Trojan.MFBJ-1666] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Dropper] [Downloader-FAKU!3D10D6FFF948] [Win32.Trojan.Cutwail.Lkds] [Trojan.Win32.Cutwail] [W32/CUTWAIL.BG!tr] [Trojan.Win32.Cutwail.AzC] [Win32/Trojan.Multi.daf]

Whois

Property	Value
Name	David Wilder
Email	dwilder@gmail.com
Zip Code	90100
City	Hebron
State	Isreal
Country	IL
Phone	+972.1111111111
NameServer	ns2.teamgenesis.com
Created	2000-06-02 10:43:26
Changed	2014-06-02 13:34:33
Expires	2015-06-02 10:43:26
Registrar	eNom, Inc. (R39-LROR

DNS Resolutions

Date	IP Address
2014-07-04	204.9.139.130 (ClassC)
2015-05-28	50.63.202.19 (ClassC)
2015-10-18	184.168.221.28 (ClassC)
2017-05-11	184.168.221.15 (ClassC)
2017-06-14	50.63.202.20 (ClassC)
2017-06-14	184.168.221.23 (ClassC)
2017-06-25	184.168.221.25 (ClassC)
2017-07-03	50.63.202.12 (ClassC)
2017-07-05	184.168.221.24 (ClassC)
2017-07-24	50.63.202.13 (ClassC)
2017-08-18	184.168.221.10 (ClassC)
2017-08-20	184.168.221.17 (ClassC)
2017-09-10	50.63.202.16 (ClassC)
2017-10-03	184.168.221.9 (ClassC)
2017-12-31	184.168.221.14 (ClassC)
2018-01-22	50.63.202.1 (ClassC)
2018-04-15	184.168.221.26 (ClassC)
2018-04-25	50.63.202.15 (ClassC)
2018-05-01	184.168.221.7 (ClassC)
2018-05-12	50.63.202.24 (ClassC)
2018-05-24	184.168.221.18 (ClassC)
2018-06-19	50.63.202.30 (ClassC)
2018-07-10	50.63.202.2 (ClassC)
2018-07-12	50.63.202.8 (ClassC)
2018-07-27	184.168.221.12 (ClassC)
2018-08-21	184.168.221.30 (ClassC)
2018-09-29	50.63.202.23 (ClassC)
2018-10-05	50.63.202.5 (ClassC)
2018-10-07	184.168.221.22 (ClassC)
2018-10-10	50.63.202.29 (ClassC)
2020-05-12	184.168.131.241 (ClassC)
2024-05-27	3.33.152.147 (ClassC)
2024-06-02	15.197.142.173 (ClassC)
2025-09-13	166.117.110.61 (ClassC)
2025-10-01	99.83.161.153 (ClassC)
2025-12-17	76.223.54.146 (ClassC)
2026-02-28	13.248.169.48 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]