Domain > forms.net.in

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://ransomwaretracker.abuse.ch/downloads/RW_UR...

Files that talk to forms.net.in

MD5	A/V
315aa7ed50e537a15deff345cfce5a4d
4e07deba053405794c2cadbdade9b544	[HW32.Packed.9BD2] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9991] [BehavesLike.Win32.Virut.dc]
f2c239accaf0539b5262f01278fb6ca7	[HW32.Packed.E78E] [Ransomware-FHS!F2C239ACCAF0] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9999] [BehavesLike.Win32.Virut.dc] [TR/AD.TeslaCrypt.Y.jvkz] [Win32.Trojan.Bp-dropperv.Bzmy] [W32/Kryptik.ESMM!tr] [Crypt_r.BRG]
6d37cde8a397fab3422e66b5d7a6398f	[HW32.Packed.29EE] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9998] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.CBQ163V] [Trojan-Ransom.Win32.Bitman.vgy] [Trojan.AVKill.60897] [Ransom_CRYPTESLA.CBQ163V] [BehavesLike.Win32.Virut.cc] [Mal/Ransom-EO] [TR/Crypt.ZPACK.hyhp] [Malicious_Behavior.VEX.88] [Ransom:Win32/Tescrypt!rfn] [Ransomware-FHO!6D37CDE8A397] [Win32.Trojan.Bp-ransomware.Ejqz] [Trojan.Win32.Crypt] [Crypt5.ATTQ] [Trj/GdSda.A]
d249142119f51bb0160a7c78f68327dd	[HW32.Packed.108E] [Ransomware-FHS!D249142119F5] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9998] [Win32/Filecoder.TeslaCrypt.L] [Ransom_CRYPTESLA.USFC31BCN] [Trojan-Ransom.Win32.Bitman.vvn] [Win32.Trojan.Bp-dropperv.Bzmy] [Ransom_CRYPTESLA.USFC31BCN] [BehavesLike.Win32.PWSZbot.dc] [TR/Crypt.ZPACK.ewee] [W32/Kryptik.ESMM!tr] [Crypt_r.BRG]
e89ef63a9912ca892850daab59a4324c	[HW32.Packed.6122] [Ransom.TeslaCrypt] [Trojan.Zusy.D2D978] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Ransom_CRYPTESLA.CBQ163V] [Trojan-Ransom.Win32.Bitman.vnq] [Win32.Trojan.Raas.Auto] [Ransom_CRYPTESLA.CBQ163V] [BehavesLike.Win32.Virut.cc] [Mal/Ransom-EO] [Ransomware-FHO!E89EF63A9912] [W32/Kryptik.ESMM!tr]
8f6d018ee958f5027493c29d17223779	[HW32.Packed.218C] [Ransomware-FHS!8F6D018EE958] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Ransom_HPCRYPTESLA.SMA] [Trojan.AVKill.61128] [BehavesLike.Win32.Expiro.dc] [TR/AD.TeslaCrypt.Y.geld] [Trojan[Ransom]/Win32.Bitman] [VirTool:Win32/Obfuscator] [Win32.Trojan.Kryptik.Edof] [W32/Kryptik.ESMM!tr] [Crypt_r.BRG] [Trj/GdSda.A]
74c2d9e410642f03375bda2f0263052b	[Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9951] [Ransom_HPCRYPTESLA.SMA] [Trojan.Win32.AD.ebhvff] [Win32.Trojan.Kryptik.Airy] [Trojan.AVKill.61141] [BehavesLike.Win32.Expiro.dc] [TR/AD.TeslaCrypt.Y.wqow] [Ransomware-FHS!74C2D9E41064] [Trj/GdSda.A] [Trojan.Win32.Crypt] [W32/Kryptik.ESMM!tr] [Crypt5.AUJD]
a9cf08984f729ae5689b157052bb4af8
1a9864783e3df1624603cebedf3aed77
a1e575581c4287c5900bb1a9860792bd	[HW32.Packed.67DB] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Ransom_CRYPTESLA.CA] [Trojan-Ransom.Win32.Bitman.vpn] [Trojan.Win32.ZPACK.ebgomh] [Mal/Ransom-EO] [Trojan.AVKill.61027] [Ransom_CRYPTESLA.CA] [BehavesLike.Win32.Expiro.cc] [TR/Crypt.ZPACK.fmrw] [Ransom:Win32/Tescrypt!rfn] [Trojan.Zusy.D2D978] [Uds.Dangerousobject.Multi!c] [Ransomware-FHO!A1E575581C42] [Win32.Trojan.Bitman.Lneb] [Trojan.Win32.Crypt] [W32/Kryptik.ESMM!tr] [Ransom_r.GF]
c5d73726a86c5b24ecab6087eb29c7e9	[Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9951] [Ransom_HPCRYPTESLA.SMA] [Trojan.AVKill.61141] [BehavesLike.Win32.Expiro.dc] [TR/AD.TeslaCrypt.Y.wqow] [Ransomware-FHS!C5D73726A86C] [Trj/GdSda.A] [Trojan.Win32.Crypt] [W32/Kryptik.ESMM!tr] [Crypt5.AUJD]
c361338fe7539982469cad7f3d7c234b	[HW32.Packed.503E] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9998] [Win32/Filecoder.TeslaCrypt.L] [Ransom_CRYPTESLA.JAO] [Trojan-Ransom.Win32.Bitman.vqa] [Trojan.Win32.AD.ebgulw] [Mal/Ransom-EJ] [Trojan.AVKill.60934] [Trojan.Bitman.Win32.1768] [Ransom_CRYPTESLA.JAO] [BehavesLike.Win32.Expiro.dc] [TR/AD.TeslaCrypt.Y.ogol] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt] [Win32.Trojan.Bitman.Swub] [Trojan.Win32.Filecoder] [Malicious_Behavior.VEX.88] [Trj/GdSda.A] [Win32/Trojan.Ransom.094]
1b38877057ec193f1507b271a8b01bba	[HW32.Packed.AABB] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Trojan-Ransom.Win32.Bitman.vsw] [Win32.Trojan.Bp-ransomware.Ejqz] [BehavesLike.Win32.PWSZbot.dc] [TR/AD.TeslaCrypt.Y.gpmp] [W32/Kryptik.ESMM!tr]
82d6975e642aaec3bf30c1d61455772c	[HW32.Packed.740E] [Ransom.TeslaCrypt] [Win32.Trojan.WisdomEyes.151026.9950.9998] [Win32/Filecoder.TeslaCrypt.L] [Ransom_CRYPTESLA.CA] [Trojan-Ransom.Win32.Bitman.vqf] [Mal/Ransom-EJ] [Trojan.AVKill.60934] [Trojan.Bitman.Win32.1768] [Ransom_CRYPTESLA.CA] [BehavesLike.Win32.Expiro.dc] [TR/AD.TeslaCrypt.Y.ogol] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt] [Win32.Trojan.Bitman.Ebgw] [Trojan.Win32.Filecoder] [Malicious_Behavior.VEX.88]

Whois

Property	Value
Name	Kamanashish Roy
Organization	SocialMinds
Email	kamanashish.is.in@gmail.com
Address	87 G Raja Rammohan Roy Road
Zip Code	700008
City	Kolkata
State	West Bengal
Country	IN
Phone	+91.9836370370
NameServer	ns26.domaincontrol.com
Created	2015-08-14 07:51:11
Changed	2015-10-13 19:21:07
Expires	2016-08-14 07:51:11
Registrar	GoDaddy.com, LLC (R1

DNS Resolutions

Date	IP Address
2025-11-02	199.79.63.91 (ClassC)

Port 80

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]