Domain > main.smsactivator.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to main.smsactivator.com

MD5	A/V
290f51a1e0fa745439d93fcde524baac	[Hoax.Win32.ArchSMS!O] [Trojan/ArchSMS.jiwr] [Trojan.ArchSMS!VxR6sORRIck] [Hoax.Win32.ArchSMS.jiwr] [Riskware.Win32.SMSSend.incxx] [UnclassifiedMalware] [Tool.SMSSend.1] [SPR/Tool.630186] [Heuristic.BehavesLike.Win32.Suspicious.H] [Hoax.ArchSMS.alc] [HackTool[Hoax]/Win32.ArchSMS] [Win32.Troj.Hoax.(kcloud)] [Trojan/Win32.SMSHoax] [Hoax.ArchSMS.ji] [Trojan.Win32.BadJoke.aQpS] [Hoax.Win32.ArchSMS] [W32/ArchSMS.QVR!tr] [Trj/CI.A]

Whois

Property	Value
Email	akhmelev@gmail.com
NameServer	NS6.SEATTLEDOMAINS.NET
Created	2007-12-28 00:00:00
Changed	2015-12-28 00:00:00
Expires	2016-12-28 00:00:00
Registrar	PDR LTD. D/B/A PUBLI

DNS Resolutions

Date	IP Address
2014-07-04	67.225.137.102 (ClassC)
2019-10-15	78.46.48.204 (ClassC)
2024-08-30	103.224.212.104 (ClassC)
2024-09-24	103.224.212.214 (ClassC)
2025-03-19	77.247.179.82 (ClassC)
2025-04-10	216.245.197.43 (ClassC)
2025-04-27	216.245.197.42 (ClassC)
2025-05-20	199.115.116.162 (ClassC)
2025-06-13	77.247.179.86 (ClassC)
2025-06-19	216.245.197.44 (ClassC)
2025-06-28	207.244.67.139 (ClassC)
2025-07-12	216.245.197.41 (ClassC)
2025-07-17	5.79.68.108 (ClassC)
2025-07-29	207.244.67.138 (ClassC)
2025-08-06	216.245.197.46 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]