Domain > gefesosexwithjimmy.org

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to gefesosexwithjimmy.org

MD5	A/V
0155250595a0d9c3cfa534c936b3d1fa	[HW32.CDB.Dc4d] [Trojan.Inject] [Trojan.Win32.Inject.mvzx] [Trojan.Inject1.42155] [TR/Crypt.EPACK.4230] [Trojan:Win32/Nymaim.F] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.Crypt3] [W32/Inject.CAYW!tr] [Crypt3.NES] [Trojan.Win32.Inject.AW] [Win32/Trojan.62f]
c251493979e3269a2e262fbf2df43075	[HW32.Paked.7176] [Trojan.Downloader.Dyn] [Trojan.Yakes.Win32.24577] [Trojan.Win32.Yakes.gmem] [PE:Malware.XPACK-HIE/Heur!1.9C48] [BehavesLike.Win32.Dropper.cc] [W32/Trojan.SDKF-7739] [TR/Crypt.Xpack.97405] [Trojan/Win32.Yakes] [VirTool:Win32/Obfuscator.ALA] [Trojan.FakeAV.3821] [Trojan.Win32.Yakes] [W32/Yakes.CMPU!tr] [Luhe.Fiha.A] [Trojan.Win32.Yakes.avt] [Win32/Trojan.32d]
4f3e44f0837d5b5144accc843daa9160	[HW32.CDB.Babd] [Artemis!4F3E44F0837D] [Spyware.Zbot.ED] [Trojan.Win32.Sharik.rsq] [Trojan.Bobik.60] [Trojan:Win32/Nymaim] [Backdoor/Win32.Necurs]
7026ddefcd832405977e02a25fa1d48c
8a5a92e07fd72303c4c012a0615d9f11	[HW32.CDB.4be3] [Artemis!8A5A92E07FD7] [Trojan.Win32.Inject.kxeu] [UnclassifiedMalware] [TR/Crypt.EPACK.6390] [Trojan/Win32.Inject] [TrojanDownloader:Win32/Nymaim.C] [Trojan/Win32.Ransomlock] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Virus.Win32.Cryptor] [W32/ZAccess.CRCD!tr] [Win32/Cryptor] [Trojan.Win32.Kryptik.BYWI] [Win32/Trojan.763]
d675d39049c3129222c17aabc57790f4	[HW32.Paked.8AA4] [PE:Malware.XPACK-HIE/Heur!1.9C48] [TR/Crypt.Xpack.97598] [BScope.P2P-Worm.Palevo]
8373682a92e2fed9600595fdbdb05824
6b7c80b32124d3ef3451ffe79aa454ca
898e09a950986d8666b4fc3436cd82f1	[HW32.CDB.056f] [Spyware.Zbot.ED] [Trojan.Win32.Sharik.rrx] [TROJ_NYMAIM.QIE]
34c7f0e57c5108548a2179cbf4d47e43	[HW32.CDB.74af] [Trojan.Inject.pd] [Trojan-FDUH!34C7F0E57C51] [Suspicious.Cloud.5] [Win32/ZAccess.RXRUKZC] [Trojan.Win32.Inject.jmdh] [Trojan.Inject1.39398] [TR/Nymaim.A.161] [Trojan/Win32.Inject] [Win32.Troj.Inject.jm.(kcloud)] [Trojan/Win32.Ransomlock] [Heur.Trojan.Hlux] [Trojan.Win32.Inject.AVOG] [Win32/TrojanDownloader.Nymaim.AB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.Win32.Inject] [W32/ZAccess.CRCD!tr] [Win32/Cryptor]
26a3e08527c8784c105baca812dc18f6	[HW32.CDB.64f1] [Spyware.Zbot.ED] [WS.Reputation.1] [Trojan.Win32.Sharik.rql] [Trojan:Win32/Nymaim] [Backdoor/Win32.Necurs] [Trojan.Win32.Kryptik.BVFO]
276aa78e28425e33face93e4e398bf3e	[WS.Reputation.1] [Trojan:Win32/Nymaim]
ed72cca0cacad60e175009099523b1a9
d100de5431fa7cd3a6293b07cfb570fd	[HW32.CDB.3af6] [Artemis!D100DE5431FA] [WS.Reputation.1] [Trojan.Win32.Inject.lbyy] [TR/Nymaim.A.178] [Trojan/Win32.Ransomlock] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Win32/Cryptor]
18dcce4090b90327160047f073896829	[Spyware.Zbot.ED] [Win32/Trojan.022]
2f3d6becf1e42614445816302a50d8e2	[Trojan.Nymaim.pd] [Spyware.Zbot.ED] [Trojan.Nymaim.B] [Win32/Tnega.ZdTMBHC] [Trojan.Win32.Sharik.rqx] [Trojan.Sharik!TKXhH/XaDyE] [UnclassifiedMalware] [Trojan.Inject1.36977] [TR/Nymaim.A.146] [Trojan/Win32.Sharik] [Trojan:Win32/Nymaim] [Trojan.Win32.Sharik.AT] [Win32/TrojanDownloader.Nymaim.AB] [Trojan.Win32.Nymaim] [W32/Sharik.RQX!tr] [Trj/dtcontx.K] [Win32/Trojan.Multi.daf]
39e879b347a721cf6fef0b8362ece0fc	[HW32.CDB.3b9f] [Trojan/Win32.Ransomlock] [PE:Malware.XPACK-HIE/Heur!1.9C48]
04942941aae484964f1cc3c906c62a3b	[HW32.Packed.B631] [Win32.Trojan.WisdomEyes.151026.9950.9998] [TrojWare.Win32.Ransom.Locky.EXA] [Trojan.Inject1.43644] [BehavesLike.Win32.Downloader.cc] [Trojan.Kazy.D62A0D] [Ransom:Win32/Nymaim.F] [Trojan-Downloader.Win32.Nymaim] [Win32/Cryptor]

Whois

Property	Value
Name	Contact Privacy Inc. Customer 0139000228
Organization	Contact Privacy Inc. Customer 0139000228
Email	gefesosexwithjimmy.org@contactprivacy.com
Address	96 Mowat Ave
Zip Code	M6K 3M1
City	Toronto
State	ON
Country	CA
Phone	+1.4165385457
NameServer	ns2.sinkhole.ch
Created	2014-12-13 09:04:51
Changed	2015-02-12 03:45:33
Expires	2015-12-13 09:04:51
Registrar	Tucows Inc. (R11-LRO

DNS Resolutions

Date	IP Address
2014-02-06	66.171.238.53 (ClassC)
2014-02-08	181.41.194.253 (ClassC)
2014-02-12	5.152.178.175 (ClassC)
2014-02-12	96.44.143.179 (ClassC)
2014-02-17	31.210.111.47 (ClassC)
2014-02-19	109.24.255.129 (ClassC)
2014-02-25	96.44.143.179 (ClassC)
2014-02-25	181.41.194.253 (ClassC)
2014-02-28	152.46.17.236 (ClassC)
2014-03-02	128.199.235.196 (ClassC)
2014-03-03	176.53.125.6 (ClassC)
2014-03-05	78.97.169.213 (ClassC)
2014-03-07	176.53.125.6 (ClassC)
2014-04-29	209.99.40.221 (ClassC)
2014-05-19	209.99.40.221 (ClassC)
2014-12-13	192.42.116.41 (ClassC)
2014-12-17	192.42.119.41 (ClassC)
2015-02-02	217.160.165.202 (ClassC)
2015-12-20	69.172.201.217 (ClassC)
2025-01-01	216.218.185.162 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]