Domain > nofeehost.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to nofeehost.com

MD5	A/V
bb77f0d44345420e06298f661ce5fa4a	[W32.Clod6bb.Trojan.ac1d] [Trojan.Crypt.Delf.B] [Trojan.Crypt.Delf.B] [TrojanBanker.Banker.acgq] [Artemis!BB77F0D44345] [Trojan/Banker.acgq] [TrojanSpy.Banker!GDS0uS8W9Jg] [Infostealer.Bancos] [Malware] [Trojan-Banker.Win32.Banker.acgq] [Trojan.Crypt.Delf.B] [Trojan.Win32.Banker.pgtz] [Trojan.Win32.A.Banker.276992.H[UPX]] [Trojan.Crypt.Delf.B] [TrojWare.Win32.Spy.Banker.acgq] [Trojan.Crypt.Delf.B] [Trojan.PWS.Banker.46257] [Artemis!BB77F0D44345] [Mal/Bank-A] [TrojanSpy.Banker.tew] [Trojan[Banker]/Win32.Banker] [Win32.Troj.Banker.(kcloud)] [Trojan.Crypt.Delf.B] [Win-Trojan/Banker.276992.E] [Trj/CI.A] [Win32.Trojan-Banker.Banker.cszv] [W32/Banker.ACGQ!tr] [Win32/DH{gQwgLlVEDwNiJCIlgRI}] [Trojan.Win32.Banker.ATd]
c67496f32b1daf2a55dd66a92e8700c5	[Virtu-FWin32Virtu-F] [Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [Backdoor.IRCBot] [W32/Worm-FQU!C67496F32B1D] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [Troj/Juched-A] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
3998a85358e49878a13e813afe0bcb8c	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FBL!3998A85358E4] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
79a5d507adab322277fb6a6f35e7a42c	[VitroWin32Vitro] [Worm/Ganelp.G.42] [Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [Backdoor.IRCBot] [W32/Worm-FQU!79A5D507ADAB] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [Troj/Juched-A] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
966499f8c9ab3984dc0cdac8a7695436	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FQU!966499F8C9AB] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
e1393922d76aee018f6ed7bf56f69ca1	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FQU!E1393922D76A] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
1194ddc033f96dbf1121a76ba0fab401	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FBL!1194DDC033F9] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
f612a28eed7273e61905d05047042353	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FBL!F612A28EED72] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]
bd6cf0b9dc6858f99f386de5222cb015	[Worm.Ganelp.A6] [Win.Trojan.BankerSpy-2] [Trojan.Win32.Webprefix] [Worm.Win32.Juched.pgy] [W32/Worm-FBL!BD6CF0B9DC68] [Worm*Win32/Ganelp.E] [Trojan.FakeFolder!5426] [W32.Griptolo] [WORM_GANELP.SMIA] [Worm.Juched]

Whois

Property	Value
Email	U53QX5RU9HR@NETWORKSOLUTIONSPRIVATEREGISTRATION.COM
NameServer	DNS2.NAME-SERVICES.COM
Created	2007-02-01 00:00:00
Changed	2015-01-03 00:00:00
Expires	2016-02-01 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2009-12-17	67.208.91.110 (ClassC)
2012-07-14	67.208.91.121 (ClassC)
2012-08-15	67.208.91.120 (ClassC)
2013-12-18	67.208.91.122 (ClassC)
2024-11-07	3.33.243.145 (ClassC)
2025-01-20	15.197.204.56 (ClassC)
2025-02-16	15.197.172.60 (ClassC)
2025-03-08	15.197.212.58 (ClassC)
2025-04-16	45.194.53.52 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
users4.nofeehost.com	2024-11-22	15.197.204.56
ftp5.nofeehost.com	2015-01-24	67.208.91.110
user5.nofeehost.com	2013-06-08	67.208.91.110
users5.nofeehost.com	2013-09-28	67.208.91.110
users6.nofeehost.com	2013-10-17	67.208.91.110
www.nofeehost.com	2024-11-25	3.33.243.145

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]