Help RSS API Feed Maltego Contact                        

Domain > dir.bg

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to dir.bg
MD5A/V
d2f2c9e7b5d32c5114a2f8511d9efcc2
7b34d19bfbc7f1b735f825de01b281f8
210b6e761b4cb7d71e862606c0f28846[Artemis!210B6E761B4C] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.prs] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr] [SHeur4.BNRB]
a472f9d1a78fa6cb3eb6896d9c319726[TrojanDownloader.Cutwail.bs] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btelgd] [WS.Reputation.1] [BKDR_PUSHDO.FC] [Backdoor.Win32.Pushdo.qgz] [Backdoor.Pushdo!+jNmAzmKgNc] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.RMSR-3833] [Trojan.CryptHWZ] [W32/Pushdo.QGZ!tr.bdr] [Crypt.CHWZ] [Trj/Pushdo.L]
a02dbc158de4bc680950fa18c5122dc0
651f650dfb3e715927cee5103e68e0c7[HW32.CDB.F91a] [Packed.Win32.Katusha.1!O] [Kryptik.CCQY] [Backdoor.Win32.Hlux.cri] [Win32.Malware!Drop] [Artemis!651F650DFB3E] [Backdoor:Win32/Kelihos.F] [W32/Hlux.CBWM!tr.bdr] [Crypt_s.GQG] [Backdoor.Win32.Hlux.AB]
6bd3a60b66efb707e894f2717cccf17b
7abb1e7e80e0f342f0452ae91375fce3
57be65340d0a4336f525d108862ccf50
2422279645dc3f8f9201bf042122d6d5[W32.Clod317.Trojan.772f] [Backdoor/W32.Pushdo.36280.C] [Trojan.Cutwail.AQ] [Trojan.Win32.XPACK.bdjuve] [W32.Pilleuz] [Pushdo.B] [TROJ_CUTWAIL.KK] [Trojan.Wigon!3W+DBvqt2Q0] [Backdoor.Win32.A.Pushdo.36280.A] [UnclassifiedMalware] [Trojan.DownLoad3.17030] [Heuristic.BehavesLike.Win32.Suspicious-DTR.K] [Troj/FakeAV-GDI] [Backdoor/Pushdo.dr] [Win32.Hack.Pushdo.(kcloud)] [TrojanDownloader:Win32/Cutwail.BW] [Trojan/Win32.Zbot] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo] [W32/CutMail.EE!tr] [SHeur4.ATIK] [Trojan.Win32.Kryptik.aN]
180ca5d4cc13a8e8aee4156b2ee389c5
8b7c5fe0eaad467bb999a2c1f7dd7486[TrojanDownloader.Cutwail] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btaipu] [W32.Pilleuz] [TROJ_CUTWAIL.CNA] [Win32.Trojan] [Backdoor.Win32.Pushdo.qhe] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.IQVD-6602] [Trojan.CryptILH] [W32/Pushdo.QHE!tr.bdr] [Crypt.CILH] [Trj/Pushdo.L]
d3be3c4282a9d5158080d8023e5f2efa[TrojanRansom.Foreign.cyzc] [Fake-Rena-FNQ!D3BE3C4282A9] [Trojan.Inject.RRE] [Trojan] [WS.Reputation.1] [TROJ_RANSOM.FCN] [Trojan-Ransom.Win32.Foreign.cyzc] [UnclassifiedMalware] [Trojan.PWS.Panda.547] [TR/Ransom.Foreign.cyzc] [Win32.Troj.Undef.(kcloud)] [VirTool:Win32/Injector] [Trojan/Win32.Foreign] [W32/Trojan.CVXL-5426] [Virus.Win32.Cryptor] [W32/Injector.ZVR!tr] [Win32/Cryptor] [Trj/Dtcontx.E]
e3346adfbe598fe8dacfcf07debecc50[TrojanDownloader*Win32/Cutwail.BS]
89c64a4ee7b13dd2dbdcf4a05f71312a[TrojanDownloader*Win32/Cutwail.BS]
a423bbddf78450753f1a239711408b91[Crypt_c.ABJD] [TrojanDownloader*Win32/Cutwail.BS]
ed3e876d7a262ce652521ec12ed5cd5d[PWS-Zbot-FAOE!ED3E876D7A26] [Backdoor.Bot] [W32.Pilleuz] [TROJ_SPNR.14C513] [Backdoor.Win32.Ruskill.rgr] [Heur.Suspicious] [BackDoor.Bulknet.846] [TR/Dldr.Cutwail.BS.76] [Mal/EncPk-AFN] [Win32.Hack.Ruskill.r.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Inject] [W32/Backdoor.GGHQ-3653] [Malware.Pilleuz!rem] [Suspicious] [Trojan.Win32.Inject] [W32/EncPk.AFN!tr] [Trj/OCJ.D]
47e649bde7c0d7262d3333d4036954b1[HW32.CDB.854d] [Backdoor.Hlux.r3] [Trojan.Win32.Kryptik.cxchjm] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dlqp] [Backdoor.Hlux!j6RuLW3VWhk] [Trojan.Win32.S.PSW-Tepfer.829456.BB] [UnclassifiedMalware] [Trojan.Packed.26558] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [Trojan/Win32.Tepfer] [W32/Trojan.TIAQ-7840] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [Crypt3.LHH] [Trojan.Win32.Kryptik.CASU] [Win32/Trojan.337]
63e2d975b940af1a4ae7c80f7f6f7052[TrojanDownloader*Win32/Cutwail.BS]
f0eec37a33ad2efee7080820ec596e83[Win.Trojan.Ransom-2439]

