Domain > primeline.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to primeline.com

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
d2f2c9e7b5d32c5114a2f8511d9efcc2
e9a5bc168334d1c8371468d3e033ad32
e9ff7ebc17773c0d705e6b8174608c87
57be65340d0a4336f525d108862ccf50
17c3b162c4f71c7aef83c9e7644b6752
d3be3c4282a9d5158080d8023e5f2efa	[TrojanRansom.Foreign.cyzc] [Fake-Rena-FNQ!D3BE3C4282A9] [Trojan.Inject.RRE] [Trojan] [WS.Reputation.1] [TROJ_RANSOM.FCN] [Trojan-Ransom.Win32.Foreign.cyzc] [UnclassifiedMalware] [Trojan.PWS.Panda.547] [TR/Ransom.Foreign.cyzc] [Win32.Troj.Undef.(kcloud)] [VirTool:Win32/Injector] [Trojan/Win32.Foreign] [W32/Trojan.CVXL-5426] [Virus.Win32.Cryptor] [W32/Injector.ZVR!tr] [Win32/Cryptor] [Trj/Dtcontx.E]
7e265cfaa3a92f9b07c518dcbe577262	[Crypt_s.BOF] [TrojanDownloader*Win32/Cutwail.BS]
e3346adfbe598fe8dacfcf07debecc50	[TrojanDownloader*Win32/Cutwail.BS]
680438c58773658c1905d58c040f78d4	[VirTool*Win32/Injector.CL]
f14ca0281fdf75a0f52f52b66e6884ea
adb2144bf4609f36ac6baf5fd0a661c2	[Downloader.Small.IVW]
8a81337b6ec2ac603454237cba5ae8e4	[Cutwail-FCJX!8A81337B6EC2]
ed3e876d7a262ce652521ec12ed5cd5d	[PWS-Zbot-FAOE!ED3E876D7A26] [Backdoor.Bot] [W32.Pilleuz] [TROJ_SPNR.14C513] [Backdoor.Win32.Ruskill.rgr] [Heur.Suspicious] [BackDoor.Bulknet.846] [TR/Dldr.Cutwail.BS.76] [Mal/EncPk-AFN] [Win32.Hack.Ruskill.r.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Inject] [W32/Backdoor.GGHQ-3653] [Malware.Pilleuz!rem] [Suspicious] [Trojan.Win32.Inject] [W32/EncPk.AFN!tr] [Trj/OCJ.D]
30faa031b0c6122bc91cff8996474b4a	[HW32.CDB.E594] [Trojan.Inject2]
526d28005ca16009f4c37f6319d6bfa3	[Trojan/W32.Jorik.46592.DO] [Trojan] [Trojan/Kryptik.bfdk] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qme] [Backdoor.Pushdo!ksoXPDwu2Y4] [UnclassifiedMalware] [BackDoor.Bulknet.958] [VirTool:Win32/Obfuscator.AHU] [Backdoor/Win32.Pushdo] [Trojan.Jorik.Cutwail] [Backdoor.Win32.Pushdo] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ] [Trj/CI.A]
96ccbedfe5288728a6f380d59fa6afa3	[TrojanDownloader*Win32/Cutwail.BS]
b3a2add36f28dad15b6901eca370af87	[W32/Trojan.ROYM-5986] [TrojanDownloader.Cutwail.r4] [BackDoor.Bulknet.958] [Win32/Kryptik.BECW] [W32/KRYPTK.SMO2!tr] [Win32/Heur] [Trojan.Crypt] [Trojan.Win32.Cutwail.epf] [RDN/Downloader.a!th] [TrojanDownloader*Win32/Cutwail.BS] [TROJ_KRYPTK.SMO2] [BScope.Trojan.Pushdo]
66db43669a9cb80274d2ba6a1f44945e	[TrojanDownloader*Win32/Cutwail.BS]
37855cde21892acf5680660ae9b8668d	[Artemis!37855CDE2189] [W32.Pilleuz] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail] [Cryptic.YD]

Whois

Property	Value
NameServer	NS.CV.NET
Created	1995-08-09 00:00:00
Changed	2012-11-21 00:00:00
Expires	2015-08-08 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-06-19	69.74.231.232 (ClassC)
2020-02-23	159.180.84.14 (ClassC)
2024-04-12	104.18.36.211 (ClassC)
2024-04-30	172.64.151.45 (ClassC)
2024-08-04	104.18.14.37 (ClassC)
2024-12-30	172.64.149.189 (ClassC)
2025-01-12	104.18.38.67 (ClassC)
2026-01-21	23.227.38.74 (ClassC)

Port 443

Subdomains

Date	Domain	IP
devservices.primeline.com	2024-05-30	18.217.69.245
www.primeline.com	2024-03-24	172.64.151.45

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]