Domain > estr.es

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to estr.es

MD5	A/V
5d08f2dea0b81fde6519813676c06d05	[TrojanSpy.Zbot.r5] [BackDoor-FCNO!5D08F2DEA0B8] [Trojan.Zbot.Win32.178846] [TrojanSpy.Zbot!+6d1WCDpQcs] [ZBot.YGXQ] [TROJ_RUCKGUV.SM] [Trojan-Spy.Win32.Zbot.vjmf] [Trojan.Win32.Zbot.dqyaxc] [UnclassifiedMalware] [BackDoor.Tordev.9] [TROJ_FORUCON.BMC] [TrojanSpy.Zbot.hvuv] [Trojan[Spy]/Win32.Zbot] [Worm:Win32/Dorkbot] [Trojan/Win32.Inject] [Heur.Malware-Cryptor.Hlux] [Trojan.Win32.Zbot.vjmf] [Evilware.Outbreak] [W32/BYWA!tr] [Inject2.BZJU] [Win32/Trojan.Spy.daa]
c2910e0b5be07ba6aa56b43c76300238	[Artemis!C2910E0B5BE0] [Worm.Win32.Ngrbot.appr] [Virus.Win32.Heur.c] [Artemis] [BScope.Malware-Cryptor.Hlux] [Win32/Dorkbot.B] [Inject2.CEMU]
e6f8c1e8fc05f47b1c31c825742ace06	[Trojan.Win32.Qhost!O] [Artemis!E6F8C1E8FC05] [Trojan.Qhost!NcXuhr0h37s] [Hacktool] [Trojan.Win32.Qhost.abkg] [Trojan.Win32.Qhost.phxmu] [Win32.Trojan.Qhost.Anfs] [UnclassifiedMalware] [Trojan.Qhost.Win32.10126] [Artemis!Trojan] [Trojan/Qhost.hlz] [TR/Spy.143360.357] [Trojan/Win32.Qhost] [Trojan.Heur.VP2.E06FE2] [Trojan.Win32.Qhost.abkg] [Win32/Qhost.NTE] [Trojan.Win32.Qhost] [W32/Qhost.ABKG!tr] [Win32/DH{Xg?}]
899402ed0f483863ead455625a2f81a1	[Worm.Win32.Palevo.B] [Worm.P2P.Palevo.W] [Worm/Palevo.jvq] [Worm.Silly] [Win32.HLLW.Lime.52] [W32/Kryptik.ANN!tr] [Worm.Win32.Rimecud] [P2P-Worm.Win32.Palevo.jvq] [Worm.Palevo] [W32/Rimecud] [Worm*Win32/Rimecud.A] [Worm.P2p.Win32.Palevo.b] [W32/Rimecud-A] [W32.Pilleuz] [WORM_PALEVO.SMU] [BScope.Trojan.Palevo.2]
2c6f6bae07a86ec4a8e06d12d5ef41bf	[Worm.Palevo] [Win.Worm.Palevo-2811] [Trojan.Packed.688] [Win32/Kryptik.BDR] [W32/Kryptik.ANR!tr] [Crypt2.ASCE] [P2P-Worm.Win32.Palevo] [Worm*Win32/Rimecud.A] [Mal/Palevo-A] [WORM_PALEVO.SMEP] [SScope.Malware-Cryptor.Maxplus.0997]
04429b6889d07ab77ee911fae77f7d60	[Worm.Silly] [EmailWorm] [Trojan.Win32.Krap.bnoanw] [WORM_PALEVO.SMG] [Packed.Win32.Krap.af] [Packed.Win32.Krap.AS] [Trojan.Packed.19767] [Worm:Win32/Rimecud.A] [Worm/Win32.Palevo] [SScope.Malware-Cryptor.Maxplus.0997] [Malware.Pilleuz] [W32/Krap.AF!tr] [Trj/Rimecud.d] [W32.Clod116.Trojan.7a58] [Rimecud.DAMV] [Mal/Zbot-I] [Win32.Troj.Krap.(kcloud)] [Trojan.Win32.Krap.akoX] [Trojan.Win32.Rimecud] [Win32/DH{eTF9ExQJX08VG3IDc3U}]
