Domain > hi.vrbrothers.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to hi.vrbrothers.com

MD5	A/V
C1C832076B2D74418351DE52A2A476E9
76efcae1c7ed2fda8d5cc9c20b4fc8f7	[Win32/Huhk.B] [W32/Huhk.c] [W32/Huhk.C] [Virus*Win32/Huhk.7005] [WIN.Virus.Huhk]
90e28d7353128a805139ffdfa6aa53f5	[TR/Kazy.3931297] [Win32.SuspectCrc]
1e8dc922082043b3e3030d6eba720c2f	[Trojan.KeyLogger!FgsaJnmDOao] [WS.Reputation.1] [Trojan.KeyLogger.22407]
b7c780dd88f54e96a20b18a09336ecd0	[W32.SapinH.Trojan] [Dropper-FDT!B7C780DD88F5] [Trojan.Chad] [Trojan] [Riskware] [Trojan.Win32.KillProc.bhfswr] [Trojan-Dropper.Win32.Injector.hxth] [Trojan.DR.Injector!2C5HE1NOQMw] [Trojan.KillProc.22109] [TR/Graftor.Elzob.23147.17] [Win32.Troj.Undef.(kcloud)] [W32/Trojan.KWQP-2816] [Dropper/Win32.Injector] [TrojanDropper.Injector] [Trojan.SuspectCRC]
e43be2aa3dd182d8132f17ec409cead7	[W32.WasamalaX.Trojan] [Trojan-FBJW!E43BE2AA3DD1] [Trojan.Downloader] [Riskware] [Trojan.Win32.KillProc.bfqtoc] [Trojan-Dropper.Win32.Injector.hxbu] [Trojan.DR.Injector!N0RYAcm/t/k] [TR/Sisproc.A.2850] [TrojanDropper.Injector.bmmj] [Win32.Troj.Injector.HX.(kcloud)] [Trojan:Win32/Sisproc] [Dropper/Win32.Injector] [W32/Backdoor.FNOJ-3926] [TrojanDropper.Injector] [Trojan.Crypt] [Trojan.Win32.Injector.aGL]
F6F1BAD04144B30B194C0ECED9456DB3
485a7b0b845efe4d3cff01176b1a0e0f	[TrojanDropper.Small.g4] [Win.Trojan.Small-4143] [Trojan.MulDrop4.59457] [W32/Small.KCK!tr] [Trojan-Dropper.Win32.Small] [Trojan-Dropper.Win32.Small.kck] [Bot-FGM!485A7B0B845E] [Trojan.Zbot]
e2c94f66447acb4bd5e38cf56cc4dc9b	[Backdoor.Bot] [HV_SMALL_CG153883.RDXN] [Win.Trojan.6215880] [Trojan.Win32.KeyLogger.bsksbj] [UnclassifiedMalware] [BehavesLike.Win32.Sality.rc] [Bot-FGM!E2C94F66447A]
05bcddf2edd37f9863a6a65c749a7e20	[Trojan.KeyLogger!m7C97jqDMPA] [UnclassifiedMalware] [Trojan.KeyLogger.24093] [BehavesLike.Win32.BadFile.rh] [Artemis!05BCDDF2EDD3] [Win32.SuspectCrc]
52fd3b85f37c75b3388f6a007d4a37f1

Whois

Property	Value
NameServer	F1G1NS2.DNSPOD.NET
Created	2001-02-20 00:00:00
Changed	2014-11-05 00:00:00
Expires	2016-02-20 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-06-06	58.22.105.204 (ClassC)
2013-06-06	220.162.238.241 (ClassC)
2013-06-13	117.27.152.239 (ClassC)
2013-10-18	58.22.108.238 (ClassC)
2013-10-18	58.22.108.239 (ClassC)
2013-10-23	58.22.108.238 (ClassC)
2014-04-24	58.22.108.233 (ClassC)
2014-04-24	58.22.108.233 (ClassC)
2015-01-11	117.27.152.233 (ClassC)
2015-02-01	117.27.152.233 (ClassC)
2015-04-20	117.27.152.245 (ClassC)
2015-05-15	-
2015-07-02	117.27.139.156 (ClassC)
2015-08-14	117.27.139.155 (ClassC)
2017-07-04	119.28.72.26 (ClassC)
2017-07-04	47.52.76.218 (ClassC)
2019-03-14	58.22.105.198 (ClassC)
2025-04-11	117.27.139.134 (ClassC)
2025-05-12	117.27.139.140 (ClassC)
2025-08-11	125.77.20.67 (ClassC)

Port 80

Subdomains

Date	Domain	IP
ad.vrbrothers.com	2014-08-19	58.22.108.233
hi.vrbrothers.com	2015-01-11	117.27.152.233
DOWN.VRBROTHERS.COM	2014-08-19	58.22.108.233
down.vrbrothers.com	2014-11-06	117.27.152.233
bbs.vrbrothers.com	2014-02-09	58.22.108.44
tw.vrbrothers.com	2014-12-11	117.27.152.233
www.vrbrothers.com	2014-12-04	117.27.152.233

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]