Domain > i.simpli.fi

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to i.simpli.fi

MD5	A/V
f58fb6cfc42c049c1442d6ce54ea429d	[W32/new-malware!Maximus] [TR/Graftor.2081254] [Trojan.Packed.194] [Win32/DH{fGSBEiV+ICMsgRNcV04}] [Trojan-Ransom.Win32.Blocker] [Artemis!F58FB6CFC42C] [Trojan.Packed!N6hauVnIyeg] [WS.Reputation.1] [Trojan.Win32.Graftor.czubpq] [Heuristic.LooksLike.Win32.Suspicious.J] [Win32/Trojan.fad]
645d60825b362448151387d060593635	[W32.Clod9e1.Trojan.1d9a] [Trojan.Win32.DownLoader10.cqvkbc] [WS.Reputation.1] [HKTL_CLICKER] [Trojan.Win32.S.Clicker.649728] [UnclassifiedMalware] [Trojan.DownLoader10.26566] [SPR/Surfairy.A] [Trj/CI.A] [Trojan.SuspectCRC] [Malware_fam.NB] [Hacktool.Win32.RiskTool.77] [Win32/DH{DyAiJQ}]
7d026327537e1250a1ae2c2f25d7f210	[W32.ATVC_OnsurotLTL.Trojan] [PE:Malware.Obscure!1.9C59]
3a3ba4da9f99584f9849d1aef724e0ec
9cafa10f4ceac2a411ff475cf74cec70	[Backdoor.Kelihos.F5] [Trojan.Win32.Tepfer.dfshpg] [Kelihos.BKDR] [BackDoor.Slym.14195] [BehavesLike.Win32.Backdoor.cc] [W32/Trojan.MELG-2219] [Win32.PSWTroj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor/Win32.Kelihos] [SScope.Malware-Cryptor.Hlux] [Win32.Backdoor.Hlux.Hwwt] [Backdoor.Win32.Kelihos] [W32/Kryptik.BJWM!tr] [Backdoor.Win32.Hlux.ax]
128e33f9a049bf4e152689857819089d	[W32.FadoxbesLTE.Trojan] [Downloader-FYH!128E33F9A049] [Trojan.Inject.ED] [Heuristic.BehavesLike.Win32.Suspicious-DTR.G] [Spyware/Win32.Zbot]
9c48ef2da58a1ac5cbe5ef89d3e52fe1	[HW32.Packed.F00E] [Artemis!9C48EF2DA58A] [PUP.RiskwareTool.CK] [RiskWare.HackAV!] [Trojan.ADH] [Riskware.Win32.HackAV.dpbfbb] [W32/Trojan.GJTJ-9302] [Unwanted/Win32.HackTool] [Win32/RiskWare.HackAV.LZ] [Trojan.Win32.HackAV.LZ] [Win32/Trojan.Hacktool.571] [Riskware] [JS.A.Iframe.1334982] [HackTool.Win32.HackAV.At]
e3c3f84285ab617390f6cd2ba6b1258e	[Trojan.Zbot]
2948864b8afed778a167a4bdeaf0a1fa	[W32.HfsAutoA.11B8] [BehavesLike.Win32.Downloader.cc]
7fa60d9694ce8a59071d02cde50e4539	[WS.Reputation.1] [Trojan.DownLoader14.22052]
2d7bb5714b2a19dccf36e8deb1c74b06	[HW32.Packed.1745] [Backdoor.Graybird] [Hacktool.Win32.GameHack.MV] [Skodna.GameHack.NXQ]
b01250fa3c06309ed108189808354bbb	[HW32.Packed.F74C] [Artemis!B01250FA3C06] [Win32.Trojan.Black.Paus] [BehavesLike.Win32.BadFile.tc] [Mal/VMProtBad-A] [Trojan.Strictor.D15C16] [W32/VMProtBad.A!tr] [Win32/Blacked]
a292fe91547e241077a87712709e9eed	[HW32.Packed.E4DA] [Artemis!A292FE91547E] [BehavesLike.Win32.Trojan.tc] [Mal/VMProtBad-A] [Trojan.Strictor.D15C16] [Win32.Trojan.Black.Llqo] [Trojan.Win32.VMProtect] [W32/VMProtBad.A!tr] [Win32/Blacked] [PUA.Win32.VMProtect.ABO]
33ffb02b0ef63be8dd013253e70ce888	[WS.Reputation.1] [Adware.Downware.9804] [Win32.Heur.KVMH008.a.(kcloud)] [Trojan.Fsysna]
176d6404fcc902d82ae987c085b2b161	[WS.Reputation.1]
4d1bd8997472d93907491b68d603ebc0	[Application.StartPage.AFA] [Trojan.StartPage] [W32/Trojan.CIVV-8992] [Application.StartPage.AFA] [Application.StartPage.AFA] [VBS.StartPage.34] [BehavesLike.Win32.Downloader.tc] [Artemis!4D1BD8997472] [Trojan.StartPage] [Trojan.Win32.Pakes] [W32/SDBot.CC!worm] [Pakes_c.ZQE]
9c01e2d1d929dc32ace1fd14fda091a9	[Artemis!86BF8458D87B] [Backdoor.Win32.DarkKomet.ftwp] [Trojan.DownLoader15.19512] [Backdoor:Win32/Fynloski.A] [Win32/Jorik.KJ] [Trojan.Filecoder.W] [Riskware/Sim]
ef89fb84bf16952a83711a60abd45060
64081b63119f47212e7b6cb2a131ac02
6d427c7475025f609e3c9c8edd78b38f

