Domain > users5.titanichost.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to users5.titanichost.com

MD5	A/V
b6169f8be82a90dc1b82f3bcdf89ea05	[Win32.Worm.VB.NWW] [Worm.VB.HA2] [Artemis!B6169F8BE82A] [Trojan.Win32.VB.kzkk] [Suspicious.Cloud.5] [VBTroj.dam] [BC.Heuristic.Trojan.SusPacked.BF-6.C] [Worm.Win32.A.VB.267264] [Worm.Win32.Autorun.JP0] [Possible_Otorun8] [Mal/Veneb-A] [Worm/VB.taa] [Worm/Win32.VB] [Worm:Win32/VB.HA] [Trojan.Dropper/UserInit-Fake] [Trojan/Win32.Cosmu] [SScope.Trojan.VBO.0292] [W32/VB.AEN] [PE:Worm.VobfusEx!1.99E4] [Worm.Win32.VB] [W32/VB.AKU!worm] [Worm/AutoRun.EY]
7c30e274997018f1650806f7dcdc9391	[Win32.Worm.VB.NWW] [Trojan.Win32.VB.kzkk] [W32/VBTrojan.17E!Maximus] [VBTroj.dam] [BC.Heuristic.Trojan.SusPacked.BF-6.B] [Worm.Win32.A.VB.267264] [Win32.HLLW.Autoruner.2921] [Mal/Behav-109] [Worm/VB.taa] [Worm/Win32.VB] [Worm:Win32/VB.HA] [Trojan.Dropper/UserInit-Fake] [Trojan/Win32.Cosmu] [SScope.Trojan.VBO.0292] [PE:Worm.VobfusEx!1.99E4] [Worm.Win32.VB] [W32/VB.AKU!worm] [Worm/AutoRun.EY] [W32/VB.AEN]
db2aed9c81f7124cf3132496b915b814	[W32.Clodbb4.Trojan.97c2] [W32/Downldr2.EHIH] [Backdoor.Trojan] [Mal_Banld-5] [Trojan.Downloader-55989] [TrojWare.Win32.Downloader.Banload.ass] [Trojan.DownLoad1.31590] [Mal_Banld-5] [W32/Downloader.OOTV-5146] [TrojanDownloader:Win32/VB.DE] [Trojan.Win32.Downloader.208896.L] [Trojan-Downloader.Win32.Banload] [W32/VB.ZIL!tr.dldr] [Win32/DH{gQolV2JO}] [Trojan.Win32.Downloader.Azbl] [Win32/Trojan.Downloader.766]
20bfc174e111b708ceef9d93a242d5c0	[W32.Clod24b.Trojan.7114] [W32/Downldr2.ERIC] [Downloader] [Mal_Banld-5] [Trojan.Downloader-57201] [Trojan.Win32.Downloader.208896.L] [TrojWare.Win32.Downloader.Banload.ass] [Trojan.DownLoad1.31590] [Mal_Banld-5] [W32/Downloader.HTII-4203] [TrojanDownloader:Win32/VB.DE] [Trojan-Downloader.Win32.Banload] [W32/VB.ZIL!tr.dldr] [Win32/DH{gQolV2JO}] [Trojan.Win32.Downloader.AePy]

Whois

Property	Value
Email	AHMAD_OMARI@HOTMAIL.COM
NameServer	DNS2.NAME-SERVICES.COM
Created	2007-02-05 00:00:00
Changed	2016-01-07 00:00:00
Expires	2017-02-05 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2013-09-14	67.208.91.102 (ClassC)
2024-12-21	15.197.204.56 (ClassC)
2025-01-23	3.33.243.145 (ClassC)
2025-04-29	3.19.116.195 (ClassC)
2025-05-03	52.86.6.113 (ClassC)
2025-05-16	18.119.154.66 (ClassC)
2025-08-06	13.216.111.180 (ClassC)
2025-12-12	13.223.25.84 (ClassC)
2026-02-07	54.243.117.197 (ClassC)

Port 80

Subdomains

Date	Domain	IP
users1.titanichost.com	2013-04-08	67.208.91.102
users2.titanichost.com	2013-07-02	67.208.91.102
ftp3.titanichost.com	2013-05-11	67.208.91.102
users3.titanichost.com	2013-07-26	67.208.91.102
users5.titanichost.com	2014-02-22	67.208.91.102
www.titanichost.com	2024-11-24	15.197.204.56

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]