Domain > ns1.dnsfor10.com

More information on this domain is in AlienVault OTX

Files that talk to ns1.dnsfor10.com

MD5	A/V
bfb52b8647068d9d21c30431d4638ce0	[Trojan.Beebone.D] [W32/Worm-AAEH.ph!BFB52B864706] [W32/A-2463ff8b!Eldorado] [WS.Reputation.1] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.15496] [BehavesLike.Win32.AAEH.ch] [Worm:Win32/Vobfus.AAV] [HEUR/Fakon.mwf] [TScope.Trojan.VB] [PE:Malware.FakeFolder@CV!1.6ABB] [W32/Injector.VOX!tr]
454c87dfbc613a2dfa29ad02bd2afa80	[Trojan.Beebone.D] [W32/Worm-AAEH.s!454C87DFBC61] [W32/A-dd877c29!Eldorado] [Vobfus.RMAW] [PE:Malware.FakeFolder@CV!1.6ABB] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.15496] [BehavesLike.Win32.AAEH.dh] [TR/Graftor.hgtr] [Win32.Heur.KVM007.a.(kcloud)] [Worm:Win32/Vobfus] [HEUR/Fakon.mwf] [TScope.Trojan.VB] [Win32.Trojan.Inject.Auto] [W32/Refroso.AGEA!tr] [Inject2.AOFW] [Win32/Trojan.682]
1db8c9c9816c148723b5676495cd0446	[W32.DesfashoLTAX.Trojan] [Trojan.VbInject.LD3] [Dropper-FLK!1DB8C9C9816C] [Spyware.Zbot.ED] [Trojan/Pronny.lz] [Trojan.Win32.Dorifel.dedqlv] [W32.Imaut.CN] [Pronny.BK] [Win32/Vobfus.DUdUBIB] [Trojan.DR.Dorifel!wfXZdv69NHw] [Mal/VB-ANH] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.17006] [Dropper.Dorifel.Win32.15301] [BehavesLike.Win32.VBObfus.nm] [W32/Trojan.OYMC-8369] [TrojanDropper.Dorifel.afbf] [TR/Dropper.VB.17814] [Trojan[Dropper]/Win32.Dorifel] [Win32.Troj.Dorifel.am.(kcloud)] [Trojan/Win32.MDA] [Virus.Win32.Heur.p] [Trj/Chgt.D] [Win32/Pronny.LZ] [Worm.Win32.Gamarue] [W32/Injector.BKHA!tr]
05456a0eec2f2e2c3af8823e1b6904c5

Whois

Property	Value
Email	willroux@gmx.com
NameServer	NS2.FREEDNS0.COM
Created	2014-03-17 00:00:00
Changed	2015-02-15 00:00:00
Expires	2016-03-17 00:00:00
Registrar	URL SOLUTIONS INC.

DNS Resolutions

Date	IP Address
2014-04-19	82.146.36.112 (ClassC)
2019-08-16	208.91.197.46 (ClassC)
2024-01-08	107.22.84.114 (ClassC)
2026-01-28	18.205.186.231 (ClassC)

HTTP/1.1 200 OKDate: Fri, 16 Aug 2019 02:48:40 GMTServer: ApacheSet-Cookie: vsid906vr3134693207120340; expiresWed, 14-Aug-2024 02:48:40 GMT; Max-Age157680000; path/; domainns1.dnsfor10.com; HttpOnlyX-

!--	top.locationhttp://ns1.dnsfor10.com/?fpKlJOJh2sAcN8WIb4GVs3nu%2BBgwb2WakR4n8Cmrjt%2B6ONzaeac6jrdRAUGCMy8J%2FJoV0VCFjJuTr1Pyo7%2B1XgIv2OKeadryCI%2Fws0zehbOieb8WQxCTmJkyPrGQjGkFn0ARBOWx%2FafiF23Ynu2IrAostCUOYJsNbn5ZLd%2B2wwT6g%3D&prvtofnZt6CaoyrFp65KpNh9nJRTgyrPpErhE%2F3t%2FuPrR2ZdM%3D&poru27RfB4kNt2LuCmErjQmkk4kEybXve55KCjCaWtutznp33KWpcDQcmwH1wgDRSbLZ&cifr1&;	/*-->html data-adblockkeyMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ_MMWmk0ZHdfOND/Q8GIqJZ1sAsap/e7NvKdDj3IIaPbqbHocxK18uHD2+dLbB0nD0Ut5aQjr/SX5yS8swnDtuqg>head>				  meta http-equivContent-Type contenttext/html; charsetUTF-8>				  meta nameviewport contentwidthdevice-width>meta http-equivX-UA-Compatible contentIEEmulateIE7>script typetext/javascript>try{document.cookie  isframesetenabled1; path/;;}catch(exception){}/script>/head>frameset rows100%,* frameborderno border0 framespacing0>	frame srchttp://ns1.dnsfor10.com/?fpKlJOJh2sAcN8WIb4GVs3nu%2BBgwb2WakR4n8Cmrjt%2B6ONzaeac6jrdRAUGCMy8J%2FJoV0VCFjJuTr1Pyo7%2B1XgIv2OKeadryCI%2Fws0zehbOieb8WQxCTmJkyPrGQjGkFn0ARBOWx%2FafiF23Ynu2IrAostCUOYJsNbn5ZLd%2B2wwT6g%3D&prvtofrt6Dz1sIzHeVeI8MNgfv%2BR2wCQxG5mLv71WCiRUkemU%3D&poruMw4auO2u60Aw8jtb8CrM3aFsUvVmNtuccLlQH2VTO0QYlldYjbbxoENm7R6RxwVY&>/frameset>noframes>	body bgcolor#ffffff text#000000>	a hrefhttp://ns1.dnsfor10.com/?fpKlJOJh2sAcN8WIb4GVs3nu%2BBgwb2WakR4n8Cmrjt%2B6ONzaeac6jrdRAUGCMy8J%2FJoV0VCFjJuTr1Pyo7%2B1XgIv2OKeadryCI%2Fws0zehbOieb8WQxCTmJkyPrGQjGkFn0ARBOWx%2FafiF23Ynu2IrAostCUOYJsNbn5ZLd%2B2wwT6g%3D&prvtofIGrLrX34BNQCEI0SplLan5Ighqne%2BiSoTdEleRLM3%2BY%3D&poruCK765xFfbQezO1pZv3StchfIdasg6673Qp%2F%2BrjdbScQ0OPjWRqsWjXuSINndbR%2Bq&>Click here to proceed/a>.	/body>/noframes>/html>!--*/-->

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > ns1.dnsfor10.com

Is this malicious?

Files that talk to ns1.dnsfor10.com

Whois

DNS Resolutions

Port 80