Domain > number1.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to number1.net

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
210b6e761b4cb7d71e862606c0f28846	[Artemis!210B6E761B4C] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.prs] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr] [SHeur4.BNRB]
ddeca0855c9bb584c270ff6c5f0521c2	[Artemis!DDECA0855C9B] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qij] [UnclassifiedMalware] [TR/Dldr.Cutwail.4] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PH] [W32/Kryptik.AX!tr] [Trj/CI.A]
e617a69e7185cd299d75c87c401e0fda	[SHeur4.BKZA] [TrojanDownloader*Win32/Cutwail.BS]
a0b0bde17bb93f2af14fcc3771aef4f3
64d63f2465d931818539beff1ca66a34	[Crypt2.AATE] [TR/Rogue.1134088]
6bd3a60b66efb707e894f2717cccf17b
d3be3c4282a9d5158080d8023e5f2efa	[TrojanRansom.Foreign.cyzc] [Fake-Rena-FNQ!D3BE3C4282A9] [Trojan.Inject.RRE] [Trojan] [WS.Reputation.1] [TROJ_RANSOM.FCN] [Trojan-Ransom.Win32.Foreign.cyzc] [UnclassifiedMalware] [Trojan.PWS.Panda.547] [TR/Ransom.Foreign.cyzc] [Win32.Troj.Undef.(kcloud)] [VirTool:Win32/Injector] [Trojan/Win32.Foreign] [W32/Trojan.CVXL-5426] [Virus.Win32.Cryptor] [W32/Injector.ZVR!tr] [Win32/Cryptor] [Trj/Dtcontx.E]
b4f310f5cc7b9cd68d919d50a8415974	[HW32.Laneul.zqwg] [Trojan/W32.Jorik.40448.U] [TrojanDownloader.Cutwail] [Trojan] [Trojan.Win32.Jorik.byfbdv] [W32.Pilleuz] [Win32/Cutwail.RfLHODC] [TROJ_SPNR.0BGS13] [Trojan.Win32.Jorik.Cutwail.prm] [Trojan.Cutwail!Vn3uTMMB5CM] [UnclassifiedMalware] [BackDoor.Bulknet.958] [TR/Graftor.103216] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Client-SMTP.40448.A] [Dropper/Win32.Vidro] [BScope.Trojan.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.YOY!tr] [SHeur4.BNRB] [Trj/CI.A] [TrojanDownloader*Win32/Cutwail.BS]
e57d3b285148fa02129b9c0044aa8737	[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
e4fac37c735dcccfffd80373bcf31985
66db43669a9cb80274d2ba6a1f44945e	[TrojanDownloader*Win32/Cutwail.BS]
a1c6f433289e28861c8876b0c161afee
2f80660b47db546c6907edd95868b901	[Backdoor.Pushdo] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo]
0b75cdeaeb63b2216d2727393dfbc55f	[Backdoor/W32.Pushdo.38336] [Backdoor.Pushdo.avg] [Trojan/Kryptik.aqqc] [Riskware] [Trojan.Win32.XPACK.bctdtl] [W32.Pilleuz] [Pushdo.B] [TROJ_SPNR.35AA13] [Backdoor.Win32.Pushdo.avg] [Trojan.Kryptik!R9c1iw1k6TE] [Backdoor.Win32.A.Pushdo.38336] [UnclassifiedMalware] [TROJ_SPNR.35AA13] [Backdoor/Pushdo.ng] [Win32.Hack.Pushdo.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Malware.Pilleuz!rem] [Suspicious] [Backdoor.Win32.Pushdo] [W32/Pushdo.AVG!tr.bdr] [Trj/OCJ.A]
ee32c24ca01e2d6ed6e20cf05e13b817
6499206ef99b92bf5002197c3f4b372c	[Trojan.Dropper.USI] [Trojan.Cutwail.AQ] [Backdoor.Pushdo] [Trojan.Dropper.USI] [Win32.Trojan.WisdomEyes.151026.9950.9999] [Win32/Wigon.PB] [BKDR_PUSHDO.SMJ] [Trojan.Win32.Pushdo.bbseki] [Trojan.Dropper.USI] [Troj/Dropr-EK] [UnclassifiedMalware] [Trojan.Dropper.USI] [Trojan.DownLoad3.17030] [Trojan.Wigon.Win32.5105] [BKDR_PUSHDO.SMJ] [BehavesLike.Win32.ZBot.nc] [Backdoor.Pushdo.c] [Trojan[Backdoor]/Win32.Pushdo] [TrojanDownloader:Win32/Cutwail.BE] [Trojan.Dropper.USI] [Trojan.Dropper.USI] [Win32/Tnega.ARIE] [Trojan.Dropper.USI] [Backdoor.Pushdo] [Win32.Trojan.Dropper.bmcn] [Backdoor.Pushdo!x042poc7/s0] [Backdoor.Win32.Pushdo] [W32/CutMail.EE!tr] [SHeur4.ASVE] [Trj/CI.A]

Whois

Property	Value
NameServer	NS2.DSREDIRECTION.COM
Created	1998-04-06 00:00:00
Changed	2016-01-28 00:00:00
Expires	2018-04-05 00:00:00
Registrar	VIVID DOMAINS, INC

DNS Resolutions

Date	IP Address
2013-04-01	216.151.212.175 (ClassC)
2013-05-31	208.73.211.152 (ClassC)
2013-06-09	208.73.210.213 (ClassC)
2013-06-10	208.73.211.172 (ClassC)
2013-06-11	208.73.211.198 (ClassC)
2013-06-19	208.73.211.180 (ClassC)
2013-06-27	208.73.211.174 (ClassC)
2013-07-01	208.73.211.197 (ClassC)
2013-07-16	208.73.211.247 (ClassC)
2013-07-19	208.73.211.184 (ClassC)
2013-07-19	208.73.211.184 (ClassC)
2013-08-11	208.73.211.191 (ClassC)
2013-09-27	208.73.211.169 (ClassC)
2013-11-02	208.73.210.209 (ClassC)
2013-11-02	208.73.210.209 (ClassC)
2013-11-03	208.73.211.169 (ClassC)
2013-11-14	208.73.211.188 (ClassC)
2013-11-14	208.73.211.191 (ClassC)
2014-09-08	208.73.211.179 (ClassC)
2014-09-08	208.73.211.183 (ClassC)
2014-09-08	208.73.211.195 (ClassC)
2014-09-08	208.73.211.179 (ClassC)
2024-03-08	45.79.19.196 (ClassC)
2024-03-11	45.33.20.235 (ClassC)
2024-04-05	45.33.2.79 (ClassC)
2024-12-03	45.33.23.183 (ClassC)
2026-03-05	23.239.4.93 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]