Domain > ns1.dnsfor0.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to ns1.dnsfor0.com

MD5	A/V
4c6eb01b40395d4a8294f7393f0a5936	[HW32.CDB.E642] [W32/Worm-AAEH.pq!4C6EB01B4039] [WS.Reputation.1] [Injector.GJTG] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12544] [Worm/Vobfus.agcpv] [Mal/VB-ALW] [Worm:Win32/Vobfus.ZR] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABEP] [Trojan.Win32.Injector.BCCY] [Win32/Worm.221]
1cee4dfc215fcde75c5478a3ef07c081	[W32/Worm-AAEH.g!1CEE4DFC215F] [WS.Reputation.1] [Vobfus.QXUL] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12741] [Worm/Vobfus.agcvt] [WORM_VOBFUS.SMPD] [Mal/VB-ALW] [Worm:Win32/Vobfus] [Trojan/Win32.Jorik] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [Inject2.ABLK]
589a83bc81cfc6a8bb41cc745bd61640	[HW32.CDB.0724] [Worm.Vobfus.r3] [W32/Worm-AAEH.g!589A83BC81CF] [WS.Reputation.1] [Worm.Win32.Vobfus.esdv] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.12869] [TR/Dorifel.akeu] [Mal/VB-ALW] [Worm/Win32.Vobfus] [Worm:Win32/Vobfus] [Trojan/Win32.Jorik] [W32/Trojan.TIRI-6175] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/Vobfus.ALW!worm] [Worm.Win32.Vobfus.an] [Win32/Trojan.7ec]
4000b92d0662a7215c7921010f0607b6	[HW32.CDB.76f1] [Trojan.Beebone.D] [W32/Worm-AAEH.sh!4000B92D0662] [WS.Reputation.1] [Trojan.Win32.VBKrypt.urkc] [Trojan.Injector!tYjTJh9b/T4] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Mal/VB-ALW] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12445] [TR/VBKrypt.urjys] [Heuristic.LooksLike.Win32.Suspicious.I] [Trojan/Win32.VBKrypt] [Win32.Troj.VBKrypt.ur.(kcloud)] [Worm:Win32/Vobfus.ZN] [TScope.Trojan.VB] [Win32.Trojan.Vbkrypt.Oxum] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.AAYI] [Trojan.Win32.VBKrypt.aO] [Win32/Trojan.c1a]
235f450b5846728259495ee5fac2d7f6	[HW32.CDB.F146] [W32/Worm-AAEH.g!235F450B5846] [WS.Reputation.1] [Vobfus.QXUL] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12741] [Worm/Vobfus.agcvt] [WORM_VOBFUS.SMPD] [Mal/VB-ALW] [Worm:Win32/Vobfus] [Trojan/Win32.Jorik] [TScope.Trojan.VB] [Trojan.Win32.Injector.BCCY] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABLK] [Win32/Worm.2ea]
4f20261512105bf0e06e586b78d0f171	[HW32.CDB.7a6d] [Trojan.Beebone.D] [W32/Worm-AAEH.sh!4F2026151210] [W32.Changeup] [Injector.GKDZ] [PE:Malware.XPACK-HIE/Heur!1.9C48] [TrojWare.Win32.Symmi.ASA] [Win32.HLLW.Autoruner2.12869] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/SillyFDC-S] [Worm:Win32/Vobfus.ZV] [W32/Trojan.TCQQ-9375] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACQI]
091bb217b8e0c1728f60e86f97c04f31	[HW32.CDB.E433] [Trojan-Downloader.Win32.Adload!O] [Worm.Vobfus.r3] [W32/Worm-AAEH.g!091BB217B8E0] [Trojan.Win32.Vobfus.cwzmyr] [WS.Reputation.1] [Worm.Win32.Vobfus.erzx] [Worm.Vobfus!MdDFredMsTE] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12896] [Worm/Vobfus.ZQ.28] [Mal/VB-ALW] [Worm/Win32.Vobfus] [Worm:Win32/Vobfus.ZQ] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.Inject2] [W32/Vobfus.BCCY!worm] [Inject2.ABCF] [Trojan.Win32.Injector.BCCY]
