Help RSS API Feed Maltego Contact                        

Domain > megasort.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to megasort.net

MD5A/V
d38c175edab5b364fe19699932a79331[TR/Crypt.Xpack.90303] [Win32/Tnega.JbVcXI] [Win32/Kryptik.CZAI] [W32/Kryptik.CXRU!tr] [Crypt3.BZQV] [Trojan.Win32.Crypt] [Ransom*Win32/Crowti] [Mal/Wonton-AN]
e6b37becbc6fae7e58db75e9b2a66934[TR/Crypt.Xpack.75480] [W32/Kryptik.CXRU!tr] [Crypt3.BZQV] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Foreign.lmkk] [Ransom*Win32/Crowti.A] [Mal/Wonton-AN]
a746353639462342a94f006041e0dfcf[TR/Crypt.ZPACK.71793] [W32/Kryptik.CXRB!tr] [Crypt3.BZOM] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Foreign.lmjn] [Ransom-FWP!A74635363946] [Trojan*Win32/Fleercivet] [Mal/Wonton-AN]
197e8d1fe190e96373a35ccaa9d03f45[TR/Crypt.ZPACK.90020] [Win32/Crowti.SSIHdY] [TrojanRansom.Crowti.D4] [Win32/Kryptik.CYJO] [W32/Kryptik.CXUN!tr] [Crypt3.CAEA] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Foreign.lmtg] [Ransom-FWP!197E8D1FE190] [Ransom*Win32/Crowti*Trojan*Win32/Fleercivet.D] [Mal/Wonton-AN]
0eeddc49f7c56338f0ecfbcf5bfa802b[TR/Crypt.Xpack.87623] [W32/Kryptik.CXUN!tr] [Crypt3.BZOR] [Trojan-Ransom.Win32.Foreign.lmjx] [Ransom-FWP!0EEDDC49F7C5] [Ransom*Win32/Crowti] [Mal/Wonton-AN]
0d3fecf186327fd880ed7e3072f2d097[TR/Crypt.Xpack.75843] [W32/Foreign.CXRB!tr] [Crypt3.BZPK] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Foreign.lmki] [Ransom-FWP!0D3FECF18632] [Ransom*Win32/Crowti.A] [Mal/Wonton-AN]
03a2a6045649fbcec45b743492fc8306[TR/Crypt.ZPACK.89737] [W32/Kryptik.CXUN!tr] [Win32/Cryptor] [Trojan.Win32.Crypt] [Trojan-Ransom.Win32.Foreign.lnzx] [Ransom-FWP!03A2A6045649] [Ransom*Win32/Crowti.A*Trojan*Win32/Fleercivet.D] [Mal/Wonton-AN]
5f3e8e6891e96477d4d9cba602e86966
b188a7a9de9c101aed6ecf075daf19f2
1ee024007823cc0bfbefba98ba1e1f4c[TrojanPWS.Zbot.A4] [Trojan/Injector.bsvb] [Trojan.Blocker!LJFVx+7WJIs] [W32/Trojan3.NTX] [Trojan.Zbot] [Injector.HQJF] [Win32/Tnega.OCDLBdB] [TROJ_CROWTI.UIG] [Trojan-Ransom.Win32.Blocker.gngn] [Trojan.Win32.Encoder.dnqglm] [Troj/Mdrop-GNN] [TrojWare.Win32.Filecoder.a] [Trojan.Encoder.514] [TROJ_CROWTI.UIG] [BehavesLike.Win32.Pate.dc] [W32/Trojan.DLDO-3521] [Trojan/Blocker.afuu] [TR/Crypt.Xpack.86320] [Trojan[Spy]/Win32.Zbot] [Trojan/Win32.MDA] [TrojanSpy.Zbot] [Trj/WLT.B] [Win32/Filecoder.CO] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Yakes] [W32/Filecoder.CO!tr] [Inject2.BOPC] [Trojan.Win32.Ransomlock.gngn]

Whois

PropertyValue
NameServer NS16.ELNINO-HOSTING.COM
Created 2002-11-13 00:00:00
Changed 2014-12-18 00:00:00
Expires 2015-11-13 00:00:00
Registrar GODADDY.COM, LLC

DNS Resolutions

DateIP Address
2015-01-02109.200.196.187 (ClassC)
2018-03-15109.200.196.179 (ClassC)
2019-08-15213.132.197.4 (ClassC)
2022-01-04172.67.205.51 (ClassC)
2022-01-04104.21.66.148 (ClassC)
2023-04-16188.114.96.0 (ClassC)
2023-04-16188.114.97.0 (ClassC)
2026-02-0282.223.64.53 (ClassC)

Port 80

Port 443

View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information