a8ba15b37c7ea5784641eca708cbf6a2	[Worm.Palevo] [Trojan.Packed.688] [Win32/Kryptik.BTQ] [W32/Kryptik.ANQ!tr] [Win32/Heur] [P2P-Worm.Win32.Palevo] [P2P-Worm.Win32.Palevo.jub] [Worm*Win32/Rimecud.A] [Mal/EncPk-ACO] [WORM_PALEVO.SMEP] [BScope.Trojan.MTA.0230]
00baeddb52a82cf3612eb3e35b13e8e8	[Win32/Rimecud.LF] [Worm.Palevo] [Worm.Palevo-3823] [Trojan.Packed.688] [W32/Kryptik.ANR!tr] [W32/Worm.BJVL] [SHeur2.BTPQ] [P2P-Worm.Win32.Palevo] [P2P-Worm.Win32.Palevo.dzdr] [Worm*Win32/Rimecud.A] [Mal/Palevo-A] [WORM_PALEVO.SMEP] [BScope.P2P-Worm.Palevo]
2cef6e4301d8d5f9d63b7101215b9ad7	[Worm.Win32.Palevo.B] [Worm.P2P.Palevo.W] [Worm/Palevo.jvq] [Worm.Silly] [Win32.HLLW.Lime.52] [W32/Kryptik.ANN!tr] [Worm.Win32.Rimecud] [P2P-Worm.Win32.Palevo.jvq] [Worm.Palevo] [W32/Rimecud] [Worm*Win32/Rimecud.A] [Worm.P2p.Win32.Palevo.b] [W32/Rimecud-A] [W32.Pilleuz] [WORM_PALEVO.SMU] [BScope.Trojan.Palevo.2]
8b281ad071d3a2e0c348047ebecfa69d	[W32/Worm.WUDR-2003] [Win32/Rimecud.GQ] [Worm.Palevo-656] [Trojan.Packed.688] [Win32/Kryptik.BDR] [W32/Kryptik.ANR!tr] [W32/Worm.BKZP] [SHeur2.BSFE] [P2P-Worm.Win32.Palevo] [P2P-Worm.Win32.Palevo.mob] [Worm*Win32/Rimecud.A] [Mal/Rimecud-B] [W32.IRCBot] [WORM_PALEVO.SMEP] [BScope.Worm.Win32.AutoRun.mwf]
bd7ef736b7267291de90eb69d33bb028	[Worm.Palevo] [Worm.Palevo-833] [Trojan.Packed.688] [Win32/Kryptik.BDR] [W32/Kryptik.ANR!tr] [W32/Worm.AXQG] [SHeur2.BTNH] [P2P-Worm.Win32.Palevo] [Worm*Win32/Rimecud.A] [Mal/Palevo-A] [WORM_PALEVO.SMEP] [BScope.P2P-Worm.Palevo]
047ed2e9d6e87ba4928084e088f2f074	[Worm.Palevo] [Worm.Palevo-3768] [Trojan.Packed.688] [Win32/Kryptik.BHE] [W32/Kryptik.ANR!tr] [P2P-Worm.Win32.Palevo] [P2P-Worm.Win32.Palevo.jub] [Worm*Win32/Rimecud.A] [Mal/Palevo-A] [WORM_PALEVO.SMEP] [SScope.Malware-Cryptor.Maxplus.0997]

DNS Resolutions

Date	IP Address
2009-03-18	189.225.172.63 (ClassC)
2009-04-16	76.162.52.46 (ClassC)
2010-05-29	72.29.76.195 (ClassC)
2013-06-21	66.7.221.31 (ClassC)
2013-08-30	177.103.240.176 (ClassC)
2015-03-15	187.214.125.209 (ClassC)
2025-01-19	212.36.74.109 (ClassC)

Subdomains

Date	Domain	IP
clubnogal.estr.es	2015-05-06	189.236.206.143
bmexico.estr.es	2015-05-17	127.0.0.1
bmxmexico.estr.es	2015-05-17	127.0.0.1
booster.estr.es	2015-01-16	173.255.212.165

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]