Domain > geoiptool.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to geoiptool.com

MD5	A/V
4c4e3760e56fc8cbdd585eb030aefb78	[Trojan.Beado] [Trojan.Facebook.VB] [Trojan.Win32.VB.bkhvho] [WS.Reputation.1] [TROJ_SPNR.30AC14] [Trojan-Downloader.Win32.VB.bjzd] [Trojan.DL.VB!jw5GPQZY9lc] [UnclassifiedMalware] [Trojan.DownLoader8.31560] [TR/Dldr.VB.bjzd] [Trojan/Win32.VB] [Win32.TrojDownloader.VB.bj.(kcloud)] [Trojan:Win32/Beado.A] [TrojanDownloader.VB] [Win32/TrojanDownloader.VB.QCO] [Trojan.Win32.VB] [W32/VB.BJZD!tr.dldr] [Downloader.VB.AEAN] [Trojan.Win32.VB.ajiV]
28aeb0533e7e8c708d49afd794b5e359
07997bc3cf27ae8f63ec34ea917e1b82	[Artemis!07997BC3CF27] [Mal_Odra-5] [Trojan.Win32.Scarsi.ubf] [Virus.Win32.Heur.p] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/VBCheMan-C] [TScope.Trojan.VB] [Downloader.VB.AFMO]
b3b803ced0e84701fefc0a6472a25069	[Artemis!B3B803CED0E8] [Worm.Win32.Luder.asne] [UnclassifiedMalware] [TR/VB.Krypt.bjv.2] [W32/Luder.ASNE!worm]
43b66c79a8a32a2f6db17cb35c9e697a
d19c37633a10eaceec266222984a2c43	[Trojan] [Trojan] [Trojan.Win32.Injector.tidkx] [WS.Reputation.1] [TROJ_SPNR.07FH12] [Trojan-Ransom.Win32.Foreign.ecoq] [Mal/Behav-405] [UnclassifiedMalware] [TROJ_SPNR.07FH12] [Trojan/Win32.VBKrypt] [Trojan.Win32.VBKrypt] [W32/Zbot.BVD!tr]

Whois

Property	Value
Email	contact@privacyprotect.org
NameServer	LANARK.WIROOS.COM
Created	2006-03-18 00:00:00
Changed	2014-11-17 00:00:00
Expires	2020-03-18 00:00:00
Registrar	PDR LTD. D/B/A PUBLI

DNS Resolutions

Date	IP Address
2013-04-01	190.210.100.78 (ClassC)
2013-09-18	108.59.6.136 (ClassC)
2014-03-16	108.59.6.136 (ClassC)
2014-03-19	209.99.40.223 (ClassC)
2014-10-06	198.100.155.19 (ClassC)
2025-08-19	104.21.50.146 (ClassC)
2025-08-28	172.67.207.3 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
www.geoiptool.com	2013-12-27	108.59.6.136

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]