Domain > media-fire.org

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to media-fire.org

MD5	A/V
05d173650e9fb18cc2ece61873057d94	[ADWARE/InstallMon.ZH] [PUA.Installmonstr]
33a5cdd9d6b515c7d322ea20d636a7fc
fc253bcf7ed1239dc4c668b56a29954f	[PUP.Optional.InstallMonstr] [BehavesLike.Win32.Downloader.th]
3cb8ac2485c078d32b708a39f64d5c43
2f198f4813f14e67f6c4bbb6e157bb7f	[PUP.Optional.InstallMonster] [Trojan.InstallMonster.1460] [BehavesLike.Win32.Downloader.th]
726838c5f5560bc07481a57bdaed6c6e
e92d836b91cb4df81f2afc120307abd1	[W32.HfsAdware.EFCE] [SAPE.Heur.B4257] [Trojan.InstallMonster.1472] [GrayWare[AdWare:not-a-virus,HEUR]/Win32.InstallMonster] [BundleApp.APTV]
9a4b0358edae86953860d051f8e9ce3f
63472f93e568ce04f65fa66c2b3df2d4
420ed217f65b29a298f1f2fb26700db1	[PUP.Optional.InstallMonster] [Win32.Trojan.WisdomEyes.151026.9950.9995] [Heur.AdvML.B] [Trojan.InstallMonster.1504] [BehavesLike.Win32.Downloader.wc] [AdWare.InstallMonster.aalm] [GrayWare[AdWare:not-a-virus,HEUR]/Win32.InstallMonster] [AdWare.W32.InstallMonster.mhab] [BundleApp.AURZ]
a0476903a63af797074fdf9cdaa4cfbd
7cd03a8b51bad6a49d5fd610652d7664
6aed0047288547216ae82dd9e93d35ec	[TrojDownloader.NSIS.Adload.R] [Win32.Trojan.WisdomEyes.151026.9950.9990] [NSIS/TrojanDownloader.Adload.R] [Riskware.Nsis.Adload.dylyny] [Trojan.Vittalia.1532] [BehavesLike.Win32.Downloader.dc] [SoftwareBundler:Win32/Penzievs] [Trojan.Crypt] [W32/Adload.R!tr.dldr] [AdLoad]
ad52fcc856041753d9983e5936d46716
097cbd4232d3df237e7eabf32571f991
7f12af257314bd24c761046c4000db04	[PUA.Installmonstr] [Riskware/InstallMonstr] [Luhe.Fiha.A]
066ee86980df875347a4a1a0715ed64e	[Trojan.InstallMonster.1573] [PUA.Installmonstr] [Luhe.Fiha.A]
4b089192923eaca517e75a796f4d41a7	[NSIS.Trojan-Downloader.Adload.j] [Heur.AdvML.B] [NSIS/TrojanDownloader.Adload.R] [Riskware.Nsis.Adload.dylyny] [Trojan.Vittalia.1532] [BehavesLike.Win32.Downloader.vc] [SoftwareBundler:Win32/Penzievs] [PUP/Win32.Adload.R181086] [Trojan-Downloader.NSIS.Adload]
6763551faadeed24d5463077a80c7eb9
a0979becbbb34ca7d79d7b0903b43f27

DNS Resolutions

Date	IP Address
2014-03-26	148.251.17.140 (ClassC)
2014-04-11	94.23.147.185 (ClassC)
2014-06-16	190.93.252.12 (ClassC)
2014-06-17	190.93.253.12 (ClassC)
2014-06-28	198.41.188.89 (ClassC)
2014-06-28	198.41.184.89 (ClassC)
2014-06-29	198.41.187.89 (ClassC)
2014-06-29	198.41.185.89 (ClassC)
2014-07-11	198.41.186.89 (ClassC)
2014-09-15	190.93.253.40 (ClassC)
2014-09-16	190.93.252.40 (ClassC)
2014-09-22	190.93.250.50 (ClassC)
2014-09-22	190.93.251.50 (ClassC)
2014-10-07	190.93.253.4 (ClassC)
2014-10-07	190.93.252.4 (ClassC)
2015-01-24	190.93.253.9 (ClassC)
2015-01-24	190.93.252.9 (ClassC)
2019-05-14	104.20.0.146 (ClassC)
2019-08-16	104.20.1.146 (ClassC)
2024-06-16	64.91.248.15 (ClassC)
2024-09-14	172.232.25.148 (ClassC)
2024-11-04	172.232.4.213 (ClassC)
2024-11-21	172.232.31.180 (ClassC)
2025-07-29	69.16.230.165 (ClassC)
2025-09-14	172.237.146.25 (ClassC)
2025-09-30	172.237.146.38 (ClassC)
2025-11-15	172.233.219.123 (ClassC)
2025-11-20	172.233.219.78 (ClassC)
2026-01-04	13.248.213.45 (ClassC)

Subdomains

Date	Domain	IP
www.media-fire.org	2024-05-06	64.91.248.15

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]