Domain > a.aiphon1egalaxyblack42.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to a.aiphon1egalaxyblack42.com

MD5	A/V
516803d94494395597cb77e011bf23a3	[W32.YanvdiaF.Trojan] [Worm.Dorkbot.rw5] [RDN/Sdbot.worm!ca] [Trojan.Ransom.ED] [Worm.Ngrbot.Win32.5252] [Trojan.Win32.Yakes.cyxqxn] [W32/Trojan2.OEAQ] [Dorkbot.PWZ] [Win32/Dorkbot.ZY] [TROJ_SPNR.03F514] [Worm.Win32.Ngrbot.aech] [Trojan.Injector!TGXJ10sCVsk] [Mal/Ransom-CR] [UnclassifiedMalware] [Trojan.Packed.27656] [Worm.Win32.Dorkbot] [TR/Crypt.Xpack.66319] [Worm/Win32.Ngrbot] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Injector] [W32/Trojan.IVSL-9030] [Trj/WLT.A] [Win32/Dorkbot.B] [Win32.Worm.Ngrbot.Stki] [Trojan.Inject2] [W32/Dorkbot.B!worm] [Inject2.AEWB] [Worm.Win32.Ngrbot.ahif]
7a7be559b8553e7ad3a5517986600bb2	[Trojan.Ransom.ED]
cf72933a93360dac00d06f6a69e750d5	[W32.EspetradosLTK.Trojan] [Worm.Dorkbot.r4] [RDN/Sdbot.worm!bz] [Worm.Ngrbot!W9kfVlryEOY] [W32.IRCBot.NG] [DLoader.ATMCK] [Win32/Dorkbot.PacXXH] [WORM_DORKBOT.XYW] [Worm.Win32.Ngrbot.adim] [BackDoor.IRC.NgrBot.449] [TR/Dropper.A.15603] [Mal/Inject-EQ] [Worm/Win32.Ngrbot] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Ransomlock] [SScope.Malware-Cryptor.8414] [W32/Ngrbot.ADIM!worm] [Crypt3.JIS] [Worm.Win32.Ngrbot.40] [Artemis!CF72933A9336] [Trojan.SuspectCRC] [Trojan.Win32.Kryptik.BZTK]
e4c0c2b1ce580863bed8af5689269c57	[Worm.Gamarue.I5] [RDN/Sdbot.worm!ca] [Trojan.Ransom.ED] [Trojan.Win32.Ngrbot.cyutur] [W32/Trojan2.OESQ] [W32.IRCBot.NG] [Win32/Dorkbot.AAO] [TROJ_SPNR.0BF514] [Worm.Win32.Ngrbot.aedn] [Worm.Ngrbot!yXxoSw5ijws] [UnclassifiedMalware] [BackDoor.IRC.NgrBot.42] [TR/Crypt.Xpack.66565] [Mal/Ransom-CR] [Worm/Win32.Ngrbot] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Ransomlock] [W32/Trojan.BGJV-3267] [BScope.Malware-Cryptor.Ngrbot] [Trj/WLT.A] [Win32/Dorkbot.B] [Win32.Worm.Ngrbot.Alie] [Trojan.Crypt] [W32/Yakes.EPAP!tr] [BackDoor.SmallX.BKN] [Worm.Win32.Ngrbot.aa] [Win32/Trojan.5a4]
94453c17d5cfd3a85bec2d7138fcf131	[Worm.Ngrbot.r4] [Trojan.Inject] [Worm.Win32.Dorkbot] [Trojan.Win32.Yakes.dboitf] [WS.Reputation.1] [Worm.Win32.Ngrbot.afjz] [BackDoor.IRC.NgrBot.449] [TR/Crypt.Xpack.73170] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Injector] [BScope.Malware-Cryptor.Ngrbot] [Trj/CI.A] [Win32/Dorkbot.B] [Win32.Worm.Ngrbot.Hron] [W32/Ngrbot.AFJZ!worm] [Inject2.ALMV] [Worm.Win32.Dorkbot.bB]
b522f531beca11ee077b8d5f65086956	[Worm.Dorkbot] [PWS-Zbot-FBDR!B522F531BECA] [W32.IRCBot.NG] [TROJ_SPNR.03BN14] [Worm.Win32.Ngrbot.aacx] [Worm.Ngrbot!tmF2+pgxsFI] [BackDoor.IRC.NgrBot.449] [Worm.Win32.Dorkbot] [TR/Crypt.ZPACK.51984] [Worm/Win32.Ngrbot] [Worm.Ngrbot.aa.(kcloud)] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Zbot] [Trj/CI.A] [Win32/Dorkbot.B] [PE:Malware.XPACK-LNR/Heur!1.5594] [W32/Ngrbot.AACX!worm] [Worm.Win32.Ngrbot.aK]
