Domain > piwxvumpyptp.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to piwxvumpyptp.com

MD5	A/V
41ffb4cbc41ee878d51576541af0a701	[Trojan.TinbaKD.2557455] [Trojan.TinbaKD.2557455] [Artemis!41FFB4CBC41E] [Trojan.Win32.Tinba.dtteut] [WS.Reputation.1] [TROJ_FORUCON.BMC] [Trojan-Banker.Win32.Tinba.xpz] [Trojan.TinbaKD.2557455] [Trojan.TinbaKD.2557455] [Trojan.TinbaKD.2557455] [Trojan.DownLoader14.51641] [TROJ_FORUCON.BMC] [BehavesLike.Win32.BackdoorNJRat.dc] [TR/Injector.204800.69] [Trojan:Win32/Tinba.F] [Trojan.TinbaKD.D27060F] [Trojan.TinbaKD.2557455] [Trojan.TinbaKD.2557455] [Trojan.Win32.Banker.xpz] [Trojan.MSIL.Injector] [W32/Tinba.XPZ!tr] [Trj/CI.A]
8f152934e829510da7b0e3c8cc9e6ef1	[HW32.Packed.3824] [Trojan.TinbaKD.2533709] [Trojan.TinbaKD.2533709] [PWS-FCCA!8F152934E829] [WS.Reputation.1] [Trojan-Banker.Win32.Tinba.xht] [Trojan.TinbaKD.2533709] [Trojan.TinbaKD.2533709] [Trojan.TinbaKD.2533709] [BehavesLike.Win32.Backdoor.dc] [TR/Injector.209408.15] [Win32/Trojan.f7a]
0e3d4c2982f72b9b7a99ae30669e39b9	[Win32.Trojan.Inject.Auto]
e9718e38e35ca31c6bc0281cb4ecfae8	[Trojan.TinbaKD.2544993] [Trojan.TinbaKD.D26D561] [WS.Reputation.1] [Win32/Tinba.BE] [TROJ_FORUCON.BMC] [Trojan-Banker.Win32.Tinba.xkh] [Trojan.TinbaKD.2544993] [Trojan.TinbaKD.2544993] [Trojan.TinbaKD.2544993] [Trojan.DownLoader14.38161] [TROJ_FORUCON.BMC] [Trojan/Win32.Tinba] [Trojan.TinbaKD.2544993] [Trojan.TinbaKD.2544993] [Trojan.Win32.Banker.xkh] [Trojan.Win32.Tinba] [MSIL/Injector.KMX!tr] [Trj/Chgt.O]
3f2bd60a4b51e8a842094ba27377b317	[Trojan.TinbaKD.2542405] [Trojan.TinbaKD.D26CB45] [Win32/Tinba.BE] [TROJ_FORUCON.BME] [Trojan.TinbaKD.2542405] [Trojan.TinbaKD.2542405] [TROJ_FORUCON.BME] [Troj/MSIL-DOH] [TR/Dropper.MSIL.57378] [Trojan/Win32.Ransom] [Win32.Trojan.Inject.Auto] [Win32.Outbreak]
b4b15e618ca0b452943d270ffd32eb4b	[Win32.Trojan.Inject.Auto] [PE:Malware.XPACK-LNR/Heur!1.5594]
56d7494d1e40242222b51d7a3011feac	[Win32.Trojan.Inject.Auto] [PE:Malware.XPACK-LNR/Heur!1.5594]
d0eecdaf4b39a94a8d6ebdc58646bc48	[PE:Malware.Obscure/Heur!1.9E03]
592fb6e3fc9281b08e3ca1093a2174a9	[PE:Malware.Obscure/Heur!1.9E03]
8497d4c1ae5ced2ce4a78e5a938309d8
ac5794bbdf124c0c4adba03868316ef3	[Trojan.A6267B49] [Trojan.Win32.Tinba.cas] [BehavesLike.Win32.Downloader.kc] [RDN/Spybot.bfr!r] [Trojan.Win32.Injector.CCYF] [PE:Malware.XPACK-LNR/Heur!1.5594] [Trojan.Crypt] [Trj/Tinba.A] [Win32/Trojan.Multi.daf]
6a44858931486a0fd6a44f97c36dcf32	[W32/Trojan3.QIG] [W32.IRCBot.NG] [Win32/Tinba.BM] [TROJ_TINBA.WRRY] [Backdoor.Win32.Androm.ddo] [Virus.Win32.Heur.c] [Trojan.PWS.Tinba.153] [TROJ_TINBA.WRRY] [Troj/Zbot-JTP] [W32/Trojan.ZRMV-9143] [TR/Tinba.A.520] [Trojan:Win32/Tinba.F] [Trojan/Win32.MDA] [Trojan.Win32.Injector.CCUJ] [Trojan.SuspectCRC] [W32/Injector.CCUJ!tr] [Inject2.CIOY] [Trj/Chgt.O]
04ff3c8a6816b83a8f354ed1d5958d5e	[W32/Trojan3.QIG] [Backdoor.Win32.Androm.ddo] [Troj/Zbot-JTP] [Heur.Dual.Extensions] [Trojan.PWS.Tinba.153] [HEUR_NAMETRICK.A] [W32/Trojan.ZRMV-9143] [Trojan:Win32/Tinba.F] [Trj/Chgt.O] [Win32/Tinba.BM] [Trojan.SuspectCRC] [W32/Injector.CCUJ!tr] [Inject2.CIOY] [Trojan.Win32.Injector.CCUJ]
db71e7e02f309d53f0f029a14c5904ad	[Suspicious.Cloud.5] [Troj/Invo-Zip] [HEUR_NAMETRICK.A] [Trojan.Win32.Injector.CCUJ]
16f924d3d2982c850bb25a3c7ef3ff2d
11d3462b7eeabe147bd878977ee513d5
0eae47fbd05a813a2721f3f919e78f75
3ef401639cbe68c34f328bd03ebd793e
814ce3449a868add1d00c6fc5c62d54d	[Trojan-FGPU!814CE3449A86]
4942574593e025a3ed3bfef884e6f90c	[Packed-FF!4942574593E0] [Trojan.Injector!AmO9cIzk0VM] [W32/Trojan.FYBS-4856] [Infostealer.Limitail] [TROJ_FORUCON.BME] [Trojan.Win32.Tinba.dvkjfv] [UnclassifiedMalware] [Trojan.PWS.Tinba.153] [TROJ_FORUCON.BME] [Packed-FF!4942574593E0] [Mal/MSIL-OK] [W32/Trojan3.RGE] [TR/AD.Tinba.Y.86] [Trojan:Win32/Tinba.F] [Trojan/Win32.MDA] [TScope.Trojan.MSIL] [Trojan.MSIL.Injector.LLW] [Trojan.MSIL.Inject] [MSIL/LLW.OK!tr] [MSIL8.BWXV] [Trj/CI.A]

Whois

Property	Value
Email	bdomaincontrol@gmail.com
NameServer	NS2.AFRAID.ORG
Created	2015-06-22 00:00:00
Changed	2016-01-04 00:00:00
Expires	2016-06-22 00:00:00
Registrar	DYNADOT, LLC

DNS Resolutions

Date	IP Address
2015-06-23	5.2.189.251 (ClassC)
2016-06-29	52.4.209.250 (ClassC)
2016-10-29	208.100.26.234 (ClassC)
2017-08-31	208.100.26.251 (ClassC)
2017-11-11	69.64.147.10 (ClassC)
2025-08-02	216.218.185.162 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]