Domain > zeitgeistfilms.com

More information on this domain is in AlienVault OTX

Files that talk to zeitgeistfilms.com

MD5	A/V
3ac0df25ff3cd15c4a55069d1a140c0d	[Artemis!3AC0DF25FF3C] [WS.Reputation.1] [Backdoor.Win32.Pushdo.rgg] [W32/Etap.B] [Backdoor.Win32.Pushdo.Anx]
901fd56bd89d217effeca7e998d48b8f	[BC.Heuristic.Trojan.SusPacked.BF-6.A] [Mal/EncPk-ZC] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [TrojanDownloader.Upatre.A6] [Downloader-FVD!901FD56BD89D] [Trojan.Downloader] [Trojan.DL.Small!WegiOz7B/54] [W32/Trojan3.GJV] [Trojan.Zbot] [Upatre.X] [TROJ_UPATRE.BU] [Trojan.Win32.DownLoad3.cmcabg] [TrojWare.Win32.Spy.Zbot.ADCX] [TR/Yarwi.B.15] [TrojanDownloader:Win32/Upatre.A] [W32/Trojan.SXFM-2396] [Win32/TrojanDownloader.Small.AAB] [PE:Malware.FakePDF@CV!1.9C28] [Trojan.Injector] [Zbot.DFA] [Trojan.DownLoad3.28]
d3c457d16cb688d2425937a01fd884bc	[W32.CarigatA.Trojan] [Trojan] [WS.Reputation.1] [Upatre.X] [Mal/EncPk-ZC] [BackDoor.Bulknet.1150] [TR/Crypt.EPACK.67831] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trj/dtcontx.I] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Wigon.PH]
ea6b412d37c6c3abc5b5b59b421cddcb	[Downloader-FVO!EA6B412D37C6] [Trojan.Downloader] [TR/Yarwi.B.19] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC]
58d7917e004d65a1294bc93814a7cee0
dc5bf6ef8c028322aea1190c55e297a7	[Artemis!DC5BF6EF8C02] [WS.Reputation.1] [TrojanDownloader:Win32/Cutwail] [W32/Etap.B]
23ad6fc6ddb25a0974b90d9ec2df7757	[W32.Clod252.Trojan.98ee] [TrojanDownloader.Cutwail] [PWSZbot-FLN!23AD6FC6DDB2] [Trojan.Zbot] [Trojan.Win32.Pushdo.cqvcjs] [WS.Reputation.1] [Kryptik.CDBA] [TROJ_MOSERAN.BMC] [Backdoor.Win32.Pushdo.rhv] [Backdoor.Pushdo!L+OZLlbJVJk] [UnclassifiedMalware] [BackDoor.Bulknet.1299] [TR/Cutwail.A.26] [Backdoor/Pushdo.aku] [Win32.Hack.Pushdo.r.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Spyware/Win32.Zbot] [Backdoor.Pushdo] [PE:Trojan.Crypto!1.9E0F] [Trojan-PWS.Win32.Zbot] [W32/Pushdo.BQRL!tr.bdr] [Crypt2.CBRR] [Trojan.Win32.Downloader.77]
a9c1f2fc7c1ddcb7df383f20bb86d21a	[PWSZbot-FLN!A9C1F2FC7C1D] [Spyware.Zbot]
fc9022196b76c128b67b26241d1381c5	[Artemis!FC9022196B76] [WS.Reputation.1] [Troj/Wonton-B] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PI] [W32/Pushdo.PI!tr.bdr]
6e4a491cc4f1852dadea00ea2f9e6afe
74858de9e74d3713d2edec5444d50759	[Spyware/Win32.Zbot] [Trojan-Downloader.Win32.Cutwail] [Artemis!74858DE9E74D] [WS.Reputation.1] [Backdoor.Win32.Pushdo.rhl] [BackDoor.Bulknet.1299]
3b699a22a8a3706c9521e63f9f598b00	[Artemis!3B699A22A8A3] [Spyware.Password] [W32/Trojan3.GNX] [Trojan.Zbot] [Trojan.Win32.Bublik.blek] [Troj/Bredo-AKQ] [Trojan:W32/Zbot.BBJA] [Trojan.DownLoad3.30673] [Trojan/Win32.Zbot] [W32/Trojan.DSBO-4512] [Win32/TrojanDownloader.Waski.A] [Trojan.Injector] [Luhe.Fiha.A]
1f4a9c320bcb4bd65d07317f3adf6b9a	[PWSZbot-FIT!1F4A9C320BCB] [Backdoor.Win32.Pushdo.reb] [Artemis!1F4A9C320BCB]
b0dbfd7e359d4830d7ff4a5f40a78204	[Trojan.Dropper] [Mal/EncPk-ZC] [Heuristic.LooksLike.Win32.Suspicious.J!81] [W32/Small.BS!tr.dldr]
501c50111f177772007efa977b9869d4
4d8d5d96caa717c92fea5ac2b1d6ae23	[W32.Clod42c.Trojan.2b7a] [Artemis!4D8D5D96CAA7] [BackDoor.Bulknet.1150] [TR/Wigon.PI] [Win32/Wigon.PI] [Backdoor.Win32.Pushdo] [W32/Pushdo.PI!tr.bdr] [Backdoor.Win32.Pushdo.aa]
53d4d47a41371119af5c54a5d3bbb9c9	[RDN/PWS-Zbot.apr!e] [Trojan-Spy.Win32.Zbot.qrbd] [Troj/Zbot-GWU] [TR/Crypt.ZPACK.22722] [Heuristic.BehavesLike.Win32.Suspicious.H] [Win32.Troj.Zbot.qr.(kcloud)] [Trojan/Win32.Zbot] [Win32/Spy.Zbot.AAU] [Trojan.Win32.Weelsof] [W32/Zbot.QRBD!tr]
3d75e483f9fad44d9cae483628652a8e	[Trojan-PSW.Win32.Fareit.amim] [Heuristic.LooksLike.Win32.Suspicious.J!81] [Mal/EncPk-ZC]