1982315b35a1f91e47330a8c606fa801	[Trojan.Dorkbot.IE] [Worm.Dorkbot.Q4] [Trojan.Win32.Ruskill.cviboa] [W32/Heuristic-KPP!Eldorado] [Backdoor.Trojan] [Malware] [Backdoor.Win32.Ruskill.hlc] [Backdoor.Ruskill!3NbPQSEfnLk] [UnclassifiedMalware] [BackDoor.IRC.NgrBot.449] [Backdoor.Ruskill.Win32.2918] [BehavesLike.Win32.Dropper.ch] [W32/SecRisk-ProcessPatcher-base] [Heur:Trojan/HackTool] [Worm/Win32.Ngrbot] [Win32.Hack.Undef.(kcloud)] [Worm:Win32/Dorkbot.I] [Worm.Win32.Ngrbot.159744.B[h]] [Backdoor/Win32.Ruskill] [Virus.Win32.Heur.c] [Win32/Dorkbot.B] [Win32.Backdoor.Ruskill.Dzkc] [Worm.Win32.Dorkbot] [W32/DorkBot.FA!tr] [Win32/DH{O1BPgRMVURsDgRIPE355VIEVgQeBCRxTZB6BDhRzdQ}] [Backdoor.Win32.Ruskill.aMA]
98d1f043810c21927b9854bd2298885c	[W32.CreautLTAAAS.Trojan] [Trojan.Dyname.r4] [RDN/Sdbot.worm!ca] [Trojan.Ransom.ED] [Worm.Ngrbot!+yTuCcAj9ko] [W32.IRCBot.NG] [TROJ_DYNAMER.TAJ] [Worm.Win32.Ngrbot.aeez] [Trojan.Win32.Androm.cykrsj] [UnclassifiedMalware] [TR/Crypt.Xpack.66969] [Mal/EncPk-AKA] [Worm/Win32.Ngrbot] [Worm.Ngrbot.ae.(kcloud)] [Trojan:Win32/Dynamer!ac] [W32/Trojan.UXND-7859] [Dropper/Win32.Necurs] [Worm.Ngrbot] [Trj/CI.A] [Win32/Dorkbot.B] [Win32.Worm.Ngrbot.Hwmj] [Trojan-Downloader.Win32.Crypterr] [W32/Ngrbot.AEEZ!worm] [Inject2.AGJW] [Worm.Win32.Ngrbot.77] [Win32/Worm.BO.0d3]
7ded57ed69446abe75347d95643223d8	[Artemis!7DED57ED6944] [WS.Reputation.1] [Worm.Win32.Ngrbot.afvt] [Win32.Worm.Ngrbot.Amwr] [Troj/Wonton-ES] [BackDoor.IRC.NgrBot.42] [Trojan.Win32.Injector.bBHTP] [Win32.Cryptor] [W32/Yakes.FHJN!tr] [Win32/Cryptor]
e6262e97fc290a95e88fba9e5eff4768	[W32.ShinhanoL.Trojan] [Trojan.CeeInject.r5] [Dowloader-FEX] [Trojan.Zbot.FA] [Trojan.Inject.Win32.68578] [Trojan.Zbot] [Win32/CInject.RYbTIY] [WORM_DORKBOT.AEY] [Trojan-Spy.Win32.Zbot.rkzd] [Trojan.Win32.Napolar.csukhz] [TrojWare.Win32.Injector.AWLZ] [Trojan.Packed.25528] [TR/Ransom.clbh] [Downloader-FEX!E6262E97FC29] [TrojanSpy.Zbot.gwex] [Trojan/Win32.Inject] [VirTool:Win32/CeeInject] [Spyware/Win32.Zbot] [W32/Trojan.MJBN-5085] [Backdoor.Napolar] [Trj/dtcontx.J] [Win32/Dorkbot.B] [PE:Trojan.Injector!1.9F7C] [Virus.Win32.CeeInject] [W32/Zbot.AAU!tr] [Trojan.Win32.Zbot.aHW] [Win32/Trojan.Multi.daf] [Worm.Win32.Ngrbot.ysl] [TR/Dorkbot.208896.102] [Malware/W]
2b24d4feab612200b0c800f67c132eba	[Trojan.Ransom.ED]
cc7d6afadb486754e5346f1e686998fa	[Win32.Malware!Drop] [Worm.Ngrbot!bBj+2Lufz0A] [Worm.Win32.Ngrbot.afkj] [Troj/Wonton-ED] [BackDoor.IRC.NgrBot.42] [TR/Crypt.Xpack.73390] [Artemis!CC7D6AFADB48] [Worm:Win32/Dorkbot.I] [Dropper/Win32.Necurs] [BScope.Malware-Cryptor.Ngrbot] [Trj/CI.A] [Win32/Dorkbot.B] [Win32.Worm.Ngrbot.Taoz] [Trojan.Win32.Injector] [W32/Injector.BGNW!tr] [Inject2.ALNM] [Worm.Win32.Ngrbot.apdc] [HW32.Laneul.qgwe]