Whois
PropertyValue
Organization DIR.BG AD
Email tzvetan@dirbg.com
Address 7 Danail Dechev str., BG-1704 Sofia
City SOFIA, 1704
Country BULGARIA
NameServer ns.dir.bg
Created 1998-05-03 21:00:00
Expires 2017-05-07 21:00:00

DNS Resolutions
DateIP Address
2011-12-28194.145.63.33 (ClassC)
2012-11-26194.145.63.18 (ClassC)
2012-11-26194.145.63.27 (ClassC)
2013-08-27194.145.63.12 (ClassC)
2014-06-24194.145.63.40 (ClassC)
2014-06-24194.145.63.10 (ClassC)
2024-06-21194.145.63.12 (ClassC)
2024-12-30172.67.71.201 (ClassC)
2025-03-22104.26.15.214 (ClassC)
2025-03-25104.26.14.214 (ClassC)

Subdomains
DateDomainIP
isqe2014.dir.bg2025-03-15194.145.63.33
r5.dir.bg2025-03-04104.26.15.214
bora.dir.bg2025-03-23194.145.63.33
sa.dir.bg2025-03-24194.145.63.33
lubimetzfc.dir.bg2025-02-27194.145.63.33
abiconic.dir.bg2025-03-23194.145.63.33
static.dir.bg2025-03-23194.145.63.126
mordred.dir.bg2025-03-23194.145.63.33
life.dir.bg2024-02-21194.145.63.27
fc-chernomore.dir.bg2025-03-16194.145.63.33
i.dir.bg2023-08-09194.145.63.18
vkusotii.dir.bg2025-03-04104.26.14.214
krimi.dir.bg2025-03-23194.145.63.33
webapi.dir.bg2025-03-2388.203.154.237
counterattack.dir.bg2025-03-23194.145.63.33
dekafe-mebel.dir.bg2025-03-15194.145.63.33
cappykennel.dir.bg2025-03-16194.145.63.33
mail.dir.bg2014-05-23194.145.63.28
ou-sozopol.dir.bg2025-03-23194.145.63.33
m.dir.bg2025-03-14104.26.15.214
nsmuseum-ch-osam.dir.bg2025-03-23194.145.63.33
urbn.dir.bg2025-03-23104.26.14.214
fun.dir.bg2024-02-21194.145.63.10
video.dir.bg2025-03-04104.26.14.214
impressio.dir.bg2024-04-05172.67.71.201
vremeto.dir.bg2025-01-19104.26.14.214
photo.dir.bg2025-03-04172.67.71.201
auto.dir.bg2025-03-14104.26.14.214
trip.dir.bg2024-02-21194.145.63.27
corner.dir.bg2023-08-09194.145.63.27
open-doors-fair.dir.bg2025-03-23194.145.63.33
ads.dir.bg2025-03-23194.145.63.27
downloads.dir.bg2025-03-23194.145.63.10
games.dir.bg2023-08-09194.145.63.10
dnes.dir.bg2024-06-21194.145.63.10
ns.dir.bg2025-03-23194.145.63.2
banners.dir.bg2025-03-23194.145.63.126
business.dir.bg2023-08-09194.145.63.10
events.dir.bg2025-03-04104.26.15.214
direct.dir.bg2025-03-23194.145.63.10
market.dir.bg2025-03-23168.119.5.18
pet.dir.bg2025-03-23194.145.63.33
it.dir.bg2024-02-21194.145.63.10
tranzit.dir.bg2025-03-23194.145.63.12
about.dir.bg2025-03-23194.145.63.10
www.about.dir.bg2025-03-15194.145.63.10
49ou.dir.bg2025-03-14194.145.63.33
lupu.dir.bg2025-03-23194.145.63.33
klissurov.dir.bg2025-03-23194.145.63.33
www.dir.bg2023-08-04172.67.71.201
company.dir.bg2025-03-04172.67.71.201
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information