Whois

Property	Value
NameServer	NS2.RACKSPACE.COM
Created	1999-04-10 00:00:00
Changed	2011-03-10 00:00:00
Expires	2020-04-10 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2013-11-26	72.32.144.64 (ClassC)
2015-01-08	184.106.229.112 (ClassC)
2015-05-20	-
2023-08-27	104.21.83.157 (ClassC)
2025-01-11	3.221.195.208 (ClassC)

HTTP/1.1 200 OKDate: Sun, 27 Aug 2023 14:38:52 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveexpires: Thu, 19 Nov 1981 08:52:00 GMTCache-Control: no-store, no

!DOCTYPE html>html langen>head>	meta charsetUTF-8>	meta nameviewport contentwidthdevice-width, initial-scale1>	meta namekeywords content />meta namedescription content />meta nameplatform contentLOGIC Business Cloud by Cyber-NY https://cyber-ny.com />title>Home :: Zeitgeist Films/title>	link href/assets/styles/main-7c87d37d0e.css relstylesheet mediaall>	link relpreload asfont href/assets/fonts/fa-brands-400.woff2 typefont/woff2 crossoriginanonymous>	link relpreload asfont href/assets/fonts/fa-light-300.woff2 typefont/woff2 crossoriginanonymous>	link relpreload asfont href/assets/fonts/fa-regular-400.woff2 typefont/woff2 crossoriginanonymous>	link relpreload asfont href/assets/fonts/fa-solid-900.woff2 typefont/woff2 crossoriginanonymous>	link relpreload asfont href/assets/fonts/fa-duotone-900.woff2 typefont/woff2 crossoriginanonymous>	link relpreconnect hrefhttps://fonts.gstatic.com/ crossorigin>	script src/assets/scripts/jquery-2752686044.js>/script>    	script defer src/assets/scripts/main-02b1fb54e4.js>/script>    			link relicon typeimage/png href/userFiles/uploads/branding/favicon.png>        	meta nametwitter:card contentsummary_large_image />			meta nametwitter:site contentZeitgeistfilms />		link href/index/css/?v1693147132 mediascreen relstylesheet typetext/css />script typetext/javascript deferdefer srchttps://www.google.com/recaptcha/api.js>/script>    			link href/custom_assets/styles/main-bcb0073cc9.css relstylesheet mediaall>		script defer src/custom_assets/scripts/main-0731a1d938.js>/script>		!-- Facebook Pixel Code -->script>!function(f,b,e,v,n,t,s){if(f.fbq)return;nf.fbqfunction(){n.callMethod?n.callMethod.apply(n,arguments):n.queue.push(arguments)};if(!f._fbq)f._fbqn;n.pushn;n.loaded!0;n.version2.0;n.queue;tb.createElement(e);t.async!0;t.srcv;sb.getElementsByTagName(e)0;s.parentNode.insertBefore(t,s)}(window,document,script,https://connect.facebook.net/en_US/fbevents.js);fbq(init, 617609045110679); // Insert your pixel ID here.fbq(track, PageView);/script>noscript>img height1 width1 styledisplay:n

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > zeitgeistfilms.com

Is this malicious?

Files that talk to zeitgeistfilms.com

Whois

DNS Resolutions

Port 80

Port 443