cd032090d134dde8df9eaff755b53954	[W32.OnuquikLTAAAAG.Trojan] [Worm.Dorkbot.I4] [Dowloader-FEX] [Trojan.Inject.ED] [Trojan.Win32.FrauDrop.csykgi] [W32/Trojan5.JNL] [Trojan.Zbot] [Win32/Dorkbot.ZI] [TROJ_SPNV.01B214] [Worm.Win32.Ngrbot.yzb] [Worm.Ngrbot!IarE9DQ3FuY] [Mal/Zbot-OA] [TrojWare.Win32.Injector.AWXU] [Trojan.DownLoader9.21632] [TR/Crypt.Xpack.54738] [Downloader-FEX!CD032090D134] [TrojanSpy.Zbot.gyko] [Worm/Win32.Ngrbot] [Worm.Ngrbot.y.(kcloud)] [Worm:Win32/Dorkbot.I] [W32/Trojan.HPTR-9033] [TrojanSpy.Zbot] [Worm.Win32.Ngrbot.AjqZ] [Win32/Dorkbot.B] [PE:Trojan.Injector!1.9F7C] [Trojan.Backdoor.SmallX] [W32/Ngrbot.YZB!worm] [BackDoor.SmallX.BGU] [Trj/WLT.A]
fa92dae6f14f9b9db1d263222fc65dff	[Artemis!FA92DAE6F14F] [Trojan.Ransom.ED] [WS.Reputation.1] [Obfuscated_J.PZQ] [Worm.Win32.Ngrbot.acih] [TR/Crypt.Xpack.62628] [Worm.Win32.Ngrbot.77] [Inject2.WZS]
6ae98f19b1879045ca76bf873ab7c060	[W32.VariantBlackE.Trojan] [W32/Worm-FTN!Gamarue] [Worm.Ngrbot.Win32.4965] [WS.Reputation.1] [TROJ_KRYPTIK.SMC1] [Troj/Wonton-BP] [UnclassifiedMalware] [BackDoor.IRC.NgrBot.42] [Worm.Win32.Dorkbot] [Worm/Win32.Ngrbot] [Win32.Troj.Undef.(kcloud)] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Injector] [Worm.Ngrbot] [Virus.Win32.Virut.uc] [Trojan.Inject2] [W32/Virut.CE] [Inject2.YPS] [Trj/Zbot.M]
33f41d6483cb9c3f9718ecd0384335e9	[Trojan.Inject] [Worm.Win32.Dorkbot] [Trojan.Win32.Yakes.dboitf] [WS.Reputation.1] [Win32/Dorkbot.NJLIMSD] [Worm.Win32.Ngrbot.afkc] [Worm.Ngrbot!P4LKt+v/JKI] [Trojan.Win32.S.Inject.262656.J] [BackDoor.IRC.NgrBot.449] [Worm/Ngrbot.afkc11] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Injector] [BScope.Malware-Cryptor.Ngrbot] [Trj/CI.A] [Win32/Injector.BGMZ] [Win32.Backdoor.Delself.Xopp] [Worm.Win32.Ngrbot] [W32/Ngrbot.AFKC!worm] [Inject2.ALPM] [Trojan.Win32.Injector.bBGMZ]
af21369eceab7ad3c0b29757fd7267d4
75267cda55b6cefabb4dd869a20a53ec	[Trojan.Ransom.ED] [Worm.Win32.Dorkbot] [Trojan.Win32.Ngrbot.dbmimh] [Win32/Dorkbot.eANMAID] [Worm.Win32.Ngrbot.afix] [Worm.Ngrbot!w2QqAcnpIjY] [Win32.Worm.Ngrbot.Afhm] [Worm.Win32.Dorkbot.~B] [BackDoor.IRC.NgrBot.487] [TR/Crypt.Xpack.71560] [TROJ_KRYPTRES.SM] [Trojan[Backdoor]/Win32.Azbreg] [Worm.Ngrbot.af.(kcloud)] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Lethic] [BScope.Malware-Cryptor.Ngrbot] [Trj/CI.A] [Win32/Dorkbot.B] [W32/Ngrbot.AFIX!worm] [Inject2.ALFQ] [Worm.Win32.Ngrbot.77] [Win32/Trojan.Multi.daf]
8f10dfef8256dde22f28e746927c6b2d	[BackDoor.IRC.NgrBot.449] [TR/Crypt.Xpack.73597]
0ffd6f120860e603ba1f928f77473d31	[W32.FakjusteLTAAAE.Trojan] [PWS-Zbot-FBDR!0FFD6F120860] [Trojan.Ransom.BI] [Trojan.Win32.Ngrbot.ctnbkr] [Simda.TGY] [Worm.Ngrbot!HFG5+0A1XN0] [PE:Malware.XPACK-LNR/Heur!1.5594] [TrojWare.Win32.Spy.Zbot.RMMA] [BackDoor.IRC.NgrBot.449] [Trojan.Kryptik.Win32.520434] [TR/Crypt.ZPACK.71983] [Heuristic.LooksLike.Win32.Suspicious.F] [Win32.Troj.Undef.(kcloud)] [Trojan/Win32.Zbot] [SScope.Worm.Dorkbot.2113] [Trj/dtcontx.K] [W32/Simda.AGEZ!tr] [Win32/Trojan.cec]

