Help RSS API Feed Maltego Contact                        

Domain > googletagmanager.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports
http://blogs.cisco.com/security/dnschanger-outbrea...    
https://otx.alienvault.com/pulse/56bbe5e967db8c71b...    

Files that talk to googletagmanager.com
MD5A/V
843e61d945ba7d6b959e63e519b14493[TROJ_FAKEAV.BMC] [AdWare.iBryte] [Adware/IBryte] [Downloader.NSIS]
2acd6bc89101526060286f7ec89bac65
a3bf935fbc2486af6f73f27f39ba5ac9
cdb473292c17161bcc52d79b886aeaf8
06149a9ff4e2ec20a2a7627a7489d001[PUP.Optional.OptimumInstaller.A] [Trojan.Packed!eWEj06YGDpo] [Trojan.Win32.Badur.hukn] [Trojan.Win32.Badur.cxpjye] [Application.Win32.iBryte.WRP] [Trojan.Packed.26508] [Win32.Adware.Ibryte.I] [PE:Malware.iBryte!6.192B] [Riskware/IBryte] [Win32/Trojan.5a2]
da1352d0e2662dc41b30a305e157e257[Trojan.Pws.Pdpinch.NQ] [Artemis!DA1352D0E266] [Password-Stealer] [Trojan] [Trojan.Win32.LdPinch.fmye] [W32/Pws.TXO] [Infostealer.Ldpinch] [Trojan.LdPinch-19] [Trojan.PWS.PdPinch!d/N4sqxEc2E] [TrojWare.Win32.PSW.LdPinch.~KW] [Trojan.PWS.LDPinch.1680] [TR/PSW.LdPinch.UH.1] [Trojan/PSW.PdPinch.gs] [Trojan/Win32.LdPinch] [BScope.Trojan-Spy.Zbot] [Trojan-PSW.Ldpinch] [Trojan-PWS.Win32.LdPinch] [W32/Dropper.KSY!tr]
725e0a2dc10e90cf0d5fbc2e9cf0f647[W32.HfsIframe.A591]
acb81f39198ace16a700f9f8e6e9b252
1194c9a680b101da281975c9bbdb1166[Packed.Win32.TDSS.2!O] [PUP.Optional.OptimumInstaller.A] [Trojan.Win32.Badur.cxnrwx] [PE:Malware.iBryte!6.192B] [Application.Win32.IBryte.Z] [Trojan.Packed.26508] [Artemis!1194C9A680B1] [Win32.Adware.Ibryte.I] [Riskware/IBryte] [AdPlugin.JE]
c817f7c5223a3e63c6b2e380e6e6eb86
bea68c9f5540c71530a0a7743f4cfddc
50bbdbffdf28ff0b406407f702906e0f[Packed.Win32.TDSS.2!O] [Artemis!50BBDBFFDF28] [PUP.Optional.OptimumInstaller.A] [PUA.Downloader!] [Application.Win32.IBryte.X] [Trojan.Packed.26508] [Adware/iBryte.Z] [Win32.Application.PremiumInstaller.C] [AdPlugin.GC] [Win32/Virus.Downloader.dbe]
949ebe7c4bd76e7a8d9e5b19902c2e45
48a058e3f4fd7adef124ef7c2147bd26[Packed.Win32.TDSS.2!O] [PUP.Optional.OptimumInstaller.A] [Trojan.Win32.Badur.cxnsau] [Trojan.Badur!] [Application.Win32.IBryte.Z] [Adware/iBryte.rfa.13] [AdWare.AdPlugin] [Riskware/IBryte] [AdPlugin.IY] [Win32/Trojan.e6d]
352320dd88b6013c476d4c5d81948849[Packed.Win32.TDSS.2!O] [PUP.Optional.OptimumInstaller.A] [Trojan.Win32.Zusy.cylohe] [not-a-virus:AdWare.Win32.iBryte.jgi] [PE:Malware.iBryte!6.197B] [Win32.Troj.iBryte.j.(kcloud)]
27060dfdceaa43eefbc30dc09b97ba49[PUP.Optional.Ibryte] [Riskware/IBryte]
5afa4016c7ac891f045596e472b49ba2
16ee19a6ef565ef07460b09e6d8e937b[W32.HfsIframe.A102]
0d0cad0e3d9a8d6d707c1042eee40186
fda3d3542859f1485ff76ba19a7be000

Whois
PropertyValue
Email dns-admin@google.com
NameServer NS2.GOOGLE.COM
Created 2011-11-11 00:00:00
Changed 2014-10-11 00:00:00
Expires 2015-11-11 00:00:00
Registrar MARKMONITOR INC.

DNS Resolutions
DateIP Address
2013-04-04173.194.40.30 (ClassC)
2013-04-10173.194.35.190 (ClassC)
2013-07-11173.194.44.30 (ClassC)
2014-05-03173.194.46.126 (ClassC)
2014-06-23173.194.116.190 (ClassC)
2014-06-25173.194.40.222 (ClassC)
2014-10-0174.125.230.126 (ClassC)
2014-10-16173.194.34.30 (ClassC)
2014-10-27173.194.115.104 (ClassC)
2014-10-31173.194.39.30 (ClassC)
2014-11-06173.194.115.158 (ClassC)
2014-12-04216.58.216.200 (ClassC)
2014-12-04216.58.216.232 (ClassC)
2014-12-06216.58.216.104 (ClassC)
2014-12-22216.58.216.72 (ClassC)
2015-11-16209.85.146.97 (ClassC)
2017-09-0866.102.1.97 (ClassC)
2018-07-10216.58.212.168 (ClassC)
2018-09-13108.177.122.97 (ClassC)
2018-09-15108.177.15.97 (ClassC)
2018-10-10172.217.22.40 (ClassC)
2018-10-25172.217.16.200 (ClassC)
2019-07-05209.85.145.97 (ClassC)
2019-07-15172.217.22.8 (ClassC)
2019-07-21172.217.18.8 (ClassC)
2019-09-20216.58.206.104 (ClassC)
2019-09-22216.58.206.136 (ClassC)
2019-09-29172.217.212.97 (ClassC)
2019-09-29173.194.194.97 (ClassC)
2020-07-03142.250.1.97 (ClassC)
2021-03-30142.250.73.200 (ClassC)
2021-08-24142.250.188.232 (ClassC)
2024-05-15142.250.217.72 (ClassC)
2024-09-17172.217.14.200 (ClassC)
2024-10-24142.251.33.104 (ClassC)
2024-12-01142.251.215.232 (ClassC)
2024-12-20142.250.217.104 (ClassC)
2024-12-27142.251.33.72 (ClassC)
2025-01-03172.217.14.232 (ClassC)
2025-01-12142.250.69.200 (ClassC)
2025-01-16142.251.211.232 (ClassC)

Port 80

Port 443

Subdomains
DateDomainIP
dns1.googletagmanager.com2023-08-31142.250.217.104
de.googletagmanager.com2023-08-31142.251.33.104
remote.googletagmanager.com2023-12-23142.250.69.200
consul.googletagmanager.com2023-11-24142.250.217.72
ip.googletagmanager.com2023-11-24142.251.33.104
kubernetes.googletagmanager.com2024-05-14142.251.33.72
forums.googletagmanager.com2024-05-14142.250.217.104
subaru.googletagmanager.com2024-05-14142.250.217.72
www.googletagmanager.com2014-12-07216.58.216.104
test.www.googletagmanager.com2023-10-18142.250.69.200
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information