Domain > whos.amung.us

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to whos.amung.us

MD5	A/V
A1DB307AD90DEB22230C4544F35EEEAA
74D4884629ADA54D844733E61EC9E4C6
8EE6F6C07C5D58CAA4C54C9ED2E545A4
1E6389758F0409A6C8A3FDEE022B18E9
b460b4f18c35c394f6ab8151f8383d58	[Trojan.Ransom.Blocker] [WS.Reputation.1] [Trojan.Win32.Vimditator.flx] [Win32.Trojan.Vimditator.Pefg] [Trojan.PackedENT.24553] [Trojan/Win32.AutoHK] [Trojan.Win32.A.Vimditator.287423] [Trojan.Win32.Vimditator.alnl] [Win32/AHK.AT] [W32/Vimditator.FLX!tr] [Ransomer.DDK] [Win32/RootKit.Rootkit.7e5] [Trojan.Vimditator.r4] [Trojan.Win32.Vimditator.cxpwgy] [TROJ_DYNAMER.TFD613] [Trojan.Vimditator!] [UnclassifiedMalware] [TR/Dynamer.ac.906] [VIRUS_UNKNOWN] [Trojan:Win32/Dynamer!ac] [Trj/CI.A] [Trojan.Win32.Dynamer] [Trojan.Win32.AHK.bAT]
0ad376eb5c3f8ed11a6b5c9bf87a21f1	[JS/Faceliker.e] [Fbjack.J] [Mal/FBJack-I] [JS/Faceliker.A.2] [TrojanClicker:JS/Faceliker.D] [JS/FBook.NAP] [Trojan.JS.Clicker] [JS/FBJack.A!tr] [JS/Clicker]
07654c09ec07b38c56bf20e60416cdd9	[Mal/FBScam-A]
76221f1b437d58616ad1e4ae003a9dca	[Win32/DH{ADV9ATYlVxM5Dw}]
3d7538bc4198d3e25c795bf7391d2b11	[Artemis!3D7538BC4198] [Trojan.QHost.CHR] [W32/Heuristic-210!Eldorado] [Trojan.Win32.Qhost.amyp] [Trojan.VbCrypt.86] [HEUR/Crypted] [Cryp_Yodap] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Mal/MsilInj-G] [VIRUS_UNKNOWN] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.Win32.Spy] [Trojan.Win32.Qhost.aA]
674307c94bcacb5dc1e03a51e753ffd5
5CF8A92FAEBD2C7B499A5B7B036588C3
357649066E71FC2F2332B7025F1C2760
63747bac2ba4a919a586b64083aa1342	[Artemis!63747BAC2BA4] [Trojan] [Heuristic.BehavesLike.Win32.ModifiedUPX.J] [Win32.Troj.Undef.(kcloud)] [VirTool:Win32/VBInject] [Trojan/Win32.Foreign] [Trojan.Win32.Phorpiex] [W32/Injector.ZYM!tr]
5DD3CDF2F8EFE04B9BCB34A9F58D7FF5
72ad1f6ee0820db51911b51d2695208d	[Trojan.KillAv.DR] [W32/Autorun.worm.aadv] [Trojan.Ransom] [Trojan/Foreign.qot] [Trojan] [Trojan.Win32.Foreign.bbmatk] [Inject.AYLR] [WIN.Ransom.Foreign] [Trojan-Ransom.Win32.Foreign.qot] [Trojan.Foreign!2fy15KSZc3I] [Mal/KillAV-J] [TrojWare.Win32.Ransom.Foreign.QOT] [Win32.HLLW.Autoruner1.24454] [TR/Injector.mel] [Trojan/Foreign.aqf] [Trojan/Win32.Foreign] [Trojan:Win32/Killav] [Trojan.Win32.A.Foreign.109600] [Trojan/Win32.Jorik] [Hoax.Foreign] [Win32/AutoRun.VB.XW] [Trojan-Ransom.Win32.Foreign] [W32/Foreign.QOT!tr] [Trj/CI.A]
C4BCDAA68BEC3A12CCF726DC04578993
609AE8AD608359CEEEC1423A93939551
669AD128E54B318A2ADCA4CB03657E4A
9dce3747a0b7da85ef61eb35879b7a99
3641af0c637b0e86314a0bcc689024c6

Whois

Property	Value
Name	Bart Bobrowski
Organization	whos.amung.us Inc
Email	whos@amung.us
Address	139 Cranleigh Manor SE
Zip Code	T3M 1J3
City	Calgary
State	Alberta
Country	CA
Phone	+1.4036817358
NameServer	NS4.AMUNG.US
Created	2007-03-18 04:55:43
Changed	2014-06-24 22:34:33
Expires	2017-03-17 23:59:59
Registrar	GoDaddy.com, Inc.

