Domain > doctor.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to doctor.com

MD5	A/V
e617a69e7185cd299d75c87c401e0fda	[SHeur4.BKZA] [TrojanDownloader*Win32/Cutwail.BS]
1de1e523afa41804295a043807d1641e
e9ff7ebc17773c0d705e6b8174608c87
2422279645dc3f8f9201bf042122d6d5	[W32.Clod317.Trojan.772f] [Backdoor/W32.Pushdo.36280.C] [Trojan.Cutwail.AQ] [Trojan.Win32.XPACK.bdjuve] [W32.Pilleuz] [Pushdo.B] [TROJ_CUTWAIL.KK] [Trojan.Wigon!3W+DBvqt2Q0] [Backdoor.Win32.A.Pushdo.36280.A] [UnclassifiedMalware] [Trojan.DownLoad3.17030] [Heuristic.BehavesLike.Win32.Suspicious-DTR.K] [Troj/FakeAV-GDI] [Backdoor/Pushdo.dr] [Win32.Hack.Pushdo.(kcloud)] [TrojanDownloader:Win32/Cutwail.BW] [Trojan/Win32.Zbot] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo] [W32/CutMail.EE!tr] [SHeur4.ATIK] [Trojan.Win32.Kryptik.aN]
622bf7ba2317ae03b0682a650bac03d8	[TrojanDownloader.Cutwail] [Cutwail-FBPN!622BF7BA2317] [W32.Pilleuz] [Pushdo.I] [TROJ_SPNR.1ADR13] [Backdoor.Win32.Pushdo.pyz] [Backdoor.Pushdo!kokJ8DxObyw] [Heur.Suspicious] [BackDoor.Bulknet.893] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor.Win32.U.Pushdo.41472] [Backdoor/Win32.Pushdo] [W32/Backdoor.PJEO-2224] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PYZ!tr.bdr] [SHeur4.BGUF] [Trj/OCJ.D]
f14ca0281fdf75a0f52f52b66e6884ea
b7d2d2a8a4d14b8b74cc88009e28ae66	[Trojan/W32.Small.41984.VJ] [Backdoor.Win32.Pushdo!O] [TrojanDownloader.Cutwail.BS5] [Downloader-FKK!B7D2D2A8A4D1] [Suspicious.Cloud.5] [Pushdo.J] [BKDR_PUSHDO.SMP] [Backdoor.Win32.Pushdo.pvu] [Trojan.Win32.Pushdo.cramya] [Backdoor.Win32.Pushdo.41984.B] [Trojan.Inject1.19222] [Backdoor/Pushdo.yv] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Pushdo] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PVU!tr.bdr]
89c64a4ee7b13dd2dbdcf4a05f71312a	[TrojanDownloader*Win32/Cutwail.BS]
e57d3b285148fa02129b9c0044aa8737	[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
43415b6d9537a142cec2c22c31f8bfae	[Cutwail-FBYD!43415B6D9537] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo.qev] [Trojan.Kryptik!NPQTFtfoX4A] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Artemis!43415B6D9537] [TrojanDownloader:Win32/Cutwail] [Trojan.CryptCQK] [W32/Pushdo.QEV!tr.bdr] [Crypt.CCQK] [Trj/Dtcontx.E]
f7dd2cdcc0b90b7d7b2ff3cfb540c796	[Cutwail-FBYD!F7DD2CDCC0B9] [Trojan.PPush] [Trojan.Win32.Bulknet.brrije] [TROJ_DLOAD.RC] [Trojan.Kryptik!QNluqFEr0aI] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Troj/Cutwail-AM] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan.CryptDTE] [Crypt.CDTE] [Trj/CI.A]
526d28005ca16009f4c37f6319d6bfa3	[Trojan/W32.Jorik.46592.DO] [Trojan] [Trojan/Kryptik.bfdk] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qme] [Backdoor.Pushdo!ksoXPDwu2Y4] [UnclassifiedMalware] [BackDoor.Bulknet.958] [VirTool:Win32/Obfuscator.AHU] [Backdoor/Win32.Pushdo] [Trojan.Jorik.Cutwail] [Backdoor.Win32.Pushdo] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ] [Trj/CI.A]
e4fac37c735dcccfffd80373bcf31985
0c699bf8815137404fc43f6e56761ac8	[Trojan.Dropper.VQH] [TrojanDownloader.Cutwail] [Trojan-FBGJ!0C699BF88151] [Trojan] [Trojan/Wigon.ph] [Malware] [Mal_DLDER] [Trojan.Downloader.Small-3221] [UnclassifiedMalware] [BackDoor.Bulknet.893] [TrojanDownloader:Win32/Cutwail.BS] [Virus.Win32.Heur.c] [BScope.Trojan.Cutwail.4512] [Win32/Wigon.PH] [W32/Pushdo.B!tr.bdr]
66db43669a9cb80274d2ba6a1f44945e	[TrojanDownloader*Win32/Cutwail.BS]
e0e8972687ca2f88b36c21bef2781070
b4252cc54a81b00ccdf1d01523d28209	[Artemis!B4252CC54A81] [Trojan.Inject] [Trojan.Dropper] [Backdoor.Win32.Pushdo.qgg] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Win32.Pushdo] [W32/Pushdo.PYD!tr.bdr] [Trj/Dtcontx.E]
a1c6f433289e28861c8876b0c161afee
2f80660b47db546c6907edd95868b901	[Backdoor.Pushdo] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo]

