Domain > gemworks.com

More information on this domain is in AlienVault OTX

Files that talk to gemworks.com

MD5	A/V
c05f0c46dbc6bfe046ad7ca12cf9f98e	[W32.Cloda2c.Trojan.5c7a] [PWSZbot-FLN!C05F0C46DBC6] [Spyware.Zbot] [TrojanSpy.Zbot!d3kAaGLa0Gg] [Suspicious.Cloud] [TSPY_ZBOT.WGJ] [Trojan-Spy.Win32.Zbot.qqte] [Trojan.Win32.Zbot.cmzhij] [Trojan.PWS.Panda.4379] [TR/Spy.ZBot.anb.1] [Win32.Troj.Zbot.qq.(kcloud)] [PWS:Win32/Zbot] [Win32/Spy.Zbot.AAU] [Trojan-PWS.Win32.Zbot] [W32/Zbot.QQTE!tr] [Trojan.Win32.Zbot.Ax]
4ef765e9cbbcc279b3ad373c5c46f1b7	[Artemis!4EF765E9CBBC] [Backdoor/Win32.Androm] [Trojan.PWS.Panda.4379]
3ac0df25ff3cd15c4a55069d1a140c0d	[Artemis!3AC0DF25FF3C] [WS.Reputation.1] [Backdoor.Win32.Pushdo.rgg] [W32/Etap.B] [Backdoor.Win32.Pushdo.Anx]
d3c457d16cb688d2425937a01fd884bc	[W32.CarigatA.Trojan] [Trojan] [WS.Reputation.1] [Upatre.X] [Mal/EncPk-ZC] [BackDoor.Bulknet.1150] [TR/Crypt.EPACK.67831] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trj/dtcontx.I] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Wigon.PH]
ea6b412d37c6c3abc5b5b59b421cddcb	[Downloader-FVO!EA6B412D37C6] [Trojan.Downloader] [TR/Yarwi.B.19] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC]
58d7917e004d65a1294bc93814a7cee0
dc5bf6ef8c028322aea1190c55e297a7	[Artemis!DC5BF6EF8C02] [WS.Reputation.1] [TrojanDownloader:Win32/Cutwail] [W32/Etap.B]
23ad6fc6ddb25a0974b90d9ec2df7757	[W32.Clod252.Trojan.98ee] [TrojanDownloader.Cutwail] [PWSZbot-FLN!23AD6FC6DDB2] [Trojan.Zbot] [Trojan.Win32.Pushdo.cqvcjs] [WS.Reputation.1] [Kryptik.CDBA] [TROJ_MOSERAN.BMC] [Backdoor.Win32.Pushdo.rhv] [Backdoor.Pushdo!L+OZLlbJVJk] [UnclassifiedMalware] [BackDoor.Bulknet.1299] [TR/Cutwail.A.26] [Backdoor/Pushdo.aku] [Win32.Hack.Pushdo.r.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [Backdoor.Pushdo] [PE:Trojan.Crypto!1.9E0F] [Trojan-PWS.Win32.Zbot] [W32/Pushdo.BQRL!tr.bdr] [Crypt2.CBRR] [Trojan.Win32.Downloader.77]
fc9022196b76c128b67b26241d1381c5	[Artemis!FC9022196B76] [WS.Reputation.1] [Troj/Wonton-B] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PI] [W32/Pushdo.PI!tr.bdr]
74858de9e74d3713d2edec5444d50759	[Spyware/Win32.Zbot] [Trojan-Downloader.Win32.Cutwail] [Artemis!74858DE9E74D] [WS.Reputation.1] [Backdoor.Win32.Pushdo.rhl] [BackDoor.Bulknet.1299]
3b699a22a8a3706c9521e63f9f598b00	[Artemis!3B699A22A8A3] [Spyware.Password] [W32/Trojan3.GNX] [Trojan.Zbot] [Trojan.Win32.Bublik.blek] [Troj/Bredo-AKQ] [Trojan:W32/Zbot.BBJA] [Trojan.DownLoad3.30673] [Trojan/Win32.Zbot] [W32/Trojan.DSBO-4512] [Win32/TrojanDownloader.Waski.A] [Trojan.Injector] [Luhe.Fiha.A]
4de37ea8640ef6bba517885d4254084d	[Artemis!4DE37EA8640E] [Backdoor.Bot] [Trojan] [Suspicious.Cloud.5] [Upatre.X] [Win32/Cutwail.EEBdPH] [TSPY_ZBOT.SMXJ] [Mal/Ransom-BY] [Trojan.Packed.24872] [TR/Dldr.Cutwail.BS.342] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Zbot] [Trojan-Downloader.Win32.Cutwail] [W32/Ransom.BY!tr] [Crypt2.BSTH]
1f4a9c320bcb4bd65d07317f3adf6b9a	[PWSZbot-FIT!1F4A9C320BCB] [Backdoor.Win32.Pushdo.reb] [Artemis!1F4A9C320BCB]
d0c071b34f13e16f337578bf580b1b11	[Backdoor.Pushdo.rfd] [Spyware.Zbot] [Backdoor.Trojan] [TROJ_SPNR.0BKH13] [Backdoor.Win32.Pushdo.rfd] [TR/Crypt.Xpack.36000] [Win32.Hack.Pushdo.r.(kcloud)] [Spyware/Win32.Zbot] [Win32/Wigon.PH] [Backdoor.Win32.Pushdo] [W32/BackDoor.UV!tr]
bed326a14addeb51c34348745af7929a	[Artemis!BED326A14ADD] [Trojan.Zbot] [Trojan.PWS.Panda.4379] [Win32/Spy.Zbot.AAU] [Trojan-Spy.Win32.Zbot]
501c50111f177772007efa977b9869d4
4d8d5d96caa717c92fea5ac2b1d6ae23	[W32.Clod42c.Trojan.2b7a] [Artemis!4D8D5D96CAA7] [BackDoor.Bulknet.1150] [TR/Wigon.PI] [Win32/Wigon.PI] [Backdoor.Win32.Pushdo] [W32/Pushdo.PI!tr.bdr] [Backdoor.Win32.Pushdo.aa]
53d4d47a41371119af5c54a5d3bbb9c9	[RDN/PWS-Zbot.apr!e] [Trojan-Spy.Win32.Zbot.qrbd] [Troj/Zbot-GWU] [TR/Crypt.ZPACK.22722] [Heuristic.BehavesLike.Win32.Suspicious.H] [Win32.Troj.Zbot.qr.(kcloud)] [Trojan/Win32.Zbot] [Win32/Spy.Zbot.AAU] [Trojan.Win32.Weelsof] [W32/Zbot.QRBD!tr]
3d75e483f9fad44d9cae483628652a8e	[Trojan-PSW.Win32.Fareit.amim] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC]

