Domain > ns1.dnsfor.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to ns1.dnsfor.net

MD5	A/V
589a83bc81cfc6a8bb41cc745bd61640	[HW32.CDB.0724] [Worm.Vobfus.r3] [W32/Worm-AAEH.g!589A83BC81CF] [WS.Reputation.1] [Worm.Win32.Vobfus.esdv] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.12869] [TR/Dorifel.akeu] [Mal/VB-ALW] [Worm/Win32.Vobfus] [Worm:Win32/Vobfus] [Trojan/Win32.Jorik] [W32/Trojan.TIRI-6175] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/Vobfus.ALW!worm] [Worm.Win32.Vobfus.an] [Win32/Trojan.7ec]
4000b92d0662a7215c7921010f0607b6	[HW32.CDB.76f1] [Trojan.Beebone.D] [W32/Worm-AAEH.sh!4000B92D0662] [WS.Reputation.1] [Trojan.Win32.VBKrypt.urkc] [Trojan.Injector!tYjTJh9b/T4] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Mal/VB-ALW] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12445] [TR/VBKrypt.urjys] [Heuristic.LooksLike.Win32.Suspicious.I] [Trojan/Win32.VBKrypt] [Win32.Troj.VBKrypt.ur.(kcloud)] [Worm:Win32/Vobfus.ZN] [TScope.Trojan.VB] [Win32.Trojan.Vbkrypt.Oxum] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.AAYI] [Trojan.Win32.VBKrypt.aO] [Win32/Trojan.c1a]
4f20261512105bf0e06e586b78d0f171	[HW32.CDB.7a6d] [Trojan.Beebone.D] [W32/Worm-AAEH.sh!4F2026151210] [W32.Changeup] [Injector.GKDZ] [PE:Malware.XPACK-HIE/Heur!1.9C48] [TrojWare.Win32.Symmi.ASA] [Win32.HLLW.Autoruner2.12869] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/SillyFDC-S] [Worm:Win32/Vobfus.ZV] [W32/Trojan.TCQQ-9375] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACQI]
122ea52ba4fe2406c545c486220a9ac1	[HW32.CDB.Cc45] [Trojan.Beebone.D] [W32/Worm-AAEH.sh!122EA52BA4FE] [Trojan] [W32.Changeup] [Injector.GKDZ] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Mal/SillyFDC-S] [TrojWare.Win32.Symmi.ASA] [Win32.HLLW.Autoruner2.12869] [Worm:Win32/Vobfus.ZV] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/Injector.BCTT!tr] [Inject2.ACQI] [Win32/Trojan.9eb]
52c408ad04b5c98b170c88cde9491560	[HW32.CDB.7a6d] [Trojan.Beebone.D] [W32/Worm-AAEH.sh!52C408AD04B5] [W32.Changeup] [Injector.GKDZ] [PE:Malware.XPACK-HIE/Heur!1.9C48] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.12869] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/SillyFDC-S] [Worm:Win32/Vobfus.ZV] [W32/Trojan.ISJF-8474] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACQI] [Win32/Trojan.292]
7a6fc1058deb8828b22251288eed5680	[Trojan.Beebone.D] [W32/Worm-AAEH.g!7A6FC1058DEB] [WS.Reputation.1] [Vobfus.QXUL] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12741] [Worm/Vobfus.agcvt] [WORM_VOBFUS.SMPD] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/VB-ALW] [Worm:Win32/Vobfus] [Trojan/Win32.Jorik] [TScope.Trojan.VB] [Trojan-Downloader.Win32.Beebone] [W32/VB.ALW!tr] [Inject2.ABLK] [Win32/Worm.64b]
4b731cf055fcb076e0fadbe29b40b4b6	[HW32.CDB.05af] [Heur.Win32.Veebee.3!O] [W32/Worm-AAEH.s!4B731CF055FC] [WS.Reputation.1] [Vobfus.RDWD] [Worm.Win32.Vobfus.erya] [Worm.Vobfus!AotOWAmKghw] [Mal/SillyFDC-S] [TrojWare.Win32.VB.ICOX] [Win32.HLLW.Autoruner2.13996] [Worm/Vobfus.yhsd] [Worm/Win32.Vobfus] [Worm:Win32/Vobfus] [TScope.Trojan.VB] [Worm.Win32.Vobfus.AMr] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Win32/Trojan.d18]
