Domain > dunwoodypress.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://www.malware-traffic-analysis.net/2016/01/29...

https://otx.alienvault.com/pulse/56afd5714637f2355...

Files that talk to dunwoodypress.com

MD5	A/V
8dc9dc5ec88bcc177314d3747f4ba0ba	[Trojan.PasswordStealer] [Win32/Trojan.Multi.daf]
2b8ef43d17480e5119e6b8747fca7bb7	[Trojan.Win32.Swizzor.1!O] [Artemis!2B8EF43D1748] [Win32/Filecoder.CryptoWall.G] [RANSOM_CRYPWALL.YUYAHM] [Trojan-Ransom.Win32.Cryptodef.acvj] [Troj.Ransom.W32.Cryptodef!c] [RANSOM_CRYPWALL.YUYAHM] [BehavesLike.Win32.PWSZbot.fc] [TR/Crypt.Xpack.431887] [Ransom:Win32/Crowti.A] [Inject3.YRA] [Trj/CryptoWall.A]
70d61955b47790c63cc60ba45136d145	[Ransom.Crowti.r5] [Ransom.CryptoWall] [Uds.Dangerousobject.Multi!c] [Trojan.Inject!TiQlTNmw0FQ] [Win32/Filecoder.CryptoWall.G] [Ransom_CRYPWALL.USVNB04] [Trojan.Win32.Inject.vttq] [Trojan.Win32.ZPACK.dzyrru] [Ransom_CRYPWALL.USVNB04] [BehavesLike.Win32.AdwareLoudmo.hc] [W32/Trojan.QLNU-1504] [TR/Crypt.ZPACK.189764] [Trojan/Win32.Inject] [Ransom:Win32/Crowti.A] [RDN/Suspicious.bfr] [Trj/CI.A] [Trojan.Win32.Filecoder] [W32/Filecoder_CryptoWall.G!tr] [FileCryptor.GMW] [Trojan.Win32.CryptoWall.G]
e0849785b1184853a518669c10ae63ff	[W32.eHeur.Downloader] [Trojan.Win32.Swizzor.1!O] [Suspicious.Cloud.5] [BehavesLike.Win32.Ramnit.fc] [Virus.Win32.Heur.l]

Whois

Property	Value
NameServer	NS2.DOTSTER.COM
Created	2000-04-04 00:00:00
Changed	2015-08-08 00:00:00
Expires	2016-04-04 00:00:00
Registrar	DOMAIN.COM, LLC

DNS Resolutions

Date	IP Address
2024-11-17	3.33.130.190 (ClassC)
2024-12-27	15.197.148.33 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
www.dunwoodypress.com	2024-11-24	3.33.130.190

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]