Domain > rapstar.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to rapstar.com

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
d2f2c9e7b5d32c5114a2f8511d9efcc2
e9a5bc168334d1c8371468d3e033ad32
5e6ffe3abdc1caa35ee40b0a1908bf4c	[Win32/Tnega.XfYFUAD] [BackDoor.Bulknet.967] [Win32/Injector.AIRV] [W32/Injector.AHLB!tr] [Trojan-Downloader.Win32.Karagany] [Trojan.Crypt.NKN] [PWS-Zbot-FAQD!5E6FFE3ABDC1] [TrojanDownloader*Win32/Cutwail.BS] [winpe/Kryptik.CBZD] [TROJ_FIDOBOT.SM0] [Trojan.Buzus]
7e265cfaa3a92f9b07c518dcbe577262	[Crypt_s.BOF] [TrojanDownloader*Win32/Cutwail.BS]
622bf7ba2317ae03b0682a650bac03d8	[TrojanDownloader.Cutwail] [Cutwail-FBPN!622BF7BA2317] [W32.Pilleuz] [Pushdo.I] [TROJ_SPNR.1ADR13] [Backdoor.Win32.Pushdo.pyz] [Backdoor.Pushdo!kokJ8DxObyw] [Heur.Suspicious] [BackDoor.Bulknet.893] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor.Win32.U.Pushdo.41472] [Backdoor/Win32.Pushdo] [W32/Backdoor.PJEO-2224] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PYZ!tr.bdr] [SHeur4.BGUF] [Trj/OCJ.D]
f14ca0281fdf75a0f52f52b66e6884ea
bf4fa138741ec4af0a0734b28142f7ae	[Crypt2.BLVD] [TrojanDownloader*Win32/Cutwail.BS]
e57d3b285148fa02129b9c0044aa8737	[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
82d62080e472af17170f4752ebd4ebd1	[W32.Pilleuz] [Pushdo.G] [Backdoor.Win32.Pushdo.pwz] [Heur.Suspicious] [BackDoor.Bulknet.847] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor.Win32.S.Pushdo.36864] [W32/Backdoor.SFNI-6924] [Malware.Pilleuz!rem] [Win32/Wigon.PH] [Trojan.Crypt] [W32/Pushdo.PWZ!tr.bdr] [SHeur4.BFXO]
526d28005ca16009f4c37f6319d6bfa3	[Trojan/W32.Jorik.46592.DO] [Trojan] [Trojan/Kryptik.bfdk] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qme] [Backdoor.Pushdo!ksoXPDwu2Y4] [UnclassifiedMalware] [BackDoor.Bulknet.958] [VirTool:Win32/Obfuscator.AHU] [Backdoor/Win32.Pushdo] [Trojan.Jorik.Cutwail] [Backdoor.Win32.Pushdo] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ] [Trj/CI.A]
baa408ed5bf00d6bbc48d25119f9e412	[SHeur4.BLIR] [PWS-Zbot-FBFS!BAA408ED5BF0]
28450f092671f0a9243e0810ed8bf536	[W32.UsernameBiomoefC.Trojan] [Trojan/W32.Inject.37376.AD] [Backdoor.Win32.Pushdo!O] [TrojanDownloader.Cutwail.BS4] [Spyware.Password] [Backdoor.Pushdo.Win32.8] [Backdoor/Pushdo.b] [Trojan.Wigon!2ViUZd+YYyE] [New] [Win32/Wigon.PB] [Mal_DLDER] [WIN.Trojan.Pushdo-16] [Backdoor.Win32.Pushdo.b] [Trojan.Win32.Pushdo.bgkqij] [Backdoor.Win32.A.Pushdo.37376[h]] [Trojan.DownLoader6.62576] [Mal_DLDER] [Downloader-FKQ!28450F092671] [Backdoor/Pushdo.a] [W32/Pushdo.B!tr.bdr] [Trojan[Backdoor]/Win32.Pushdo] [Win32.Hack.Pushdo.(kcloud)] [Backdoor/Win32.Pushdo] [TrojanDownloader:Win32/Cutwail.BS] [Downloader-FKQ!28450F092671] [Backdoor.Pushdo] [Trj/OCJ.A] [Win32.Backdoor.Pushdo.Hqlp] [Backdoor.Win32.Pushdo.b]
0b75cdeaeb63b2216d2727393dfbc55f	[Backdoor/W32.Pushdo.38336] [Backdoor.Pushdo.avg] [Trojan/Kryptik.aqqc] [Riskware] [Trojan.Win32.XPACK.bctdtl] [W32.Pilleuz] [Pushdo.B] [TROJ_SPNR.35AA13] [Backdoor.Win32.Pushdo.avg] [Trojan.Kryptik!R9c1iw1k6TE] [Backdoor.Win32.A.Pushdo.38336] [UnclassifiedMalware] [TROJ_SPNR.35AA13] [Backdoor/Pushdo.ng] [Win32.Hack.Pushdo.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Malware.Pilleuz!rem] [Suspicious] [Backdoor.Win32.Pushdo] [W32/Pushdo.AVG!tr.bdr] [Trj/OCJ.A]

Whois

Property	Value
NameServer	NS22.DOMAINCONTROL.COM
Created	1998-10-12 00:00:00
Changed	2015-08-18 00:00:00
Expires	2020-10-11 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2013-01-22	68.178.232.100 (ClassC)
2013-06-19	50.63.202.56 (ClassC)
2013-08-27	50.63.202.56 (ClassC)
2014-07-02	192.186.232.71 (ClassC)
2019-10-01	192.186.232.71 (ClassC)
2020-03-14	192.124.249.64 (ClassC)
2020-03-16	192.124.249.162 (ClassC)
2020-08-23	104.18.42.63 (ClassC)
2020-08-23	104.18.43.63 (ClassC)
2025-02-24	2606:4700:3035::6815:25a4 (ClassC)
2025-02-24	2606:4700:3034::ac43:d294 (ClassC)
2025-08-03	104.21.37.164 (ClassC)
2025-08-07	172.67.210.148 (ClassC)

Port 80

Subdomains

Date	Domain	IP
mail.rapstar.com	2025-04-24	104.21.37.164
www.rapstar.com	2025-05-25	172.67.210.148

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]