DNS Resolutions

Date	IP Address
2014-05-16	67.202.94.93 (ClassC)
2014-05-16	67.202.94.86 (ClassC)
2014-06-28	67.202.94.94 (ClassC)
2019-06-03	67.202.114.214 (ClassC)
2020-06-10	67.202.94.93 (ClassC)
2020-10-11	67.202.94.86 (ClassC)
2020-12-30	67.202.94.94 (ClassC)
2021-02-17	67.202.114.212 (ClassC)
2022-07-10	67.202.114.216 (ClassC)
2024-09-10	172.67.8.141 (ClassC)
2024-11-10	104.22.74.171 (ClassC)
2024-12-23	104.22.75.171 (ClassC)

Port 443

HTTP/1.1 200 OKdate: Wed, 15 May 2019 01:23:03 GMTcontent-type: text/html; charsetUTF-8transfer-encoding: chunkedcontent-security-policy: upgrade-insecure-requests

!doctype html>!--if lt IE 7> html classno-js ie6 oldie langen-US> !endif-->!--if IE 7>    html classno-js ie7 oldie langen-US> !endif-->!--if IE 8>    html classno-js ie8 oldie langen-US> !endif-->!--if gt IE 8>!--> html classno-js langen-US> !--!endif-->head>    !-- Title -->    title>whos.amung.us - real-time stats!/title>    meta nameKeywords contentwhos.amung.us, widget, widgets, web2.0, analytics, stats, statistics, hit counter, tracker, heatmap, maps, visitors, insights />    meta nameDescription contentFree real-time stats for your website or blog! No account setup required. Customize your widget today and get started! />    meta nameverify-v1 contentVz0KEiemJaLox5Bc+gJiGG6GUrGSeTzZqUeoElUowjM />    !-- Meta Tags -->meta http-equivContent-Type contenttext/html; charsetUTF-8 />!-- Mobile Specifics -->meta nameviewport contentwidthdevice-width, initial-scale1.0, maximum-scale1.0, user-scalableno>meta nametheme-color content#d73f3e />!-- Favicon -->link relicon typeimage/png href//assets.amung.us/img/favicon.png />!--if lt IE 9>script srchttp://html5shiv.googlecode.com/svn/trunk/html5.js>/script>!endif-->!-- Font Default -->link typetext/css relstylesheet href//fonts.googleapis.com/css?familyOpen+Sans:400,300,600,700 data-noprefix />link typetext/css relstylesheet href//fonts.googleapis.com/css?familyFira+Sans:400,700&subsetlatin-ext data-noprefix />link typetext/css relstylesheet href//fonts.googleapis.com/css?familySignika:400,700&subsetlatin-ext data-noprefix />link typetext/css relstylesheet href//fonts.googleapis.com/css?familyLato:400,700 data-noprefix />link relstylesheet href//pro.fontawesome.com/releases/v5.5.0/css/all.css integritysha384-j8y0ITrvFafF4EkV1mPW0BKm6dp3c+J9Fky22Man50Ofxo2wNe5pT1oZejDH9/Dt crossoriginanonymous />link typetext/css relstylesheet href//cdnjs.cloudflare.com/ajax/libs/twitter-bootstrap/3.3.7/css/bootstrap.min.css />link typetext/css relstylesheet href//cdnjs.cloudflare.com/ajax/libs/fancybox/3.2.5/jquery.fancybox.min.css />link typetext/css relstylesheet href//cdnjs.cloudflar

Subdomains

Date	Domain	IP
www.whos.amung.us	2015-01-13	67.202.94.86

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]