Domain > firecheerleaders.fr

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to firecheerleaders.fr

MD5	A/V
715941eb01e90ea504dde914893b5eec	[Troj.W32.Jorik.Slenfbot] [Trojan.Cryptlock.N!g2] [BackDoor-FDCH!715941EB01E9]
bf1f5c4754376f3fd31a253eda1b28ad	[BackDoor-FDCH!BF1F5C475437] [Trojan.Cryptlock.N!g2]
1335ed42c42561521dfed1988a11bd56
db4133a33ffa8da00b9f72d3973006e5	[BackDoor-FDCH!DB4133A33FFA] [Ransom.FileLocker] [Trojan.Cryptlock.N!g2] [Trojan.Inject1.56622] [Trojan.Mikey.D7AEA]
a16bd9447fd1f1cd919f8c3d6b5ff057
5b929b5e993676a4b203fb3cad6ad75e
4878f3683d6bc605bb21d0ebd1164fbc	[Packed-GM!4878F3683D6B] [Uds.Dangerousobject.Multi!c] [Suspicious.Cloud.5] [BehavesLike.Win32.PWSZbot.gc] [TR/Crypt.ZPACK.212015] [Win32/Filecoder.TeslaCrypt.I]
c6e427cc4231040e9f9be4da5a0d6efa	[Ransom.TeslaCrypt] [Troj.Ransom.W32.Bitman!c] [Trojan-Ransom.Win32.Bitman.iij] [Ransom:Win32/Tescrypt.E] [Win32/Filecoder.TeslaCrypt.I] [Win32.Trojan.Bp-dropperv.Bzmy]
6b55a4d9c9d4807fb62ddd853b55f51e
1ff43e01c2372e9df6b772af16e5c5b5
62c7c255422f15d7cc0ca70389e032ea	[Ransom.FileLocker] [Trojan.AVKill.59851] [BehavesLike.Win32.PWSZbot.hc] [TR/AD.TeslaCrypt.Y.202] [W32/Injector.CRRF!tr] [Ransom:Win32/Tescrypt.H] [Trojan/Win32.Teslacrypt] [Trj/RansomCrypt.F] [Win32/Filecoder.TeslaCrypt.I]
b32156f95daafda921f3a1487070136c	[Ransom.TeslaCrypt] [Win32.Trojan.Bp-dropperv.Bzmy] [Trojan.Encoder.3829] [BehavesLike.Win32.PWSZbot.hc] [TR/Crypt.Xpack.446485] [W32/Filecoder.I!tr] [Ransom:Win32/Tescrypt.H] [Win32/Filecoder.TeslaCrypt.I]
49c113cfba4c8666c22cbd7fff8a09bd	[BehavesLike.Win32.AdwareCross.gh]
35a6de1e8dbea19bc44cf49ae0cae59e	[Ransom.Crowti.WR7] [Trojan.MalPack.PK] [Suspicious.Cloud.2] [Ransom_CRYPTESLA.YUYAHP] [Trojan-Ransom.Win32.Bitman.ikw] [Trojan.Win32.S.TeslaCrypt.441344[h]] [Win32.Trojan.Crypt.Lknu] [Trojan.Encoder.3817] [Win32.Malware!Drop] [Ransom_CRYPTESLA.YUYAHP] [BehavesLike.Win32.AdwareCross.gh] [Mal/Wonton-BZ] [TR/Crypt.Xpack.446090] [Trojan[PSW]/Win32.Tepfer] [Ransom:Win32/Tescrypt.A] [Trojan.Win32.Crypt] [W32/Kryptik.ENJD!tr] [Crypt5.AHOM]
727e78bc019354512c70b11005ca634e	[Artemis!727E78BC0193] [Ransom.FileLocker] [Ransom_CRYPTESLA.YUYAHN] [Trojan-Banker.Win32.Shifu.avf] [Trojan.Win32.Encoder.eafnjq] [Troj.Crypt.Xpack!c] [Trojan.Encoder.3840] [Ransom_CRYPTESLA.YUYAHN] [BehavesLike.Win32.PWSZbot.hc] [TR/Crypt.Xpack.446402] [Ransom:Win32/Tescrypt.H] [Trojan/Win32.Teslacrypt] [Win32.Trojan.Bp-dropperv.Bzmy] [Trojan.Win32.Injector] [W32/Injector.CSAE!tr] [Inject3.AANU]
667ca9588e6457100b39fd866e89bf6f	[Trojan.Encoder.3817] [Mal/Wonton-BZ] [TROJ_FORUCON.BMC] [Trojan-Ransom.Win32.Bitman.igr] [Trojan.Win32.Crypt] [Trojan.MalPack.PK] [Ransom*Win32/Tescrypt.E] [Malicious_Behavior.VEX.93] [Crypt5.AHLO] [Win32/Kryptik.ENJR] [TR/Crypt.Xpack.445944]
3373d790cdb4430b9a4f4a5519d90053	[Trojan.Encoder.3817] [Trojan-Ransom.Win32.Bitman.ihd] [Trojan.Win32.Crypt] [Trojan.MalPack.PK] [Ransom*Win32/Tescrypt.E] [Malicious_Behavior.VEX.93] [Crypt5.AHLR] [Win32/Kryptik.ENJR] [TR/Crypt.Xpack.445947]
1406d46597408f6a14243d2579cfff5c	[BackDoor-FDCH!1406D4659740] [TR/Crypt.Xpack.445771] [Win32/Kryptik.ENJD] [Crypt5.AHKJ] [Trojan.Cryptlock.N!g2] [W32/Kryptik.ENJD!tr] [Trojan*Win32/Dynamer!ac] [Trojan.MalPack.PK] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.iil] [Mal/Wonton-BZ] [Trojan.Inject1.56622]
a1dd0dd44c6ae60579259fc68d0f6a65	[Trojan.Inject1.56622] [Mal/Wonton-BZ] [Trojan-Ransom.Win32.Bitman.idu] [Trojan.Win32.Crypt] [Trojan.MalPack.PK] [Trojan*Win32/Dynamer!ac] [W32/Kryptik.ENJD!tr] [Trojan.Cryptlock.N!g2] [Win32/Kryptik.ENJD] [TR/Crypt.Xpack.445782] [BackDoor-FDCH!A1DD0DD44C6A]
66c0d28981bdfc8f21e3bd1112bd709d	[TR/Crypt.Xpack.446090] [Win32/Kryptik.ENJD] [Crypt5.AHOM] [Trojan.Cryptolocker.N] [W32/Kryptik.ENJD!tr] [Ransom*Win32/Tescrypt.A] [Trojan.MalPack.PK] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Bitman.ile] [TROJ_FORUCON.BMC] [Mal/Wonton-BZ] [Trojan.Encoder.3817]

Whois

Property	Value
Email	firecheerleaders@gmail.com
NameServer	ns200.anycast.me
Created	2012-10-25 00:00:00
Changed	2015-10-28 00:00:00
Registrar	OVH

DNS Resolutions

Date	IP Address
2014-11-06	213.186.33.3 (ClassC)
2016-02-09	213.186.33.171 (ClassC)
2020-05-10	23.236.62.147 (ClassC)
2025-10-04	185.230.63.107 (ClassC)
2025-12-05	185.230.63.186 (ClassC)
2026-01-04	185.230.63.171 (ClassC)

Subdomains

Date	Domain	IP
www.firecheerleaders.fr	2019-09-07	185.230.61.161

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]