38fca314bdc3e969a206dd9e88595260	[Trojan.Beebone.D] [W32/Worm-AAEH.sh!38FCA314BDC3] [WS.Reputation.1] [Trojan.Injector!rsR9lSM7Mv8] [UnclassifiedMalware] [Trojan.DownLoader11.4282] [Worm/Vobfus.agere] [Mal/SillyFDC-S] [Worm:Win32/Vobfus] [W32/Trojan.ONYL-1844] [TScope.Trojan.VB] [Trj/dtcontx.L] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACRI]
bfb52b8647068d9d21c30431d4638ce0	[Trojan.Beebone.D] [W32/Worm-AAEH.ph!BFB52B864706] [W32/A-2463ff8b!Eldorado] [WS.Reputation.1] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.15496] [BehavesLike.Win32.AAEH.ch] [Worm:Win32/Vobfus.AAV] [HEUR/Fakon.mwf] [TScope.Trojan.VB] [PE:Malware.FakeFolder@CV!1.6ABB] [W32/Injector.VOX!tr]
0fa5c4acd4170b86df18e846ab7aad90	[HW32.CDB.Ac87] [Heur.Win32.Veebee.1!O] [Trojan.VBKrypt!s0GS848leq4] [WS.Reputation.1] [Trojan.Win32.VBKrypt.uqgz] [PE:Malware.FakeFolder@CV!1.6ABB] [TrojWare.Win32.VB.ICOX] [Win32.HLLW.BackDates.309] [Mal/SillyFDC-AH] [Trojan/Win32.VBKrypt] [Worm:Win32/Vobfus.YP] [W32/Trojan.GDFI-6744] [Trojan/Win32.Vobfus] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/Injector.VOX!tr] [Trojan.Win32.VBKrypt.AE] [Win32/Trojan.Dropper.fae]
52e2ab079833c7c021e3e63e73e7cf50	[HW32.CDB.15bf] [Packed.Win32.Ransom-Crypter.1!O] [VBObfus.g] [WS.Reputation.1] [Vobfus.RCLT] [Trojan.Win32.VBKrypt.urid] [Trojan.VBKrypt!QnGKe1erWeA] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12526] [Worm/Vobfus.ZK.10] [Mal/VB-ALW] [Trojan/Win32.VBKrypt] [Worm:Win32/Vobfus] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Crypt_vb.KH] [Trojan.Win32.VBKrypt.AZPT] [Win32/Worm.399]
33ac2e4dfdbb8963c84daf3ce764fbc1	[HW32.CDB.4afe] [Trojan.Beebone.D] [W32/Worm-AAEH.g!33AC2E4DFDBB] [WS.Reputation.1] [Vobfus.RCNO] [Trojan.Win32.VBKrypt.uron] [Trojan.VBKrypt!gZCagqd3cHM] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12829] [Worm/Vobfus.urov] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/SillyFDC-S] [Win32.Troj.VBKrypt.ur.(kcloud)] [Worm:Win32/Vobfus] [TScope.Trojan.VB] [Win32.Trojan.Vbkrypt.Ljui] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ABRC] [Trojan.Win32.VBKrypt.Ajgt]
1a9f4147586fd21a834f20e2180f3921	[W32/Worm-AAEH.sh!1A9F4147586F] [WS.Reputation.1] [PE:Malware.XPACK-HIE/Heur!1.9C48] [UnclassifiedMalware] [Trojan.DownLoader11.4282] [Worm/Vobfus.jad.12] [Mal/SillyFDC-S] [Worm:Win32/Vobfus.ZW] [TScope.Trojan.VB] [Trj/dtcontx.L] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACSD] [Win32/Trojan.555]
6de28cfb9a36fa1258dbf2f099c627e0	[HW32.CDB.741a] [Heur.Win32.Veebee.1!O] [W32/Worm-AAEH.pd!6DE28CFB9A36] [Trojan.VBKrypt!NJoH/x0VguQ] [WS.Reputation.1] [Refroso.GN] [Trojan.Win32.VBKrypt.uqgc] [TrojWare.Win32.VB.ICOX] [Win32.HLLW.BackDates.269] [Mal/SillyFDC-AH] [Worm:Win32/Vobfus.YP] [W32/Trojan.LUFK-3841] [Trojan/Win32.Vobfus] [TScope.Trojan.VB] [PE:Malware.FakeFolder@CV!1.6ABB] [Worm.Win32.Vobfus] [W32/Injector.VOX!tr] [Trojan.Win32.VBKrypt.AhB] [Win32/Trojan.2fa]
041957efb7596295195652a1e3fc2720	[HW32.CDB.343e] [Heur.Win32.Veebee.1!O] [W32/Worm-AAEH.pf!041957EFB759] [WS.Reputation.1] [Vobfus.RBWB] [Worm.Win32.Vobfus.ervj] [Worm.Vobfus!7ZgnYf+YamE] [TrojWare.Win32.VB.ICOX] [Win32.HLLW.Autoruner2.11502] [Worm/Vobfus.ervj] [Mal/SillyFDC-AH] [Worm/Win32.Vobfus] [Worm.Vobfus.er.(kcloud)] [Worm:Win32/Vobfus.YV] [W32/Trojan.CTQL-9178] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/Injector.VOX!tr] [Worm.Win32.Vobfus.aEO]
