Domain > rg.mc.surewest.net

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to rg.mc.surewest.net

MD5	A/V
abe19665682ad3e10ba09471775c150b	[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E]
9aa81fa022c0b159758efa1bda4f9be1	[HW32.CDB.A20b] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dthd] [UnclassifiedMalware] [BackDoor.Slym.13011] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Win32.Backdoor.Hlux.Hwcu] [Trojan.Crypt3] [W32/Kryptik.BD!tr] [Crypt3.OHL] [Backdoor.Win32.Hlux.Ac]
1cc0cfa5485d814b67ace50cb0a5b100	[HW32.CDB.E978] [Kryptik.CDQY] [UnclassifiedMalware] [Trojan.Packed.26527] [Backdoor:Win32/Kelihos] [W32/Trojan.KUPJ-3598] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKU]
165f5084043893cc35334b568d0f6ec0	[HW32.CDB.73df] [Packed.Win32.Katusha.3!O] [Win32.Malware!Drop] [Backdoor.Hlux!tc7SLh6zR0c] [WS.Reputation.1] [Kryptik.CCFN] [UnclassifiedMalware] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Backdoor.Win32.Kelihos] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.aBgj] [Win32/Trojan.337]
1623be5a046aa215162665c5067332e0	[HW32.CDB.Db63] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan-PSW.Win32.Tepfer.tybm] [Trojan.PWS.Tepfer!sA6n+JUlMF8] [UnclassifiedMalware] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Trojan.YSDP-3009] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Trojan.Win32.InfoStealer.aRBP]
4db0e2318885466883cc47fb4c11b695	[FakeSecTool-FCX!4DB0E2318885] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1] [W32/Kelihos.DE!tr]
15d18c6131366d57c2dd18d866444746	[HW32.CDB.2393] [Packed.Win32.Katusha.3!O] [Trojan/Kryptik.djh] [Hlux.ZY] [Backdoor.Win32.Hlux.dtsu] [UnclassifiedMalware] [BackDoor.Slym.13011] [TR/Kryptik.oenzk] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [W32/Trojan.XKZV-6012] [Win32/Kryptik.CBNK] [Trojan.Crypt3] [W32/Hlux.DJH!tr.bdr] [Crypt3.OLP] [Backdoor.Win32.Hlux.Aq]
9844a1b8a10ed4568240ae7a528bef5d	[HW32.CDB.Bf28] [Backdoor.Kelihos] [Malware.Packer.OCD] [Trojan.PWS.Tepfer!vHSA+Pr89Pk] [Kryptik.CCFN] [Win32/Kelihos.baJHSHD] [Trojan-PSW.Win32.Tepfer.tokd] [Trojan.Win32.Kryptik.cvtteo] [UnclassifiedMalware] [BackDoor.Slym.13304] [TR/Crypt.EPACK.53967] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/FakeAv.BWUN!tr] [Crypt_s.GCT] [Trojan.Win32.InfoStealer.AZ] [Win32/Trojan.65e]
2bb1e0a0c6f6082824d6fd9d4095bcd0	[Malware.Packer.SCD] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.BDPK!tr]
c86f315b840f993b805369f3a29ba797	[HW32.CDB.9f50] [Packed.Win32.Katusha.3!O] [Crypt_s.GNC]
ac060fe3ad9f83b8f9b39ff01f7cb6ab	[Trojan.Inject.RRE] [WS.Reputation.1] [Backdoor.Win32.Androm.ter] [UnclassifiedMalware] [Trojan.Winlock.6426] [BDS/Androm.ter] [Mal/EncPk-AJU] [Win32/Extats.A]
d2146bca3681a7a8f3a93946bdee1a4f	[Riskware] [Posible_Worm32] [WS.Reputation.1] [TROJ_SPNR.1AE313] [Backdoor.Win32.Androm.ptv] [Backdoor.Androm!NM4iXFfRb7U] [UnclassifiedMalware] [Trojan.Inject2.23] [BDS/Androm.ptv] [Heuristic.LooksLike.Win32.Suspicious.F!81] [Mal/ZboCheMan-N] [Worm:Win32/Gamarue.I] [Trojan/Win32.Tepfer] [W32/Backdoor.PRDM-5289] [Win32/TrojanDownloader.Wauchos.I] [Worm.Win32.Gamarue] [W32/Kryptik.AX!tr] [Trj/OCJ.E]
fe734b28009c7dd5389f64d72722bb21
1ca8bda50d98c89332d39dbaf3aac976	[HW32.CDB.29c0] [Packed.Win32.Katusha.3!O] [Trojan.Win32.Kryptik.cxmkag] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC]
14a2291e48bd02b528d0c018fee03e86	[HW32.CDB.A3eb] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [Trojan.Packed.26581] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.XULT-7356] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.CBCJ!tr] [Crypt_s.GNC]

Whois

Property	Value
NameServer	AUTH2.SUREWEST.NET
Created	2001-02-09 00:00:00
Changed	2015-01-11 00:00:00
Expires	2016-02-09 00:00:00
Registrar	TUCOWS DOMAINS INC.

DNS Resolutions

Date	IP Address
2013-12-02	66.60.130.16 (ClassC)
2025-01-15	66.60.128.52 (ClassC)

Subdomains

Date	Domain	IP
auth2.surewest.net	2024-08-31	66.60.130.104
kc.surewest.net	2024-07-04	64.126.4.183
rg.mc.surewest.net	2013-12-02	66.60.130.16

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]