Whois

Property	Value
NameServer	D.NS.BUDDYNS.COM
Created	1997-06-27 00:00:00
Changed	2014-03-30 00:00:00
Expires	2019-06-26 00:00:00
Registrar	TUCOWS DOMAINS INC.

DNS Resolutions

Date	IP Address
2013-10-30	199.102.230.248 (ClassC)
2015-05-18	-
2024-11-04	64.64.7.69 (ClassC)

HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout5, max100set-cookie: PHPSESSIDcb5087216db0cac0e85f46c896626725; path/; secure; HttpOnlyexpires: Thu, 19 Nov 1981 08:52:00 GMTcache-control: no-s

!DOCTYPE html>html langen-US>head>meta charsetUTF-8>meta nameviewport contentwidthdevice-width, initial-scale1, minimum-scale1>link relprofile hrefhttps://gmpg.org/xfn/11>title>4-Leaf Clover, Laser Engraving, Zippo Lighters – VillageSmith Gifts Workshop Singapore/title>meta namerobots contentmax-image-preview:large, max-snippet:-1, max-video-preview:-1 />link reldns-prefetch href//widget.tagembed.com />link reldns-prefetch href//use.fontawesome.com />link relalternate typeapplication/rss+xml title4-Leaf Clover, Laser Engraving, Zippo Lighters » Feed hrefhttps://gemworks.com/feed/ />link relalternate typeapplication/rss+xml title4-Leaf Clover, Laser Engraving, Zippo Lighters » Comments Feed hrefhttps://gemworks.com/comments/feed/ />link relstylesheet hrefhttps://gemworks.com/wp-content/cache/wpspeed/css/b1ad1bea7f2aee77f9df10005038e29c.css />link relhttps://api.w.org/ hrefhttps://gemworks.com/wp-json/ />link relalternate typeapplication/json hrefhttps://gemworks.com/wp-json/wp/v2/pages/1550 />link relEditURI typeapplication/rsd+xml titleRSD hrefhttps://gemworks.com/xmlrpc.php?rsd />link relalternate typeapplication/json+oembed hrefhttps://gemworks.com/wp-json/oembed/1.0/embed?urlhttps%3A%2F%2Fgemworks.com%2F />link relalternate typetext/xml+oembed hrefhttps://gemworks.com/wp-json/oembed/1.0/embed?urlhttps%3A%2F%2Fgemworks.com%2F&formatxml />meta charsetutf-8>meta nameabstract contentLaser Engraving . Clover . Zippo in Singapore>meta nameauthor contentCJ>meta nameclassification contentLucky Clover, Pens, Laser Engraving, Zippo Lighters in Singapore>meta namecopyright contentCopyright VillageSmith Gifts Singapore - All rights Reserved.>meta namedesigner contentNA>meta namedistribution contentGlobal>meta namelanguage contenten-US>meta namepublisher contentVillageSmith Gifts Singapore>meta namerating contentGeneral>meta nameresource-type contentDocument>meta namerevisit-after content3>meta namesubject contentLucky Clover, Pens, Laser Engraving, Zippo Lighters in Singapore>meta nametemplate conte

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > gemworks.com

Is this malicious?

Files that talk to gemworks.com

Whois

DNS Resolutions

Port 80

Port 443