72cf4790b4dbf0e384c93fd0489c5a00	[W32/Worm-AAEH.g!72CF4790B4DB] [Worm.Vobfus!6izrQf1m6b8] [WS.Reputation.1] [Vobfus.RFAN] [Worm.Win32.Vobfus.eseu] [PE:Malware.XPACK-HIE/Heur!1.9C48] [TrojWare.Win32.Symmi.BCT] [Trojan.DownLoader11.4282] [WORM_VOBFUS.SMKO] [Worm/Win32.Vobfus] [Worm:Win32/Vobfus] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/Vobfus.BDKB!worm] [Inject2.ADXV] [Worm.Win32.Vobfus.Ay] [Win32/Trojan.Dropper.fae]
1a2ee4d76bb58df403da91c75cf275f0	[HW32.CDB.59ed] [Packed.Win32.Ransom-Crypter.1!O] [VBObfus.g] [Trojan.VBKrypt!bjrMH8vUbsI] [WS.Reputation.1] [Injector.GJPO] [Trojan.Win32.VBKrypt.urit] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12855] [Worm/Vobfus.ZL.53] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/VB-ALW] [Win32.Troj.VBKrypt.ur.(kcloud)] [Worm:Win32/Vobfus.ZL] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Crypt_vb.KJ] [Trojan.Win32.Injector.BCTT]
2a93f23a57eb1252a9ac3d7e1df2bb70	[HW32.CDB.Bc69] [Heur.Win32.Veebee.1!O] [W32/Worm-AAEH.pd!2A93F23A57EB] [WS.Reputation.1] [Refroso.GN] [Trojan.Win32.VBKrypt.uqgc] [Trojan.VBKrypt!5ql1gDxZWtQ] [TrojWare.Win32.VB.ICOX] [Win32.HLLW.BackDates.269] [Mal/SillyFDC-AH] [Trojan/Win32.VBKrypt] [Worm:Win32/Vobfus.YP] [Trojan/Win32.Vobfus] [W32/Trojan.LAFI-8667] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/Injector.VOX!tr] [Trojan.Win32.VBKrypt.aZx]
16149a580ad155a2d308d9719fd2e0e1	[HW32.CDB.516a] [W32/Worm-AAEH.s!16149A580AD1] [Worm.Vobfus!8mHiVcdNVBE] [W32.Changeup] [Worm.Win32.Vobfus.erwc] [PE:Malware.XPACK-HIE/Heur!1.9C48] [W32/Vobfus-DP] [TrojWare.Win32.VB.ICOX] [Win32.HLLW.Autoruner2.11531] [Worm/Vobfus.erwc] [WORM_VOBFUS.SMLG] [Worm/Win32.Vobfus] [Worm.Vobfus.er.(kcloud)] [Worm:Win32/Vobfus.YU] [W32/Trojan.BAYA-7206] [TScope.Trojan.VB] [Worm.Win32.Vobfus.ASfu] [Win32.Worm.Vobfus.Dvps] [Trojan.Inject2] [W32/VB.ALW!tr] [Inject2.YGZ] [W32/Vobfus.GEP.worm] [Win32/Trojan.bb5]
49e578bb227e2076dbf07a1151cff376	[W32/Worm-AAEH.sh!49E578BB227E] [WS.Reputation.1] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Mal/SillyFDC-S] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.12869] [Worm:Win32/Vobfus] [TScope.Trojan.VB] [Trj/dtcontx.L] [Trojan.Inject2] [W32/VB.ALW!tr] [Inject2.ACRU]

Whois

Property	Value
Email	1744275278@qq.com
NameServer	NS2.SEDOPARKING.COM
Created	2015-08-19 00:00:00
Changed	2015-08-21 00:00:00
Expires	2016-08-19 00:00:00
Registrar	DYNADOT3 LLC

DNS Resolutions

Date	IP Address
2014-04-21	82.146.36.112 (ClassC)
2014-05-12	91.231.85.137 (ClassC)
2014-06-19	144.76.206.162 (ClassC)
2014-06-28	185.14.28.182 (ClassC)
2014-07-09	95.47.161.107 (ClassC)
2014-07-13
2014-08-26	162.247.13.243 (ClassC)
2015-11-07	185.53.179.6 (ClassC)
2017-07-06	185.82.212.100 (ClassC)
2018-06-09	159.253.25.197 (ClassC)
2018-06-09	159.253.28.197 (ClassC)
2018-06-09	31.192.228.197 (ClassC)
2022-05-08	35.205.61.67 (ClassC)
2022-12-04	104.154.244.244 (ClassC)
2023-01-27	35.184.78.159 (ClassC)
2024-01-16	107.22.84.114 (ClassC)
2025-03-01	18.246.231.120 (ClassC)
2025-04-06	18.205.186.231 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]