Whois

Property	Value
NameServer	PDNS90.ULTRADNS.COM
Created	1997-08-18 00:00:00
Changed	2014-08-15 00:00:00
Expires	2017-08-17 00:00:00
Registrar	REGISTER.COM, INC.

DNS Resolutions

Date	IP Address
2013-05-21	174.37.209.138 (ClassC)
2013-08-09	108.168.255.239 (ClassC)
2013-08-11	108.168.255.239 (ClassC)
2013-11-03	192.225.208.11 (ClassC)
2014-01-29	192.225.221.17 (ClassC)
2016-10-22	192.225.209.8 (ClassC)
2020-06-11	13.225.64.49 (ClassC)
2020-06-22	99.86.62.35 (ClassC)
2020-06-22	99.86.62.7 (ClassC)
2020-06-29	13.225.146.7 (ClassC)
2020-06-29	13.225.146.73 (ClassC)
2020-06-29	13.225.146.93 (ClassC)
2020-07-20	99.84.110.110 (ClassC)
2020-07-23	99.86.61.21 (ClassC)
2020-07-23	99.86.61.63 (ClassC)
2020-07-24	13.249.85.114 (ClassC)
2020-07-29	99.84.178.9 (ClassC)
2020-08-03	13.35.111.21 (ClassC)
2020-08-03	13.35.111.10 (ClassC)
2020-08-07	54.230.35.26 (ClassC)
2020-08-14	13.33.251.37 (ClassC)
2020-08-14	13.225.239.83 (ClassC)
2020-08-14	13.33.251.113 (ClassC)
2020-08-15	13.33.242.13 (ClassC)
2020-08-15	54.192.230.70 (ClassC)
2020-08-16	143.204.131.94 (ClassC)
2020-08-16	143.204.94.41 (ClassC)
2020-08-17	52.84.129.4 (ClassC)
2020-08-17	99.84.114.42 (ClassC)
2020-08-17	99.84.114.48 (ClassC)
2020-08-17	13.224.230.123 (ClassC)
2020-08-18	99.84.90.57 (ClassC)
2020-08-18	52.84.137.7 (ClassC)
2020-08-18	13.224.119.33 (ClassC)
2020-08-19	52.84.90.123 (ClassC)
2020-08-19	13.225.198.56 (ClassC)
2020-08-19	52.85.10.118 (ClassC)
2020-08-20	99.86.243.117 (ClassC)
2020-08-21	52.85.121.86 (ClassC)
2020-08-21	52.85.144.6 (ClassC)
2020-08-21	13.226.0.65 (ClassC)
2020-08-21	143.204.243.81 (ClassC)
2020-08-21	143.204.89.100 (ClassC)
2020-08-22	13.249.12.6 (ClassC)
2020-08-22	52.84.114.9 (ClassC)
2020-08-29	143.204.25.115 (ClassC)
2020-08-29	143.204.25.12 (ClassC)
2020-08-29	143.204.25.26 (ClassC)
2020-08-29	143.204.25.107 (ClassC)
2020-09-08	54.230.248.62 (ClassC)
2020-09-16	99.84.112.93 (ClassC)
2020-09-19	13.249.95.85 (ClassC)
2020-09-19	13.249.95.55 (ClassC)
2020-09-30	13.225.71.42 (ClassC)
2020-09-30	13.225.71.70 (ClassC)
2020-09-30	54.192.226.105 (ClassC)
2020-09-30	143.204.201.19 (ClassC)
2020-10-01	143.204.226.58 (ClassC)
2020-10-01	13.33.242.105 (ClassC)
2020-10-02	13.224.67.124 (ClassC)
2020-10-04	13.249.11.4 (ClassC)
2020-10-05	143.204.226.55 (ClassC)
2020-10-05	54.239.192.118 (ClassC)
2020-10-07	13.32.141.117 (ClassC)
2020-10-07	13.33.93.81 (ClassC)
2020-10-08	52.85.243.50 (ClassC)
2020-10-10	65.8.233.32 (ClassC)
2020-10-10	65.8.233.63 (ClassC)
2020-10-10	65.8.233.65 (ClassC)
2020-10-17	54.192.30.36 (ClassC)
2020-10-17	13.35.109.39 (ClassC)
2020-10-17	54.192.30.41 (ClassC)
2020-10-17	13.35.109.47 (ClassC)
2020-10-17	54.192.30.59 (ClassC)
2020-10-17	13.35.109.60 (ClassC)
