Domain > um.simpli.fi

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to um.simpli.fi

MD5	A/V
3ccce94d979e925d13b16f7f1b99cbe6	[Type_VBS_Autorun] [VBS.Dunihi] [VBS_JENXCUS.NS] [VBS/Jenxcus-C] [UnclassifiedMalware] [VBS.Autoruner.161] [VBS/Clicker.nauzs] [Worm:VBS/Jenxcus.K] [Trojan.IEVC-3] [VBS/Autorun.BC.worm] [VBS/Kryptik.L]
f58fb6cfc42c049c1442d6ce54ea429d	[W32/new-malware!Maximus] [TR/Graftor.2081254] [Trojan.Packed.194] [Win32/DH{fGSBEiV+ICMsgRNcV04}] [Trojan-Ransom.Win32.Blocker] [Artemis!F58FB6CFC42C] [Trojan.Packed!N6hauVnIyeg] [WS.Reputation.1] [Trojan.Win32.Graftor.czubpq] [Heuristic.LooksLike.Win32.Suspicious.J] [Win32/Trojan.fad]
62c0efc3e8f551f5126e73976db69354	[W32.JeneasyLTD.Trojan] [Artemis!62C0EFC3E8F5] [Worm.Ngrbot!OsowroSUll4] [Downloader] [Injector.GHNY] [Worm.Win32.Ngrbot.admj] [Worm/Ngrbot.adpp] [Worm/Win32.Ngrbot] [TrojanClicker:Win32/Tolouge] [Virus.Win32.Heur.p] [TScope.Trojan.VB] [Trojan.Backdoor.SmallX] [W32/Ngrbot.ADMJ!worm] [BackDoor.SmallX.BJN] [Trojan.Win32.Injector.BCDS] [Win32/Trojan.54b]
5989dc0d2666bb6425369bceb7f3810e	[W32/Sefnit.C] [Trojan.MulDrop4.11744] [W32/Sefnit.ZOEY-4762]
f64dc3bce4b075db1db8f7d08b142a0d	[PWSZbot-FABG!F64DC3BCE4B0] [Spyware.Zbot.ED] [WS.Reputation.1] [Win32/Poweliks.B] [Backdoor.Win32.PMax]
7d026327537e1250a1ae2c2f25d7f210	[W32.ATVC_OnsurotLTL.Trojan] [PE:Malware.Obscure!1.9C59]
3a3ba4da9f99584f9849d1aef724e0ec
9cafa10f4ceac2a411ff475cf74cec70	[Backdoor.Kelihos.F5] [Trojan.Win32.Tepfer.dfshpg] [Kelihos.BKDR] [BackDoor.Slym.14195] [BehavesLike.Win32.Backdoor.cc] [W32/Trojan.MELG-2219] [Win32.PSWTroj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor/Win32.Kelihos] [SScope.Malware-Cryptor.Hlux] [Win32.Backdoor.Hlux.Hwwt] [Backdoor.Win32.Kelihos] [W32/Kryptik.BJWM!tr] [Backdoor.Win32.Hlux.ax]
128e33f9a049bf4e152689857819089d	[W32.FadoxbesLTE.Trojan] [Downloader-FYH!128E33F9A049] [Trojan.Inject.ED] [Heuristic.BehavesLike.Win32.Suspicious-DTR.G] [Spyware/Win32.Zbot]
9c48ef2da58a1ac5cbe5ef89d3e52fe1	[HW32.Packed.F00E] [Artemis!9C48EF2DA58A] [PUP.RiskwareTool.CK] [RiskWare.HackAV!] [Trojan.ADH] [Riskware.Win32.HackAV.dpbfbb] [W32/Trojan.GJTJ-9302] [Unwanted/Win32.HackTool] [Win32/RiskWare.HackAV.LZ] [Trojan.Win32.HackAV.LZ] [Win32/Trojan.Hacktool.571] [Riskware] [JS.A.Iframe.1334982] [HackTool.Win32.HackAV.At]
e3c3f84285ab617390f6cd2ba6b1258e	[Trojan.Zbot]
2948864b8afed778a167a4bdeaf0a1fa	[W32.HfsAutoA.11B8] [BehavesLike.Win32.Downloader.cc]
7fa60d9694ce8a59071d02cde50e4539	[WS.Reputation.1] [Trojan.DownLoader14.22052]
2d7bb5714b2a19dccf36e8deb1c74b06	[HW32.Packed.1745] [Backdoor.Graybird] [Hacktool.Win32.GameHack.MV] [Skodna.GameHack.NXQ]
b01250fa3c06309ed108189808354bbb	[HW32.Packed.F74C] [Artemis!B01250FA3C06] [Win32.Trojan.Black.Paus] [BehavesLike.Win32.BadFile.tc] [Mal/VMProtBad-A] [Trojan.Strictor.D15C16] [W32/VMProtBad.A!tr] [Win32/Blacked]
a292fe91547e241077a87712709e9eed	[HW32.Packed.E4DA] [Artemis!A292FE91547E] [BehavesLike.Win32.Trojan.tc] [Mal/VMProtBad-A] [Trojan.Strictor.D15C16] [Win32.Trojan.Black.Llqo] [Trojan.Win32.VMProtect] [W32/VMProtBad.A!tr] [Win32/Blacked] [PUA.Win32.VMProtect.ABO]
33ffb02b0ef63be8dd013253e70ce888	[WS.Reputation.1] [Adware.Downware.9804] [Win32.Heur.KVMH008.a.(kcloud)] [Trojan.Fsysna]
176d6404fcc902d82ae987c085b2b161	[WS.Reputation.1]
4d1bd8997472d93907491b68d603ebc0	[Application.StartPage.AFA] [Trojan.StartPage] [W32/Trojan.CIVV-8992] [Application.StartPage.AFA] [Application.StartPage.AFA] [VBS.StartPage.34] [BehavesLike.Win32.Downloader.tc] [Artemis!4D1BD8997472] [Trojan.StartPage] [Trojan.Win32.Pakes] [W32/SDBot.CC!worm] [Pakes_c.ZQE]
9c01e2d1d929dc32ace1fd14fda091a9	[Artemis!86BF8458D87B] [Backdoor.Win32.DarkKomet.ftwp] [Trojan.DownLoader15.19512] [Backdoor:Win32/Fynloski.A] [Win32/Jorik.KJ] [Trojan.Filecoder.W] [Riskware/Sim]