Whois

Property	Value
Name	Domain manager
Organization	Web Solutions ApS, Suomen sivuliike
Address	Thorsgade 1
Zip Code	DK-5000
City	Odense, Denmark
Phone	+4570262025
NameServer	dns2.simpli.fi
Created	2011-03-09 00:00:00
Changed	2015-02-18 00:00:00
Expires	2020-03-15 00:00:00

DNS Resolutions

Date	IP Address
2013-05-12	208.43.230.80 (ClassC)
2013-05-12	174.37.217.201 (ClassC)
2013-05-12	184.173.188.162 (ClassC)
2013-06-18	173.192.208.197 (ClassC)
2013-10-15	50.97.233.182 (ClassC)
2013-10-17	50.97.233.183 (ClassC)
2013-10-18	50.97.233.188 (ClassC)
2013-10-19	50.97.233.187 (ClassC)
2014-02-20	216.12.196.141 (ClassC)
2014-07-01	5.153.5.70 (ClassC)
2014-07-08	5.153.5.69 (ClassC)
2014-10-14	5.153.5.70 (ClassC)
2014-11-09	50.97.233.188 (ClassC)
2014-11-16	50.97.233.183 (ClassC)
2015-04-26	50.97.233.182 (ClassC)
2015-11-30	108.168.159.143 (ClassC)
2016-01-12	108.168.159.153 (ClassC)
2016-04-05	5.153.20.140 (ClassC)
2017-09-06	5.153.20.138 (ClassC)
2018-11-23	158.85.41.205 (ClassC)
2018-11-23	158.85.41.206 (ClassC)
2018-11-23	158.85.41.218 (ClassC)
2018-11-23	158.85.41.198 (ClassC)
2019-04-08	169.53.129.216 (ClassC)
2019-04-08	169.53.129.217 (ClassC)
2019-04-08	169.53.129.220 (ClassC)
2019-04-11	169.55.104.40 (ClassC)
2019-04-17	169.45.237.40 (ClassC)
2019-04-18	169.47.141.227 (ClassC)
2019-04-19	169.50.137.179 (ClassC)
2019-04-20	169.50.137.176 (ClassC)
2019-06-03	169.55.1.118 (ClassC)
2019-06-03	169.44.76.69 (ClassC)
2019-06-03	169.44.76.92 (ClassC)
2020-02-07	169.55.1.109 (ClassC)
2020-04-19	169.47.141.198 (ClassC)
2020-04-23	169.62.67.166 (ClassC)
2020-06-14	169.53.129.222 (ClassC)
2020-06-21	169.55.1.124 (ClassC)
2020-07-02	169.47.141.203 (ClassC)
2020-07-27	169.44.76.89 (ClassC)
2020-07-31	169.62.108.240 (ClassC)
2020-08-20	169.53.129.205 (ClassC)
2020-09-23	169.47.141.234 (ClassC)
2020-09-25	169.47.141.204 (ClassC)
2020-10-14	169.44.76.79 (ClassC)
2020-10-16	169.44.76.76 (ClassC)
2020-10-19	169.44.76.75 (ClassC)
2020-11-25	169.45.237.42 (ClassC)
2020-11-30	169.63.69.185 (ClassC)
2020-12-10	169.62.108.227 (ClassC)
2020-12-13	169.55.104.42 (ClassC)
2021-01-15	169.62.126.132 (ClassC)
2021-02-28	169.62.108.226 (ClassC)
2022-12-14	35.203.157.231 (ClassC)
2023-08-04	34.168.167.165 (ClassC)
2023-08-31	34.105.46.135 (ClassC)
2025-11-18	34.127.39.145 (ClassC)
2026-02-06	34.145.41.59 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]