Domain > devilreturns.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://github.com/kbandla/APTnotes/blob/master/20...

Files that talk to devilreturns.com

MD5	A/V
616eff3e9a7575ae73821b4668d2801c	[W32.Clode62.Trojan.6442] [Artemis!616EFF3E9A75] [Backdoor.UDiroc] [W32/MalwareF.UAJY] [Backdoor.Trojan] [Heur.Suspicious] [W32/Risk.YXSQ-1000] [Trojan.VBRA.018783] [Trojan.Win32.Darkddoser] [W32/Injector.AFOI!tr] [Win32/Trojan.d89]
aed60553047ae484acc49cd2d5177c75

Whois

Property	Value
Email	james@runwaymagazineinc.com
NameServer	NS08.DOMAINCONTROL.COM
Created	2012-06-01 00:00:00
Changed	2014-05-29 00:00:00
Expires	2015-06-01 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-08-07	64.202.189.170 (ClassC)
2014-04-27	184.168.221.21 (ClassC)
2014-12-14	184.168.221.21 (ClassC)
2015-09-24	54.174.31.254 (ClassC)
2016-06-09	54.152.144.243 (ClassC)
2018-03-14	52.72.167.138 (ClassC)
2018-03-14	54.236.221.45 (ClassC)
2018-04-26	52.86.22.136 (ClassC)
2018-04-26	54.174.212.152 (ClassC)
2018-05-07	54.80.72.81 (ClassC)
2018-05-07	52.71.210.200 (ClassC)
2018-05-30	52.86.23.17 (ClassC)
2018-06-22	52.5.103.164 (ClassC)
2018-07-06	52.5.142.190 (ClassC)
2018-07-06	52.72.89.116 (ClassC)
2018-07-20	54.165.156.210 (ClassC)
2018-07-20	52.73.115.80 (ClassC)
2018-08-03	52.54.24.134 (ClassC)
2018-08-03	52.6.128.155 (ClassC)
2018-08-23	54.208.75.210 (ClassC)
2018-08-23	52.6.224.208 (ClassC)
2018-10-21	52.22.89.169 (ClassC)
2018-10-21	54.144.21.246 (ClassC)
2019-08-15	23.20.239.12 (ClassC)
2024-02-21	54.209.32.212 (ClassC)
2024-08-25	3.130.204.160 (ClassC)
2025-01-14	3.19.116.195 (ClassC)
2025-01-18	3.18.7.81 (ClassC)
2025-01-29	54.161.222.85 (ClassC)
2025-03-17	3.140.13.188 (ClassC)
2025-04-01	18.119.154.66 (ClassC)
2025-04-15	52.71.57.184 (ClassC)
2025-04-19	34.205.242.146 (ClassC)
2025-04-22	52.86.6.113 (ClassC)
2025-05-20	3.130.253.23 (ClassC)
2025-08-02	13.216.111.180 (ClassC)
2025-08-29	54.243.117.197 (ClassC)
2025-09-14	13.223.25.84 (ClassC)

Port 80

Subdomains

Date	Domain	IP
ftp.devilreturns.com	2014-12-14	184.168.221.21

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]