Whois

Property	Value
Email	liuqibu_585@msn.com
NameServer	NS2.2FREEHOSTING.COM
Created	2015-02-13 00:00:00
Changed	2015-04-20 00:00:00
Expires	2016-02-13 00:00:00
Registrar	GUANGDONG NAISINIKE

DNS Resolutions

Date	IP Address
2013-12-02	175.6.7.86 (ClassC)
2013-12-02	112.132.215.13 (ClassC)
2013-12-02	112.132.215.13 (ClassC)
2018-12-12	109.236.89.60 (ClassC)
2019-11-04	117.50.14.196 (ClassC)
2020-06-10	184.168.221.77 (ClassC)
2020-06-10	184.168.221.94 (ClassC)
2020-06-17	184.168.221.92 (ClassC)
2020-06-17	50.63.202.65 (ClassC)
2020-06-23	184.168.221.84 (ClassC)
2020-06-23	50.63.202.79 (ClassC)
2020-06-26	50.63.202.73 (ClassC)
2020-06-27	50.63.202.74 (ClassC)
2020-06-27	184.168.221.88 (ClassC)
2020-06-29	184.168.221.79 (ClassC)
2020-07-01	50.63.202.68 (ClassC)
2020-07-04	184.168.221.72 (ClassC)
2020-07-04	184.168.221.73 (ClassC)
2020-07-07	184.168.221.71 (ClassC)
2020-07-08	184.168.221.89 (ClassC)
2020-07-09	50.63.202.90 (ClassC)
2021-11-22	35.205.61.67 (ClassC)
2022-01-15	193.70.90.182 (ClassC)
2022-01-28	173.231.184.122 (ClassC)
2023-08-26	34.139.165.135 (ClassC)
2024-02-27	34.41.229.245 (ClassC)
2025-03-03	52.34.198.229 (ClassC)
2025-06-05	44.247.155.67 (ClassC)
2025-08-03	52.27.79.221 (ClassC)

Subdomains

Date	Domain	IP
a.aiphon1egalaxyblack42.com	2013-12-02	112.132.215.13

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]