395df008604e98e228ed41ce67f213b1	[Trojan.Beebone.D] [W32/Worm-AAEH.sh!395DF008604E] [W32.Changeup] [Injector.GKDZ] [PE:Malware.XPACK-HIE/Heur!1.9C48] [TrojWare.Win32.Symmi.ASA] [Win32.HLLW.Autoruner2.12869] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/SillyFDC-S] [Worm:Win32/Vobfus.ZV] [W32/Trojan.MZJB-9146] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACQI] [Trojan.Win32.Injector.BCZO] [Win32/Trojan.1b3]
122ea52ba4fe2406c545c486220a9ac1	[HW32.CDB.Cc45] [Trojan.Beebone.D] [W32/Worm-AAEH.sh!122EA52BA4FE] [Trojan] [W32.Changeup] [Injector.GKDZ] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Mal/SillyFDC-S] [TrojWare.Win32.Symmi.ASA] [Win32.HLLW.Autoruner2.12869] [Worm:Win32/Vobfus.ZV] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/Injector.BCTT!tr] [Inject2.ACQI] [Win32/Trojan.9eb]
52c408ad04b5c98b170c88cde9491560	[HW32.CDB.7a6d] [Trojan.Beebone.D] [W32/Worm-AAEH.sh!52C408AD04B5] [W32.Changeup] [Injector.GKDZ] [PE:Malware.XPACK-HIE/Heur!1.9C48] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.12869] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/SillyFDC-S] [Worm:Win32/Vobfus.ZV] [W32/Trojan.ISJF-8474] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACQI] [Win32/Trojan.292]
61add6d0496b8d0d386deef1dcca6a26	[HW32.CDB.Ec21] [W32/Worm-AAEH.pq!61ADD6D0496B] [WS.Reputation.1] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12869] [Worm/Vobfus.A.635] [Mal/VB-ALW] [Worm:Win32/Vobfus] [W32/Trojan.ZKKJ-0621] [Trojan/Win32.Jorik] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABIR] [Trojan.Win32.Injector.BCTT]
7a6fc1058deb8828b22251288eed5680	[Trojan.Beebone.D] [W32/Worm-AAEH.g!7A6FC1058DEB] [WS.Reputation.1] [Vobfus.QXUL] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12741] [Worm/Vobfus.agcvt] [WORM_VOBFUS.SMPD] [Heuristic.LooksLike.Win32.Suspicious.I] [Mal/VB-ALW] [Worm:Win32/Vobfus] [Trojan/Win32.Jorik] [TScope.Trojan.VB] [Trojan-Downloader.Win32.Beebone] [W32/VB.ALW!tr] [Inject2.ABLK] [Win32/Worm.64b]
14d3046e8d39b24d190882e2997bfd86	[W32/Worm-AAEH.g!14D3046E8D39] [WS.Reputation.1] [Vobfus.QXUL] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12741] [Worm/Vobfus.agcvt] [WORM_VOBFUS.SMPD] [Mal/VB-ALW] [Worm:Win32/Vobfus] [Trojan/Win32.Jorik] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABLK] [Trojan.Win32.Injector.BCCY] [Win32/Trojan.e82]
4b731cf055fcb076e0fadbe29b40b4b6	[HW32.CDB.05af] [Heur.Win32.Veebee.3!O] [W32/Worm-AAEH.s!4B731CF055FC] [WS.Reputation.1] [Vobfus.RDWD] [Worm.Win32.Vobfus.erya] [Worm.Vobfus!AotOWAmKghw] [Mal/SillyFDC-S] [TrojWare.Win32.VB.ICOX] [Win32.HLLW.Autoruner2.13996] [Worm/Vobfus.yhsd] [Worm/Win32.Vobfus] [Worm:Win32/Vobfus] [TScope.Trojan.VB] [Worm.Win32.Vobfus.AMr] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Win32/Trojan.d18]
