Domain > glmghotels.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to glmghotels.com

MD5	A/V
3dd5efcc8a520c807d40c2ef0e82d155	[TR/Pushdo.C.1] [TrojanDownloader*Win32/Cutwail.BS]
7c5548b8200650440848b5b47e56b2eb	[Artemis!7C5548B82006] [WS.Reputation.1] [Trojan.Win32.Cutwail.cgs] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Tepfer] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CGS!tr] [Trojan.Win32.Cutwail.Azpq]
c05f0c46dbc6bfe046ad7ca12cf9f98e	[W32.Cloda2c.Trojan.5c7a] [PWSZbot-FLN!C05F0C46DBC6] [Spyware.Zbot] [TrojanSpy.Zbot!d3kAaGLa0Gg] [Suspicious.Cloud] [TSPY_ZBOT.WGJ] [Trojan-Spy.Win32.Zbot.qqte] [Trojan.Win32.Zbot.cmzhij] [Trojan.PWS.Panda.4379] [TR/Spy.ZBot.anb.1] [Win32.Troj.Zbot.qq.(kcloud)] [PWS:Win32/Zbot] [Win32/Spy.Zbot.AAU] [Trojan-PWS.Win32.Zbot] [W32/Zbot.QQTE!tr] [Trojan.Win32.Zbot.Ax]
5345aff5ce85c0d99c484f2716071b7a	[Win32.Heur.KVMF58.hy.(kcloud)]
27d68493cb15b516c63e7785a65af8e7	[BC.Heuristic.Trojan.SusPacked.BF-6.A] [Trojan.Win32.Zbot.20992.D] [Trojan.DownLoad3.28161] [Troj/Mdrop-FPG] [Win32.Troj.Bublik.bm.(kcloud)] [TrojanDownloader:Win32/Upatre.A] [Win32/TrojanDownloader.Waski.A] [PE:Malware.FakePDF!1.9C28]
390fc8a6672ba631df610de3fc76ad22	[Heur.Win32.Veebee.1!O] [Trojan.LVBP.ED] [W32/Trojan2.OAPU] [TROJ_FORUCON.BMC] [Trojan-PSW.Win32.Tepfer.swki] [Trojan.PWS.Stealer.3128] [TR/Dropper.VB.7976] [W32/Trojan.VAGS-5670] [Trojan-PWS.Win32.Tepfer] [Trojan.Win32.InfoStealer.AY]
3ac0df25ff3cd15c4a55069d1a140c0d	[Artemis!3AC0DF25FF3C] [WS.Reputation.1] [Backdoor.Win32.Pushdo.rgg] [W32/Etap.B] [Backdoor.Win32.Pushdo.Anx]
0f80eb7fbac7a852ee58650a076d7d42	[TrojanDownloader*Win32/Cutwail.BS]
8043461e3d18f379dfd5c1d3dda25c6f	[TrojanDownloader.Cutwail.BS4] [PWS-FBOF!] [Spyware.Zbot] [Trojan.Cutwail!ksLthdR/J5A] [W32/Trojan2.OBNX] [Backdoor.Trojan] [Kryptik.CDDW] [Win32/Cutwail.CAK] [BKDR_PUSHDO.IP] [Trojan.Win32.Cutwail.chg] [Trojan.Win32.Cutwail.cucyjl] [Trojan.Win32.A.Cutwail.87552] [TrojWare.Win32.Spy.Zbot.FRIN] [Trojan.PWS.Panda.5756] [TR/Injector.90112.43] [Trojan/Cutwail.ab] [Trojan/Win32.Cutwail] [Win32.Troj.Cutwail.c.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [W32/Trojan.WQFW-5190] [Trj/WLT.A] [Win32/Wigon.PI] [Win32.Trojan.Cutwail.Dxcl] [Trojan-Downloader.Win32.Cutwail] [W32/Cutwail.CHG!tr] [SHeur4.BRVM] [Trojan.Win32.Cutwail.aG]
899636b5d06c3ad2fccb62462f16c072	[TR/Kryptik.dfs] [TrojanDownloader*Win32/Cutwail.BS]
f15be0daa762c12cda891a6390d77e86	[WS.Reputation.1] [TROJ_CRILOCK.RNT] [Backdoor.Win32.Pushdo.rks] [TR/Crypt.ZPACK.40047] [Trojan[Backdoor]/Win32.Pushdo] [W32/Pushdo.RKS!tr.bdr] [SHeur4.BTFZ]
1dc798c5cda1dfb8e321e68f1cf116c4	[W32.DalverM.Trojan] [Trojan.Cutwail.r5] [RDN/Downloader.a!qr] [Trojan.Cutwail] [TROJ_CUTWAIL.YAJ] [Trojan.Win32.Cutwail.cuo] [Trojan.Cutwail!Dw5GluQCwY0] [UnclassifiedMalware] [BackDoor.Bulknet.1150] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail.BS] [W32/Trojan.LTBF-7078] [Trj/CI.A] [Win32.Trojan.Cutwail.Eclb] [Trojan] [W32/Cutwail.CBPJ!tr] [Crypt3.OXR] [Trojan.Win32.Kryptik.BCBPJ] [Win32/Trojan.Multi.daf]
aea74f40aff4430d316990208de17d13	[SHeur4.BQMT] [TrojanDownloader*Win32/Cutwail.BS]
