Domain > x-br.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to x-br.com

MD5	A/V
c9a826315513b779f5422241dee962a0	[W32.Clod142.Trojan.a36c] [Backdoor/W32.Bancodor.459264] [Backdoor.Bancodor.bf] [Backdoor/Bancodor.bf] [Backdoor.Bancodor!gnEMONJn5Ig] [W32/Backdoor2.ESFH] [Backdoor.Badcodor] [Malware] [Win32/Bancos.KRU] [Win.Trojan.Bancodor-9] [Backdoor.Win32.Bancodor.bf] [Trojan.Win32.Bancodor.ixmy] [Backdoor.Win32.Bancodor.~D] [Trojan.Hosts.3340] [BDS/Bancodor.BF.2] [Trojan/Win32.Hupigon.gic] [Win32.Hack.Bancodor.bf.(kcloud)] [Trojan:Win32/Cosisrop!rts] [Backdoor.Win32.Bancodor.459264.E] [W32/Backdoor.LGHP-6744] [Win32/Spy.Banker.QFG] [Backdoor.Bancodor] [Backdoor.Win32.Bancodor.aEBA] [Win32.Backdoor.Bancodor.cyjo] [Trojan-Downloader.Win32.Banload] [W32/Bancodor.BF!tr.bdr] [Win32/DH{gQwgJCIlBg8DLg}] [Bck/Bancodor.BG]
9cb33aeebb6fa6a699136bd0efd37c9c	[W32.Clod49c.Trojan.c0e0] [Trojan-Spy/W32.Banker.182272.B] [TrojanBanker.Banker.efo] [PWS-Banker] [Trojan/Banker.efo] [Trojan.Win32.Banker.phhc] [W32/NewMalware-LSU-based!Maximu] [Infostealer.Bancos] [Banker.CPSY] [TSPY_BANKER.JFZ] [Trojan-Banker.Win32.Banker.efo] [TrojanSpy.Banker!d0hvemCOqQI] [Trojan.Win32.Banker.182272] [TrojWare.Win32.TrojanDownloader.Dadobra.~JH9] [Trojan.DownLoader.43145] [Mal/Behav-130] [TrojanSpy.Banker.kdp] [Win32.TrojDownloader.Delf.c.(kcloud)] [Trojan/Win32.Banker] [Trj/Banker.FWD] [Trojan-Spy.Win32.Banker.qu] [Malware_fam.gw] [Trojan.Win32.Banker.aowU]
ca59d89a072c33c1026a802683ccfd08	[W32.Clod20d.Trojan.850b] [Backdoor/W32.Bancodor.173568.B] [Backdoor.Bancodor.bd] [Backdoor/Bancodor.bd] [Backdoor.Bancodor!Ve8jEChZOFg] [W32/Backdoor2.EAYN] [Backdoor.Badcodor] [Backdoor.Win32.Bancodor.bd] [Trojan.Win32.Bancodor.iyhd] [Backdoor.Win32.Bancodor.173568] [Virus.Win32.Heur.l] [Backdoor.Win32.Bancodor.~D] [Trojan.Hosts.3339] [BDS/Bancodor.BD] [Trojan[Backdoor]/Win32.Bancodor] [Win32.Hack.Bancodor.bd.(kcloud)] [Trojan:Win32/Comame!gmb] [Win-Trojan/Bancodor.173568.C] [W32/Backdoor.DHLQ-7153] [Win32/TrojanDownloader.Banload.OLP] [Bck/Bancodor.BG] [Win32.Backdoor.Bancodor.Szbl] [W32/Bancodor.BD!tr.bdr] [Win32/DH{gQwgLiQiJQYPA1dnTg}] [Backdoor.Win32.Bancodor.aHH] [Win32/Trojan.Downloader.b79]
5174c12b046d4ddc5d500350b86b38a9	[W32.Clod900.Trojan.3254] [PWS-Banker] [Trojan.KillAV] [Trojan/Spy.Banker.nzm] [Trojan.Win32.Banpaes.bcaxtm] [Bloodhound.Bancos.1] [Win32/RedT_i] [Mal_Banker] [Trojan.Bancos-3784] [Trojan-Banker.Win32.Banker.nzm] [Packed/Upack] [Packed.Win32.UPack] [Packed.Win32.Klone.~KMG] [BackDoor.Bigben.107] [Mal_Banker] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Mal/Banspy-K] [TrojanSpy.Banker.qdg] [Win32.Troj.Banker.(kcloud)] [VirTool:Win32/Obfuscator.C] [Trojan/Win32.Banker] [Trojan-Banker.Win32.Banker.vfk] [Trj/Banker.IMM] [PE:Trojan.Spy.Win32.Banpeas.a!1075041863] [Trojan-Spy.Win32.Banker.bkz] [Malware_fam.gw] [Luhe.Fiha.A] [Trojan.Win32.Banker.ai]
d82dad8890c383b0232a5fa3328a57c8	[W32.Clod4c8.Trojan.424c] [Trojan-Spy/W32.Banker.934400] [TrojanBanker.Banker.hey] [PWS-Banker] [Trojan.Banker.Win32.33897] [Trojan/Banker.hey] [Trojan.Win32.Banker.phhk] [W32/Banker.BCBZ] [Trojan.PWS.QQPass] [Win32/FakeIE_i] [Trojan-Banker.Win32.Banker.hey] [TrojanSpy.Banker!QoRbNGXJFHI] [Win32.Trojan-banker.Banker.Wqcz] [Mal/DelpBanc-A] [TrojWare.Win32.Spy.Banker.hey] [Trojan.PWS.Banker.17571] [PWS-Banker] [TrojanSpy.Banker.mpn] [TrojanDownloader:Win32/Banload.ZY] [Trojan.Win32.A.Banker.934400.B] [W32/Banker.RXEP-1062] [Trojan/Win32.Banker] [TrojanBanker.Banker] [Trojan.Win32.Banker.aM] [Trojan-Banker.Win32.Banker] [Malware_fam.gw] [Win32/Delf] [Trj/CI.A]
c069d6d92e2cce98263b8388cb2531a5
6e33ef5dbdca7ba95eea889058616d26

Whois

Property	Value
Email	EUDES@HOSTNET.COM.BR
NameServer	NS2.K8.COM.BR
Created	1998-11-18 00:00:00
Changed	2014-03-27 00:00:00
Expires	2019-11-17 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2013-07-24	187.73.33.49 (ClassC)
2025-10-26	104.156.247.183 (ClassC)
2025-12-06	45.55.107.236 (ClassC)
2026-01-29	108.61.89.136 (ClassC)

Port 80

Subdomains

Date	Domain	IP
www.mpipoca.x-br.com	2025-11-18	187.73.33.64
jacob-camila.x-br.com	2015-01-09	46.137.248.174
www.testegian.x-br.com	2025-12-10	187.73.33.64
www.eduardo.x-br.com	2026-01-27	187.73.33.64
adriano.x-br.com	2018-11-05	104.131.38.137
www.tocadotatu.x-br.com	2015-01-22	187.73.33.51
www.fusionpw.x-br.com	2025-12-08	187.73.33.64
www.mux.x-br.com	2026-01-26	187.73.33.64
aprendiz.x-br.com	2025-10-28	45.55.107.236
amysql.aprendiz.x-br.com	2025-08-05	104.156.247.183
filipeluz.x-br.com	2013-08-17	187.73.33.43

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]