Whois

Property	Value
Name	Domain manager
Organization	Web Solutions ApS, Suomen sivuliike
Address	Thorsgade 1
Zip Code	DK-5000
City	Odense, Denmark
Phone	+4570262025
NameServer	dns2.simpli.fi
Created	2011-03-09 00:00:00
Changed	2015-02-18 00:00:00
Expires	2020-03-15 00:00:00

DNS Resolutions

Date	IP Address
2013-07-17	174.37.217.200 (ClassC)
2013-07-24	173.192.208.206 (ClassC)
2013-08-18	5.153.5.68 (ClassC)
2013-10-11	173.192.208.195 (ClassC)
2013-10-17	50.97.233.185 (ClassC)
2013-10-19	50.97.233.184 (ClassC)
2013-10-28	108.168.159.136 (ClassC)
2014-01-17	5.153.5.68 (ClassC)
2014-02-21	108.168.173.90 (ClassC)
2014-07-01	159.253.128.163 (ClassC)
2014-07-02	198.23.90.37 (ClassC)
2014-09-16	159.253.128.163 (ClassC)
2014-10-23	50.97.233.185 (ClassC)
2015-10-11	50.97.233.186 (ClassC)
2016-07-26	108.168.178.157 (ClassC)
2016-08-04	119.81.99.200 (ClassC)
2016-09-29	119.81.211.112 (ClassC)
2016-09-30	159.253.128.183 (ClassC)
2018-04-26	159.253.128.188 (ClassC)
2018-05-28	108.168.178.150 (ClassC)
2018-05-28	169.61.103.229 (ClassC)
2018-06-08	169.50.137.185 (ClassC)
2018-07-23	169.60.66.39 (ClassC)
2018-07-23	169.60.66.38 (ClassC)
2018-09-15	169.55.104.49 (ClassC)
2018-09-15	169.61.103.241 (ClassC)
2018-09-15	169.60.66.35 (ClassC)
2019-04-15	198.23.90.56 (ClassC)
2019-04-15	198.23.90.60 (ClassC)
2019-04-15	198.23.90.62 (ClassC)
2019-07-11	169.50.137.190 (ClassC)
2019-07-11	169.61.40.210 (ClassC)
2019-07-19	158.85.41.203 (ClassC)
2019-12-13	184.172.48.71 (ClassC)
2019-12-13	50.97.145.208 (ClassC)
2019-12-13	169.62.192.207 (ClassC)
2021-10-28	75.126.248.142 (ClassC)
2021-10-30	108.168.159.145 (ClassC)
2021-11-02	52.116.221.248 (ClassC)
2021-11-03	169.44.180.92 (ClassC)
2021-11-03	169.45.107.147 (ClassC)
2021-11-05	169.50.137.182 (ClassC)
2021-11-05	159.122.14.34 (ClassC)
2021-11-05	169.50.137.184 (ClassC)
2022-02-22	161.202.200.114 (ClassC)
2022-02-22	161.202.200.115 (ClassC)
2022-07-10	169.62.67.163 (ClassC)
2025-09-13	35.247.47.28 (ClassC)
2025-09-16	35.230.38.116 (ClassC)
2025-10-16	34.83.125.63 (ClassC)
2025-10-30	35.185.215.58 (ClassC)
2025-12-03	136.118.115.178 (ClassC)
2026-01-20	136.117.87.125 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
eur.um.simpli.fi	2024-11-10	34.91.62.186

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]