556c3819778ac91261be8821206aa1ca	[Trojan.Zbot.cw3] [Trojan.Crypt.NKN] [Trojan.VBKrypt.Win32.226775] [Trojan.Win32.VBKrypt.cvwaev] [W32/Trojan4.AFNE] [WS.Reputation.1] [Win32/Zbot.IDY] [TROJ_FORUCON.BMC] [Trojan.Win32.VBKrypt.uqco] [Trojan.VBKrypt!sgvTFCNPRto] [UnclassifiedMalware] [BackDoor.Andromeda.273] [TR/Dropper.VB.12577] [Trojan/VBKrypt.jafc] [PWS:Win32/Zbot] [Backdoor/Win32.Androm] [W32/Trojan.XEYN-6246] [Virus.Win32.Heur.p] [Trj/WLT.A] [Win32/Wigon.PH] [Virus.Win32.VBInject] [W32/VBKrypt.PH!tr] [SHeur4.BSLG] [Trojan.Win32.VBKrypt.ahI] [Win32/Trojan.Multi.daf]
c6da1ec05de4dc102209acb4df0a6d8e	[TrojanPWS.Zbot] [PWSZbot-FEY] [Trojan.Inject] [Trojan/Spy.Zbot.aau] [Trojan.Win32.Yakes.cfhaiy] [Infostealer.Bancos] [ZBot.NAIF] [TSPY_ZBOT.VNA] [Trojan.Win32.Yakes.depm] [Trojan.Yakes!t2ImEqK95FY] [TrojWare.Win32.Yakes.DEPM] [Trojan.PWS.Panda.4379] [TR/Crypt.ZPACK.7596] [PWSZbot-FDN!C6DA1EC05DE4] [Trojan/Yakes.rde] [Trojan/Win32.Yakes] [PWS:Win32/Zbot] [W32/Trojan.YDOM-8167] [Trojan.Yakes] [Trj/Yakes.B] [Win32/Spy.Zbot.AAU] [Trojan.Win32.Yakes] [W32/Yakes.AAU!tr] [Trojan.Win32.Zbot.axoN]
ded55f58a5734b05b67d68a2b99b7e61	[Artemis!DED55F58A573] [Kryptik.CCHF] [TROJ_KRYPTIK.SGQ] [UnclassifiedMalware] [Win32.Malware!Drop] [TrojanDownloader:Win32/Cutwail.BS] [SScope.Malware-Cryptor.Fareit.2813] [Trojan.Crypt2] [W32/Kryptik.BIXX] [Crypt2.AXYM]
da53b7983185de17e67579e2de0231be	[Trojan-Dropper.Win32.Dorifel.aguj] [W32/Injector.ALPQ!tr]
ea6b412d37c6c3abc5b5b59b421cddcb	[Downloader-FVO!EA6B412D37C6] [Trojan.Downloader] [TR/Yarwi.B.19] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC]
8016f017cd252788a6e7e6802c10e0b2	[Trojan.Pushdo.D] [Trojan.Cryptor.r4] [Trojan.Necurs] [Backdoor.Pushdo!QBuGAcEYs7o] [Backdoor.Trojan] [ZBot.UPRE] [Win32/Cutwail.DVCWUKD] [TROJ_KRYPTIK.YVV] [Backdoor.Win32.Pushdo.rkx] [Trojan.Win32.Pushdo.cwhqoj] [TrojWare.Win32.UMal.~A] [BackDoor.Bulknet.1150] [Backdoor.Pushdo.Win32.713] [TR/Cutwail.A.55] [Mal/Zbot-PT] [TrojanDownloader:Win32/Cutwail] [W32/Trojan.SCHC-6463] [Backdoor/Win32.Necurs] [Backdoor.Pushdo] [Win32/Wigon.PH] [Win32.Backdoor.Pushdo.Dvza] [Trojan-Dropper.Necurs] [W32/Pushdo.BZGH!tr.bdr] [Crypt3.IEL] [BackDoor.Win32.Pushdo.77] [Win32/Backdoor.4da]
81d7d12a07126a4133597d79dd993a5e	[W32.TapuroJ.Trojan] [Trojan-PWS/W32.Fareit.68096] [TrojanPSW.Fareit.alyo] [RDN/Downloader.a!no] [Trojan.PWS.Zbot] [Riskware] [Trojan.FakeAV] [Injector.FKCD] [Trojan-PSW.Win32.Fareit.alyo] [UnclassifiedMalware] [Win32.Malware!Drop] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Win32.PSWTroj.Fareit.al.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [W32/FakeAV.SJHU-5285] [W32/Injector.DET!tr] [Crypt2.BNSM] [Trojan.Win32.Kryptik.BMQP]

Whois

Property	Value
Email	BBECKER@CHORUS.NET
NameServer	ZOE.NS.CLOUDFLARE.COM
Created	2002-08-09 00:00:00
Changed	2013-08-26 00:00:00
Expires	2016-08-09 00:00:00
Registrar	DOMAINPEOPLE, INC.

DNS Resolutions

Date	IP Address
2013-07-11	108.165.22.144 (ClassC)
2013-07-30	190.93.241.62 (ClassC)
2013-08-20	141.101.113.63 (ClassC)
2013-10-05	141.101.117.108 (ClassC)
2013-10-05	141.101.116.108 (ClassC)
2013-10-10	141.101.116.108 (ClassC)
2013-12-02	108.162.192.105 (ClassC)
2014-01-28	141.101.117.108 (ClassC)
2014-04-07	162.159.245.230 (ClassC)
2014-05-05	162.159.244.230 (ClassC)
2014-11-04	104.28.9.17 (ClassC)
2015-02-26	108.162.193.21 (ClassC)
2015-02-26	108.162.192.21 (ClassC)
2015-02-26	108.162.192.21 (ClassC)
2025-05-20	75.2.70.75 (ClassC)
2025-08-05	99.83.190.102 (ClassC)

Port 80

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]