Domain > securestudies.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to securestudies.com

MD5	A/V
37b9070bfbc74ee584b01de29d129911	[HW32.CDB.Ec9a] [Heur.Trojan.Hlux]
1623be5a046aa215162665c5067332e0	[HW32.CDB.Db63] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan-PSW.Win32.Tepfer.tybm] [Trojan.PWS.Tepfer!sA6n+JUlMF8] [UnclassifiedMalware] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Trojan.YSDP-3009] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Trojan.Win32.InfoStealer.aRBP]
61b408e2de1c4996c3708f1f46913d60	[HW32.CDB.C1b5] [Trojan.Kryptik!QyFpAm9uzfY] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djft] [Trojan.Win32.S.PSW-Tepfer.835600.AI] [UnclassifiedMalware] [BackDoor.Slym.14044] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan/Win32.Tepfer] [W32/Trojan.AJYO-7526] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUF] [Trojan.Win32.Kryptik.BZIX]
3209b25b5988bb055d56e1b1e6382e40	[HW32.CDB.53d8] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twjg] [Mal/FakeAV-UF] [TrojWare.Win32.Kryptik.CASU] [Trojan.Packed.26544] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.ELDJ-0755] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GPK] [Trojan.Win32.InfoStealer.As]
c86f315b840f993b805369f3a29ba797	[HW32.CDB.9f50] [Packed.Win32.Katusha.3!O] [Crypt_s.GNC]
914c63052f0694efe5c231d14c135d36	[HW32.CDB.D6a5] [TrojanPSW.Tepfer.r3] [Trojan.PWS.Tepfer!8N7nPFhLHXs] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twri] [Trojan.Win32.Kryptik.cxajaq] [Mal/FakeAV-UF] [UnclassifiedMalware] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Tepfer.CASL!tr.pws] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
d38a3646d932d062528aea48d2122315
4be57c95dd1e77ba6b00af63f6c5d79a	[BackDoor.Slym.1498] [BDS/Kelihos.F.5092] [Win32.PSWTroj.Tepfer.hd.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor/Win32.Kelihos] [Backdoor.Win32.Kelihos] [W32/Kelihos.JI!tr]
30faa031b0c6122bc91cff8996474b4a	[HW32.CDB.E594] [Trojan.Inject2]
03e452e4771eb7bfef9f331b259e3f40	[HW32.CDB.1d3e] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dsfd] [Backdoor.Hlux!SjVJGb/HMIs] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13011] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.MalPacked] [W32/Trojan.RSYC-6534] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.AgM] [Win32.Backdoor.Hlux.Glo] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC]
a480649c0695ca403c2650c2f5ec4796	[HW32.CDB.6149] [Packed.Win32.Katusha.1!O] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.QbYCJQ] [Backdoor.Win32.Hlux.dqiv] [Backdoor.Hlux!zx6Z3QU4CJg] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [W32/Trojan.TGXU-8116] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.Backdoor.Hlux.Lmai] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBCJ]
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]
89d895e8bf8443f9f8a6f72ae12168db	[Artemis!89D895E8BF84] [PUP.Optional.Conduit.A] [Downloader] [Adware.Conduit.30] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [NSIS.Application.SearchProtect.U] [Win32/Toolbar.Conduit] [NS:PUF.SilenceInstaller!1.9DDF] [PUP/Conduit.A]
6a8d99bd15e0bbeaa7f1dba78e1968fd	[Trojan.ADH.2] [Win.Adware.Linkular] [ApplicUnwnt] [Adware.WebDevAz.3] [Adware.BrowseFox/Variant] [Win32/Adware.RK.AN] [Win32.Trojan.Falsesign.Wqnl] [AdInstaller.E] [Adware.Win32.RK.BAN]
2fffef929d43527efc4fc019ce16eb02	[Artemis!2FFFEF929D43] [PUP.Optional.Conduit.A] [WS.Reputation.1] [Downloader] [NS:PUF.SilenceInstaller!1.9DDF] [Adware.Conduit.30] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [NSIS.Application.SearchProtect.U] [PUP/Conduit.A] [Win32/Toolbar.Conduit]
34afbc967c708655ea11a55aa0009541	[Artemis!4F4E78B2A224] [PUP.Optional.Conduit.A] [Downloader] [NS:PUF.SilenceInstaller!1.9DDF] [Adware.Conduit.30] [NSIS.Application.SearchProtect.U] [PUP/Conduit.A] [Win32/Toolbar.Conduit]
4f780a1b5399bed529443ba6c5ad4a40	[Adware.WebDevAz.3] [Adware.BrowseFox/Variant] [Win32/Adware.RK.AN] [AdInstaller.E]
18ef1f8d62eef65f40475b8f7517a85e	[W32.HfsAdware.81DC] [SAPE.Heur.b144] [Trojan.Win32.Vittalia.dyuttm] [Trojan.Vittalia.1116] [Backdoor.PePatch.Win32.91479] [GrayWare[AdWare]/Win32.DownloadAdmin.p] [Trojan.Application.Bundler.DownloadAdmin.4] [PUA.DownloadAdmin]
8dc521c7fb7aa1b7ace18db22dd7356d	[W32.HfsAdware.81DC] [Backdoor.PePatch.Win32.91479] [Trojan.Application.Bundler.DownloadAdmin.4] [SAPE.Heur.b144] [Win.Trojan.Downloadadmin-255] [Trojan.Win32.Vittalia.dyuttm] [Application.Win32.DownloadAdmin.RP] [Trojan.Vittalia.1116] [GrayWare[AdWare]/Win32.DownloadAdmin.p] [PUA.Win32.Dowadmin]
5c1ca2db87e1f6b063937802d8e71047	[W32.HfsAdware.81DC] [Trojan.Win32.Vittalia.dyuttm] [SAPE.Heur.b144] [Win.Trojan.Downloadadmin-255] [Application.Win32.DownloadAdmin.RP] [Trojan.Vittalia.1116] [Backdoor.PePatch.Win32.91479] [Artemis] [GrayWare[AdWare]/Win32.DownloadAdmin.p] [Artemis!5C1CA2DB87E1] [PUA.Win32.Dowadmin] [Riskware/DownloadAdmin]

