Domain > tracking.brownswitch.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to tracking.brownswitch.com

MD5	A/V
74bd6b64f00ea7ad38e206c3d9c3fa41	[WS.Reputation.1] [Ukra.EBB]
308966f7c9927b24400bfc331c6a9835	[Artemis!308966F7C992] [BehavesLike.Win32.Downloader.dc] [Amonetize] [NSIS.Application.Crypted.C] [Ukra.EBB]
f0ea76125cb471725a3d380861d2581e	[Trojan.Amonetize.12] [Amonetize] [Adware/Amonetize.kpa] [NSIS.Application.Crypted.C] [Adware.Win32.Amonetize.bCG] [Win32/Amonetize.CG] [Ukra.EBB] [Win32/Virus.Adware.b9e]
5f9b7b7cec938f2aecbccb7f79726baa	[Trojan.Amonetize.12] [BehavesLike.Win32.Downloader.dc] [Amonetize] [NSIS.Application.Crypted.C] [Ukra.EBB]
d1ab9dbbeebece59a13c13fc529b2b6d	[Artemis!D1AB9DBBEEBE] [Trojan.Amonetize.12] [BehavesLike.Win32.Downloader.dc] [Amonetize] [NSIS.Application.Crypted.C] [Ukra.EBB]
c67eeb1b93d53b43bdd9eff16c230b78
4b23f683644d29bd35770d4fa5b918a1	[Win32/Injector.CHZU] [TR/Injector.283904]
6c5bdab31f070a048e7b0eab576ca0a8	[W32.HfsAdware.995A] [Trojan/W32.Inject.356576] [Trojan.Inject.r4] [Trojan.MalPack] [Trojan.Win32.Inject.dwsgwq] [PUA.SwVersionUpdater] [Trojan.Win32.Inject.vhdw] [Mal/Wonton-BB] [Trojan.Amonetize.6508] [Trojan.Inject.Win32.178605] [Artemis!Trojan] [AdWare/Amonetize.equ] [TR/Crypt.ZPACK.77482] [Trojan/Win32.Yakes] [Artemis!6C5BDAB31F07] [Win32.Trojan.Inject.Wqdn] [Trojan.Win32.Yakes] [W32/Yakes.MBOW!tr] [Trj/CI.A] [Win32/Trojan.bd9]

Whois

Property	Value
NameServer	NS21024.ZTOMY.COM
Created	2015-12-30 00:00:00
Changed	2015-12-30 00:00:00
Expires	2016-12-30 00:00:00
Registrar	DOMAINGAZELLE.COM LL

DNS Resolutions

Date	IP Address
2014-11-07	104.28.23.36 (ClassC)
2014-11-12	104.28.22.36 (ClassC)
2014-11-12	104.28.23.36 (ClassC)
2014-12-31	199.27.134.173 (ClassC)
2014-12-31	199.27.135.173 (ClassC)
2016-03-31	104.130.124.96 (ClassC)
2016-08-19	192.230.92.93 (ClassC)
2017-04-29	54.164.249.255 (ClassC)
2017-04-30	34.199.238.33 (ClassC)
2017-06-04	54.85.127.70 (ClassC)
2017-06-07	52.204.129.22 (ClassC)
2017-06-14	54.210.39.66 (ClassC)
2017-06-29	54.210.118.206 (ClassC)
2017-07-01	52.7.234.86 (ClassC)
2017-07-02	54.172.131.220 (ClassC)
2017-07-31	52.71.185.125 (ClassC)
2017-08-03	52.72.203.158 (ClassC)
2018-04-30	52.86.22.136 (ClassC)
2018-05-28	54.174.212.152 (ClassC)
2018-05-28	54.208.174.161 (ClassC)
2018-06-19	52.5.103.164 (ClassC)
2018-06-19	54.80.72.81 (ClassC)
2018-07-31	52.54.24.134 (ClassC)
2018-08-02	52.5.142.190 (ClassC)
2018-08-02	52.72.89.116 (ClassC)
2018-08-18	54.208.75.210 (ClassC)
2018-08-18	52.6.224.208 (ClassC)
2018-08-29	54.174.45.28 (ClassC)
2018-08-29	52.7.6.73 (ClassC)
2018-10-07	52.6.46.72 (ClassC)
2018-10-09	52.5.251.20 (ClassC)
2018-10-09	52.87.45.42 (ClassC)
2018-11-13	52.6.234.76 (ClassC)
2018-11-19	54.208.56.179 (ClassC)
2018-11-19	52.73.179.54 (ClassC)
2020-10-17	18.211.9.206 (ClassC)
2021-01-09	3.223.115.185 (ClassC)
2021-11-23	3.211.232.13 (ClassC)
2021-11-25	44.193.156.166 (ClassC)
2021-12-03	44.196.154.128 (ClassC)
2021-12-09	3.19.92.76 (ClassC)
2021-12-10	3.136.48.51 (ClassC)
2023-12-21	3.94.41.167 (ClassC)
2024-01-11	34.205.242.146 (ClassC)
2024-07-18	54.209.32.212 (ClassC)
2024-08-03	3.140.13.188 (ClassC)
2024-08-08	3.130.204.160 (ClassC)
2024-08-31	3.18.7.81 (ClassC)
2024-11-25	52.86.6.113 (ClassC)
2025-01-09	3.19.116.195 (ClassC)
2025-01-16	18.119.154.66 (ClassC)
2025-03-21	3.130.253.23 (ClassC)
2025-04-20	54.161.222.85 (ClassC)
2025-04-24	52.71.57.184 (ClassC)
2025-06-30	44.213.46.149 (ClassC)
2025-08-05	13.216.111.180 (ClassC)
2025-08-11	13.223.25.84 (ClassC)

Port 80

Subdomains

Date	Domain	IP
trackingold.brownswitch.com	2024-02-21	52.86.6.113
tracking.brownswitch.com	2014-11-12	104.28.23.36

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]