Help RSS API Feed Maltego Contact                        

Domain > tellmeimcute.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://www.trendmicro.nl/media/misc/africa-new-saf...    
https://otx.alienvault.com/pulse/56c6e16467db8c125...    

Files that talk to tellmeimcute.com

MD5A/V
2a6e7154c7f62a8109dae1b6a6a204c3[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
d2f2c9e7b5d32c5114a2f8511d9efcc2
8853f5fd8f3fd57284ad4c702fcb40a1[Win32/Zbot.G] [W32/Ramnit.C] [Virus*Win32/Ramnit.P] [W32.Ramnit-1]
a472f9d1a78fa6cb3eb6896d9c319726[TrojanDownloader.Cutwail.bs] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btelgd] [WS.Reputation.1] [BKDR_PUSHDO.FC] [Backdoor.Win32.Pushdo.qgz] [Backdoor.Pushdo!+jNmAzmKgNc] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.RMSR-3833] [Trojan.CryptHWZ] [W32/Pushdo.QGZ!tr.bdr] [Crypt.CHWZ] [Trj/Pushdo.L]
1de1e523afa41804295a043807d1641e
64d63f2465d931818539beff1ca66a34[Crypt2.AATE] [TR/Rogue.1134088]
57be65340d0a4336f525d108862ccf50
2263766e2732eb5e6eb78b5d35423883[Crypt2.BTUL] [TrojanDownloader*Win32/Cutwail.BS]
2422279645dc3f8f9201bf042122d6d5[W32.Clod317.Trojan.772f] [Backdoor/W32.Pushdo.36280.C] [Trojan.Cutwail.AQ] [Trojan.Win32.XPACK.bdjuve] [W32.Pilleuz] [Pushdo.B] [TROJ_CUTWAIL.KK] [Trojan.Wigon!3W+DBvqt2Q0] [Backdoor.Win32.A.Pushdo.36280.A] [UnclassifiedMalware] [Trojan.DownLoad3.17030] [Heuristic.BehavesLike.Win32.Suspicious-DTR.K] [Troj/FakeAV-GDI] [Backdoor/Pushdo.dr] [Win32.Hack.Pushdo.(kcloud)] [TrojanDownloader:Win32/Cutwail.BW] [Trojan/Win32.Zbot] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo] [W32/CutMail.EE!tr] [SHeur4.ATIK] [Trojan.Win32.Kryptik.aN]
34961ffc0f75d89da0b9464a4c7a02b1[Backdoor.Win32.Pushdo.qag] [BackDoor.Bulknet.893] [Win32.Heur.KVMF58.hy.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Trojan-Downloader.Win32.Cutwail]
3b54013dbac240d454b929a3745a46e4[Artemis!3B54013DBAC2] [WS.Reputation.1] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.ppt] [UnclassifiedMalware] [BackDoor.Bulknet.958] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ]
ee18d4dfd97d32e98cd76c330f023e12
b4f310f5cc7b9cd68d919d50a8415974[HW32.Laneul.zqwg] [Trojan/W32.Jorik.40448.U] [TrojanDownloader.Cutwail] [Trojan] [Trojan.Win32.Jorik.byfbdv] [W32.Pilleuz] [Win32/Cutwail.RfLHODC] [TROJ_SPNR.0BGS13] [Trojan.Win32.Jorik.Cutwail.prm] [Trojan.Cutwail!Vn3uTMMB5CM] [UnclassifiedMalware] [BackDoor.Bulknet.958] [TR/Graftor.103216] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Client-SMTP.40448.A] [Dropper/Win32.Vidro] [BScope.Trojan.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.YOY!tr] [SHeur4.BNRB] [Trj/CI.A] [TrojanDownloader*Win32/Cutwail.BS]
f14ca0281fdf75a0f52f52b66e6884ea
bf4fa138741ec4af0a0734b28142f7ae[Crypt2.BLVD] [TrojanDownloader*Win32/Cutwail.BS]
06d40abb65ee157ff2574df8d24743f1
e57d3b285148fa02129b9c0044aa8737[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
ea5a2c72517c76e822324540ec9f1f7a[TrojanDownloader.Cutwail] [Trojan/Wigon.ph] [Riskware] [Trojan.Win32.XPACK.bgffjt] [W32.Pilleuz] [TROJ_WIGON.AW] [UnclassifiedMalware] [BackDoor.Bulknet.739] [Heuristic.BehavesLike.Win32.Suspicious.D] [Troj/WIGON-A] [TrojanDownloader:Win32/Cutwail.BW] [W32/Trojan.JDWF-4093] [Dropper/Win32.Dorifel] [Malware.Pilleuz!rem] [Win32/Wigon.PH] [Trojan.SuspectCRC] [W32/Wigon.PH] [SHeur4.AZVH]
f7dd2cdcc0b90b7d7b2ff3cfb540c796[Cutwail-FBYD!F7DD2CDCC0B9] [Trojan.PPush] [Trojan.Win32.Bulknet.brrije] [TROJ_DLOAD.RC] [Trojan.Kryptik!QNluqFEr0aI] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Troj/Cutwail-AM] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan.CryptDTE] [Crypt.CDTE] [Trj/CI.A]
82d62080e472af17170f4752ebd4ebd1[W32.Pilleuz] [Pushdo.G] [Backdoor.Win32.Pushdo.pwz] [Heur.Suspicious] [BackDoor.Bulknet.847] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor.Win32.S.Pushdo.36864] [W32/Backdoor.SFNI-6924] [Malware.Pilleuz!rem] [Win32/Wigon.PH] [Trojan.Crypt] [W32/Pushdo.PWZ!tr.bdr] [SHeur4.BFXO]

Whois

PropertyValue
NameServer SELL.INTERNETTRAFFIC.COM
Created 2008-11-05 00:00:00
Changed 2015-08-08 00:00:00
Expires 2015-11-05 00:00:00
Registrar TUCOWS DOMAINS INC.

DNS Resolutions

DateIP Address
2013-07-18208.73.210.29 (ClassC)
2014-03-06176.74.176.178 (ClassC)
2014-03-06176.74.176.178 (ClassC)
2014-03-13176.74.176.167 (ClassC)
2014-03-23176.74.176.179 (ClassC)
2014-05-11208.87.35.104 (ClassC)
2014-05-23208.87.35.103 (ClassC)
2014-08-0569.172.201.208 (ClassC)
2014-09-2069.172.201.208 (ClassC)
2015-03-07176.74.176.186 (ClassC)
2018-12-0169.172.201.153 (ClassC)
2019-01-29184.168.221.104 (ClassC)
2019-12-1235.169.58.188 (ClassC)
2020-04-0234.206.12.234 (ClassC)
2020-12-3054.208.77.124 (ClassC)
2021-03-1834.102.136.180 (ClassC)
2021-03-20104.200.22.130 (ClassC)
2021-03-20104.200.23.95 (ClassC)
2022-05-0135.186.238.101 (ClassC)
2025-07-1476.223.54.146 (ClassC)
2025-08-0813.248.169.48 (ClassC)

Port 80

Subdomains

DateDomainIP
www.tellmeimcute.com2024-08-3076.223.54.146
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information