013ca3c183a13a029a361d3bd1ea5021	[HW32.CDB.Be59] [Trojan-Downloader.Win32.Adload!O] [Worm.Vobfus.r3] [W32/Worm-AAEH.g!013CA3C183A1] [Trojan.Win32.Vobfus.cwzycc] [WS.Reputation.1] [Worm.Win32.Vobfus.erzx] [Worm.Vobfus!LoIumtwRYqQ] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12896] [Worm/Vobfus.ZQ.19] [Mal/VB-ALW] [Worm/Win32.Vobfus] [Worm:Win32/Vobfus.ZQ] [W32/Trojan.XLLF-4556] [Worm.Vobfus] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.Inject2] [W32/Vobfus.ALW!worm] [Inject2.ABCF] [Trojan.Win32.Injector.BCCY] [Win32/Trojan.c56]
feaa97efd237cbd996b1da721960c10b
38fca314bdc3e969a206dd9e88595260	[Trojan.Beebone.D] [W32/Worm-AAEH.sh!38FCA314BDC3] [WS.Reputation.1] [Trojan.Injector!rsR9lSM7Mv8] [UnclassifiedMalware] [Trojan.DownLoader11.4282] [Worm/Vobfus.agere] [Mal/SillyFDC-S] [Worm:Win32/Vobfus] [W32/Trojan.ONYL-1844] [TScope.Trojan.VB] [Trj/dtcontx.L] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACRI]
bfb52b8647068d9d21c30431d4638ce0	[Trojan.Beebone.D] [W32/Worm-AAEH.ph!BFB52B864706] [W32/A-2463ff8b!Eldorado] [WS.Reputation.1] [UnclassifiedMalware] [Win32.HLLW.Autoruner2.15496] [BehavesLike.Win32.AAEH.ch] [Worm:Win32/Vobfus.AAV] [HEUR/Fakon.mwf] [TScope.Trojan.VB] [PE:Malware.FakeFolder@CV!1.6ABB] [W32/Injector.VOX!tr]
2812ce13236087c1a5b30f63ae33c7a0	[W32/Worm-AAEH.sh!2812CE132360] [WS.Reputation.1] [Mal/SillyFDC-S] [UnclassifiedMalware] [Trojan.DownLoader11.4282] [Worm/Vobfus.jad.12] [Worm:Win32/Vobfus.ZW] [W32/Trojan.LFIJ-5734] [TScope.Trojan.VB] [Trj/dtcontx.L] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [W32/VB.ALW!tr] [Inject2.ACSD] [Trojan.Win32.Injector.BCZO] [Win32/Trojan.750]
1a672cedf3cff012376ac95bc9b0b220	[W32/Worm-AAEH.g!1A672CEDF3CF] [WS.Reputation.1] [Vobfus.QXUL] [Trojan.Injector!/z9GolkZvYk] [Mal/VB-ALW] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12741] [Worm/Vobfus.agcvt] [WORM_VOBFUS.SMPD] [Worm:Win32/Vobfus] [Trojan/Win32.Jorik] [TScope.Trojan.VB] [Worm.Win32.Vobfus] [Inject2.ABLK] [Trojan.Win32.Injector.BCCY]

DNS Resolutions

Date	IP Address
2014-03-28	93.171.133.112 (ClassC)
2014-04-21	82.146.36.112 (ClassC)
2014-04-24	82.146.36.112 (ClassC)
2014-04-29	91.200.14.170 (ClassC)
2014-04-30	91.200.14.170 (ClassC)
2014-05-15	91.231.85.137 (ClassC)
2014-05-30	185.25.60.82 (ClassC)
2014-06-05	5.149.255.194 (ClassC)
2014-06-19	144.76.206.162 (ClassC)
2014-06-24	93.171.202.46 (ClassC)
2014-06-28	185.14.28.182 (ClassC)
2014-06-29
2014-07-06	178.250.245.198 (ClassC)
2014-07-10	109.236.80.98 (ClassC)
2014-07-13	95.47.161.107 (ClassC)
2014-07-16	69.64.52.179 (ClassC)
2014-07-20	37.157.254.209 (ClassC)
2016-11-10	208.100.26.234 (ClassC)
2017-10-24	208.100.26.251 (ClassC)
2017-11-17	69.64.147.10 (ClassC)
2019-01-26	204.11.56.48 (ClassC)
2019-03-05	208.91.197.46 (ClassC)
2021-05-11	107.149.188.225 (ClassC)
2021-07-22	154.94.233.107 (ClassC)
2022-03-07	154.94.234.107 (ClassC)
2022-05-01	154.88.48.25 (ClassC)
2025-03-04	18.246.231.120 (ClassC)
2026-01-31	18.205.186.231 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]