Domain > roadrunner.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to roadrunner.com

MD5	A/V
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
d2f2c9e7b5d32c5114a2f8511d9efcc2
8853f5fd8f3fd57284ad4c702fcb40a1	[Win32/Zbot.G] [W32/Ramnit.C] [Virus*Win32/Ramnit.P] [W32.Ramnit-1]
b34430b8e494c41f86c5aa47b002a212	[Crypt2.AZDS]
970a7ea91d4845a5c13d26b6fa4664a0	[HW32.CDB.95aa] [PWSZbot-FBOS!970A7EA91D48] [Trojan.Crypt.NKN] [TROJ_FORUCON.BMC] [Trojan.Win32.Inject.nnuq] [TR/Dropper.VB.7310] [Virus.Win32.Heur.p] [SHeur4.BWOZ]
e21b3469b4fc1efddf76d8c89f1ebb2a	[Malware.Packer.HGX1] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
833009a54c295a72ad64ab0941f482fe	[Suspicious.Cloud.5] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [TR/Crypt.EPACK.9220] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/FakeAV-UF] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GIF] [Trojan.Win32.Kryptik.BZOO]
ddeca0855c9bb584c270ff6c5f0521c2	[Artemis!DDECA0855C9B] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qij] [UnclassifiedMalware] [TR/Dldr.Cutwail.4] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PH] [W32/Kryptik.AX!tr] [Trj/CI.A]
924be15014f785cb08ccda07be93344c	[HW32.CDB.954a] [Trojan.Gatak.r3] [Spyware.Password] [TROJ_GATAK.SMZ] [UnclassifiedMalware] [Trojan.Inject1.39822] [Trojan:Win32/Gatak] [W32/Trojan.YPKT-3534] [Trojan.Win32.Dropper.Arz] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.SuspectCRC] [W32/Kryptik.BWVS!tr] [Crypt3.CQE] [Win32/Trojan.e46]
a84c15fb551aa1de0ff9af31f4cad0f6	[Worm.Gamarue.B] [Trojan-Downloader] [TROJ_SPNR.0BDA13] [Trojan-Downloader.Win32.Andromeda.ubd] [Trojan.DL.Andromeda!gQAduHfFSvg] [Trojan.Win32.A.Downloader.137216.WB] [Troj/Dloadr-DSB] [UnclassifiedMalware] [BackDoor.Andromeda.22] [TR/Dldr.Andromeda.ubd] [Win32.Troj.Undef.(kcloud)] [Worm:Win32/Gamarue.F] [W32/Backdoor.JHEQ-4682] [TrojanDownloader.Andromeda] [Worm.Win32.Gamarue] [W32/Andromeda.UBD!tr.dldr]
27213d33434bf796a9f535ec98e8a918	[HW32.CDB.03b6]
709622547c3e4b44144047282940995b	[HW32.CDB.9120] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!iLXsQOxcJ2A] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dprt] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.AP]
c7bf064346fafe4fc55b43abcfe96b00	[HW32.CDB.E6f3] [Backdoor.Kelihos.r3] [Backdoor.Hlux!zUFIktBYK3s] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfw] [Trojan.Win32.S.PSW-Tepfer.835600.AM] [UnclassifiedMalware] [BackDoor.Slym.14049] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.QQUO-1304] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUC] [Trojan.Win32.Kryptik.BZIX]
64d63f2465d931818539beff1ca66a34	[Crypt2.AATE] [TR/Rogue.1134088]
df902d85a5aebee35007be327e9f54d2	[HW32.CDB.7c9b] [Malware.Packer.FFS] [Mal/FakeAV-UF] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Symmi]
57be65340d0a4336f525d108862ccf50
180ca5d4cc13a8e8aee4156b2ee389c5
a307aebabac30c0aef35b4c9c4e9176b	[Trojan.Downloader] [Virus] [Trojan.Win32.MLW.diqnd] [Suspicious.Cloud.5] [Mal/Palevo-B] [Trojan.Spambot.11951] [Trojan:Win32/Nedsym.G] [Trojan/Win32.Yakes] [Trojan.Yakes] [Trojan.Win32.Nedsym]
8889d486a91b3448e8b429ef99a536d0	[HW32.CDB.1cb9] [Trojan.Win32.Kryptik.cwzoai] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnla] [Backdoor.Hlux!yM05ScK42o0] [Trojan.Packed.26544] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.DNLA!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
34961ffc0f75d89da0b9464a4c7a02b1	[Backdoor.Win32.Pushdo.qag] [BackDoor.Bulknet.893] [Win32.Heur.KVMF58.hy.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Trojan-Downloader.Win32.Cutwail]

Whois

Property	Value
Email	wbol-admin@warnerbros.com
NameServer	DNS2.RR.COM
Created	1994-05-18 00:00:00
Changed	2014-09-06 00:00:00
Expires	2016-10-07 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2012-07-05	75.180.132.91 (ClassC)
2013-06-07	68.168.75.89 (ClassC)
2013-10-09	24.28.199.168 (ClassC)
2013-11-02	24.28.199.168 (ClassC)
2021-10-29	47.43.26.7 (ClassC)
2025-08-05	71.74.186.228 (ClassC)
2025-08-13	71.74.180.193 (ClassC)

Subdomains

Date	Domain	IP
rrshop.roadrunner.com	2025-06-28	34.149.79.74
smtp.ROADRUNNER.COM	2025-08-07	107.14.166.72
homepages.roadrunner.com	2014-03-11	71.74.42.238
www.roadrunner.com	2014-02-28	71.74.42.238

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]