Whois

Property	Value
Email	domain-admin@tmrginc.com
NameServer	NS1-213.AKAM.NET
Created	2005-08-17 00:00:00
Changed	2015-07-17 00:00:00
Expires	2016-08-17 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2011-03-14	165.193.78.234 (ClassC)
2011-07-08	165.193.73.40 (ClassC)
2012-05-18	209.247.226.38 (ClassC)
2012-05-21	66.119.33.170 (ClassC)
2012-05-24	205.217.176.8 (ClassC)
2012-10-15	165.193.78.186 (ClassC)
2013-05-22	4.30.14.104 (ClassC)
2013-05-30	205.217.167.8 (ClassC)
2013-07-21	66.119.33.138 (ClassC)
2013-07-31	4.26.45.200 (ClassC)
2013-08-09	63.208.138.230 (ClassC)
2013-08-10	66.119.34.42 (ClassC)
2013-09-14	66.119.41.145 (ClassC)
2013-09-17	4.79.209.230 (ClassC)
2013-09-18	209.247.230.166 (ClassC)
2014-03-25	4.71.251.70 (ClassC)
2014-04-30	8.25.104.115 (ClassC)
2014-05-02	4.26.66.51 (ClassC)
2014-05-31	4.26.66.40 (ClassC)
2014-06-01	205.218.48.168 (ClassC)
2014-06-01	4.26.66.168 (ClassC)
2014-06-01	4.26.66.211 (ClassC)
2014-06-10	165.193.78.187 (ClassC)
2014-06-20	165.193.78.217 (ClassC)
2014-08-01	165.193.93.104 (ClassC)
2014-09-10	4.26.66.200 (ClassC)
2014-10-16	23.63.126.98 (ClassC)
2014-10-19	4.26.67.40 (ClassC)
2014-10-24	4.26.67.104 (ClassC)
2015-04-25	95.100.78.98 (ClassC)
2025-01-19	165.193.78.155 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
mx0.securestudies.com	2025-01-01	66.119.41.14
survey2.securestudies.com	2024-03-10	99.84.66.86
oss-content.gta.securestudies.com	2014-09-16	205.218.48.200
dpd.securestudies.com	2014-06-06	2.19.222.98
beacon.securestudies.com	2024-03-13	204.246.191.7
rkinstaller.securestudies.com	2014-05-26	4.26.66.232
rules.securestudies.com	2013-11-27	205.218.48.200
oss-content.securestudies.com	2013-11-13	205.218.48.200
post.securestudies.com	2014-04-25	165.193.78.234
tst-post.securestudies.com	2025-01-01	66.119.41.145
www.securestudies.com	2025-01-01	165.193.78.155
survey.securestudies.com	2024-06-26	3.163.24.64
rkverify.securestudies.com	2014-05-26	4.26.66.232

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]