2020-10-17	13.35.109.119 (ClassC)
2020-10-22	99.86.38.37 (ClassC)
2020-10-29	13.227.41.116 (ClassC)
2020-10-29	13.227.41.39 (ClassC)
2020-11-01	13.35.111.55 (ClassC)
2020-12-05	52.85.134.62 (ClassC)
2020-12-05	52.85.134.111 (ClassC)
2020-12-05	52.85.134.126 (ClassC)
2020-12-05	52.85.134.55 (ClassC)
2020-12-12	13.35.118.81 (ClassC)
2020-12-15	99.86.35.63 (ClassC)
2020-12-15	99.86.35.83 (ClassC)
2020-12-30	99.84.77.47 (ClassC)
2021-01-09	65.8.168.49 (ClassC)
2021-01-13	13.249.62.79 (ClassC)
2021-01-13	13.249.62.84 (ClassC)
2021-01-13	13.249.62.116 (ClassC)
2021-01-13	13.249.62.2 (ClassC)
2021-02-26	54.230.226.121 (ClassC)
2021-02-26	54.230.226.31 (ClassC)
2021-02-26	54.230.226.87 (ClassC)
2021-03-17	52.84.127.37 (ClassC)
2021-04-03	13.249.110.7 (ClassC)
2021-04-18	13.225.53.73 (ClassC)
2021-05-01	54.230.202.64 (ClassC)
2021-05-01	54.230.202.55 (ClassC)
2021-05-10	65.8.17.7 (ClassC)
2021-05-10	65.8.17.12 (ClassC)
2021-05-12	13.33.69.58 (ClassC)
2021-06-06	13.225.61.118 (ClassC)
2021-07-04	52.84.138.108 (ClassC)
2021-07-07	13.225.221.115 (ClassC)
2021-07-07	13.225.221.55 (ClassC)
2021-07-21	13.226.201.76 (ClassC)
2021-07-21	13.226.201.60 (ClassC)
2021-07-22	13.225.66.49 (ClassC)
2021-07-27	99.84.64.88 (ClassC)
2021-07-28	13.225.63.9 (ClassC)
2021-07-28	52.222.149.124 (ClassC)
2021-08-02	143.204.98.129 (ClassC)
2021-08-25	99.86.113.69 (ClassC)
2021-08-30	65.9.73.24 (ClassC)
2021-09-02	13.227.222.120 (ClassC)
2021-09-02	99.86.118.28 (ClassC)
2021-09-03	13.225.50.113 (ClassC)
2021-10-04	65.8.158.122 (ClassC)
2021-10-19	74.208.5.20 (ClassC)
2022-03-04	18.65.229.80 (ClassC)
2022-09-22	18.64.155.51 (ClassC)
2022-09-27	18.172.134.48 (ClassC)
2023-02-28	99.84.108.116 (ClassC)
2023-05-03	13.33.252.19 (ClassC)
2023-06-30	13.226.175.31 (ClassC)
2023-11-10	204.246.191.113 (ClassC)
2024-01-09	18.239.199.123 (ClassC)
2024-07-27	18.239.199.18 (ClassC)
2024-08-20	99.84.66.99 (ClassC)
2024-08-30	3.163.165.66 (ClassC)
2024-10-11	99.84.66.8 (ClassC)
2024-10-17	3.163.165.110 (ClassC)
2024-10-22	3.163.165.38 (ClassC)
2024-11-01	99.84.66.17 (ClassC)
2024-11-05	99.84.66.103 (ClassC)

Subdomains

Date	Domain	IP
ntp1.doctor.com	2024-10-27	50.205.244.20
a.doctor.com	2014-11-16	192.225.218.51
blog.doctor.com	2024-08-06	54.210.191.150
star.doctor.com	2024-02-15	18.239.199.65
pop3.star.doctor.com	2024-02-16	99.84.66.17
mail.star.star.doctor.com	2024-09-11	99.84.66.99
ls.doctor.com	2024-06-09	34.226.184.3
assets.doctor.com	2022-03-12	108.156.91.101
aws.doctor.com	2024-06-06	99.84.66.8
ls-widget.doctor.com	2024-08-18	18.161.6.102
www.doctor.com	2014-07-13	192.225.218.51
10.118.180.25www.doctor.com	2024-03-30	3.163.165.38

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]