Help RSS API Feed Maltego Contact                        

Domain > de.php.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to de.php.net

MD5A/V
4b38af0d70f80a1c4da811bbda23834b[VIPRE.Suspicious] [Trojan-Spy.Win32.Banker.anv]
71bbbf7414a317142af188861f4ea201[W32.Clode2e.Trojan.e537] [Trojan.Patched.BI] [Trojan-Spy/W32.Banker.651521.B] [TrojanBanker.Banker.hkk] [Artemis!71BBBF7414A3] [Trojan/Banker.hkk] [Trojan.Win32.Banker.tmsn] [Banker.GBAJ] [Win32/Tnega.KSM] [Trojan.Bancos-8695] [Trojan.Patched.BI] [Trojan.Patched.BI] [Trojan.Patched.BI] [Trojan.PWS.Banker.54240] [Heuristic.LooksLike.Win32.Suspicious.F] [Mal/EncPk-CF] [Trojan/Banker.Banker.xsk] [TrojanSpy:Win32/Banker] [Trojan.Patched.BI] [W32/Threat-SysVenFak-based!Maxi] [Win-Trojan/Banker.651521.B] [TrojanBanker.Banker] [Trj/Banker.KQO] [Win32/Spy.Banker.HYC] [PE:Packer.Win32.Rycrypt.a!1075195638] [BehavesLikeWin32.SMTP-Mailer] [Malware_fam.gw] [Win32/PEPatch] [Trojan.Win32.Banker.aM]

Whois

PropertyValue
NameServer DNS2.EASYDNS.NET
Created 1997-11-18 00:00:00
Changed 2014-11-14 00:00:00
Expires 2023-11-17 00:00:00
Registrar TUCOWS DOMAINS INC.

DNS Resolutions

DateIP Address
2014-07-12212.124.37.9 (ClassC)
2019-04-0182.100.240.32 (ClassC)
2025-05-21185.85.0.29 (ClassC)

Port 80

Port 443

Subdomains

DateDomainIP
ba1.php.net2025-05-22185.85.0.29
cn2.php.net2025-05-22185.85.0.29
static.php.net2025-05-18185.85.0.29
shared.php.net2025-05-23185.85.0.29
de.php.net2014-07-12212.124.37.9
secure.php.net2015-06-2472.52.91.14
wiki.php.net2025-03-1745.55.181.207
pecl.php.net2025-05-18104.236.228.160
cn.php.net2025-05-19185.85.0.29
pear.php.net2025-05-22109.203.101.62
analytics.php.net2025-05-21167.71.2.31
downloads.php.net2025-04-16104.236.32.144
bugs.php.net2024-08-01206.189.200.141
windows.php.net2025-05-2283.137.149.15
lv.php.net2025-05-18185.85.0.29
www.php.net2014-12-0872.52.91.14
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information