Domain > xx.sqlteam.info

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to xx.sqlteam.info

MD5	A/V
934798206ff93b4a1f3050df910dccaa	[W32.Virut.D] [W32/Virut] [W32/Virut.10640.B] [W32.Virut.U] [W32/Virut.P] [Win32:Virut] [Win32.Virut.q] [Virus.Win32.Virut.q] [Win32.Virut.5] [W32/Virut.V] [PE_VIRUT.XP-4] [W32/Vetor-A] [Win32/Virut.10639.B] [Suspicious] [Win32.Virut.V] [Virus:Win32/Virut.AE] [Win32.Virut.M] [Win32/Virut.D] [W32/MetaCrypt.1] [BackDoor.RBot.KB]
3c4dc4d38d2300340fc1c52e15233d26
ea30d66dac03f71ba99fbae863d3105c	[W32.Clod3ff.Trojan.044c] [I-Worm.Kolabc.aau] [W32/Sdbot.worm] [W32/Kolabc.aau] [Packed/NiceProtect] [W32/Heuristic-210!Eldorado] [Obfuscated_FA] [Win32/Tnega.BSF] [WORM_RBOT.EVD] [Net-Worm.Win32.Kolabc.aau] [Trojan.Win32.Kolabc.ntru] [Mal/EncPk-AF] [BackDoor.IRC.Sdbot.11819] [Backdoor.IRCBot.Win32.3131] [Heuristic.LooksLike.Win32.Suspicious.C] [Worm.Kolabc.a.(kcloud)] [Worm.Win32.Kolabc.Az] [PE:Backdoor.Win32.Rbot.hgq!1074920051] [Win32.SuspectCrc] [BackDoor.RBot.EB] [W32/Gaobot.OXI.worm] [Win32/Backdoor.eb9]
6cc80a3998c22da0d56a8863cb2f807a	[W32.Virut.E] [Trojan.Backdoor] [Virus] [W32/Virut.AV] [Virus.Win32.Virut.ljfw] [W32/Backdoor2.GJBG] [Backdoor.Trojan] [Virut.G[gs]] [Win32/Virut.7115] [PE_VIRUT.AV] [Win32:Virtob] [Win32.Backdoor] [W32.Virut-17] [Virus.Win32.Virut.av] [W32/Virut-W] [Virus.Win32.Virut.AV] [Win32.Virut.30] [W32/Virut.AX] [Heuristic.LooksLike.Win32.SuspiciousPE.C] [Win32/Virut.af] [Win32.Virut.xf.57344] [Virus:Win32/Virut.AC] [W32/Virut.7116] [Win32/Virut.B] [Virus.Virut.07] [Win32/Virut.AV] [Win32.Virut.ak] [Backdoor.Win32.Nepoe] [Win32/Virut] [W32/Virutas.FG]
314885801d2b6687b658a2685ff11231	[W32.Vetor.PE] [Virus/W32.Virut.D] [Packed.Win32.Katusha.3!O] [W32.Virut.D] [Virus.Virut.Win32.14] [Virus.Win32.Virut.jxol] [W32/Virut.AJ] [W32.IRCBot] [Virut.P] [Win32/Virut.10416] [PE_VIRUT.XQ-1] [Win32:Virut] [Virus.Win32.Virut.n] [Win32.Virut.J] [Win32.Virut.5] [W32/Virut.R] [Heuristic.LooksLike.Win32.SuspiciousPE.J] [W32/Vetor-A] [Win32/Virut.f] [Virus/Win32.Virut.n] [Win32.Virut.ce.57344] [Virus:Win32/Virut.AH] [Win32/Virut.D] [Virus.Virut.07] [Win32/Virut.NAJ] [Trojan-Dropper.Win32.Delf] [W32/MetaCrypt.2] [Dropper.Delf.5.AA] [Virus.Win32.Virut.$q] [Virus.Win32.Virut.K]
3c42ff7faf1a99665afe2acaddbbcb79	[W32.Clodb50.Trojan.72ed] [Backdoor.Bot.101446] [W32/Kolabc.abv] [Trojan.Win32.VanBot.wzrl] [W32/Trojan.BWZZ] [Malware.AULA] [Win32/Linkbot.MI] [Net-Worm.Win32.Kolabc.abv] [Packed/NiceProtect] [Backdoor.Win32.VanBot.129536] [Backdoor.Win32.Poebot] [BackDoor.IRC.Sdbot.2665] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/EncPk-AF] [Backdoor/VanBot.fr] [Worm.Kolabc.(kcloud)] [Backdoor:Win32/Poebot] [W32/Trojan.TRYP-3696] [Virus.Win32.Heur.d] [Worm.Kolab] [Worm.Win32.Kolabc.AqN] [Win32/Poebot] [PE:Backdoor.Win32.VanBot.dm!1074926267] [BackDoor.RBot.BI]
ebb01d71dd377a66b110f5a8ec66c056	[W32.Clodabe.Trojan.8009] [Backdoor/W32.VanBot.76389] [Backdoor.VanBot.ax.n7] [Artemis!EBB01D71DD37] [Worm.Kolabc.Win32.748] [W32/Kolabc.bqo] [Worm.Poebot!e+wLFwztW/M] [W32/Spybot.AGFL-3484] [Malware.ATMZ] [TROJ_POEBOT.AEV] [Net-Worm.Win32.Kolabc.bqo] [Trojan.Win32.VanBot.xqbl] [Backdoor.Win32.VanBot.76389] [PE:Backdoor.Win32.VanBot.b!1074903806] [W32/Poebot-LP] [BackDoor.IRC.Sdbot.1464] [TROJ_POEBOT.AEV] [BehavesLike.Win32.Vundo.lc] [W32/Spybot.QXQ] [TR/Dldr.Multi.76389] [Win32.Hack.VanBot.b.(kcloud)] [Win32/IRCBot.worm.variant] [Worm.Win32.Kolabc.aLLf] [Win32.Worm-net.Kolabc.Anpg] [Backdoor.Win32.Nepoe] [BackDoor.RBot.BI] [W32/Gaobot.OXI.worm] [Win32/Trojan.Multi.a00]

Whois

Property	Value
Name	Registration Private
Organization	Domains By Proxy, LLC
Email	SQLTEAM.INFO@domainsbyproxy.com
Zip Code	85260
City	Scottsdale
State	Arizona
Country	US
Phone	+1.4806242599
Fax	+1.4806242598
NameServer	ns2.echo-source.com
Created	2013-01-17 14:15:18
Changed	2015-01-18 12:18:50
Expires	2016-01-17 14:15:18
Registrar	GoDaddy.com, LLC (R1

DNS Resolutions

Date	IP Address
2013-09-18	192.155.89.148 (ClassC)
2018-07-03	96.126.108.195 (ClassC)
2018-07-03	139.162.148.254 (ClassC)
2018-07-03	45.33.43.33 (ClassC)
2018-07-03	172.105.234.29 (ClassC)
2019-01-14	139.162.120.150 (ClassC)
2019-01-14	50.116.17.41 (ClassC)
2022-08-31	127.0.0.1 (ClassC)
2024-11-05	23.235.163.147 (ClassC)

Port 80

Subdomains

Date	Domain	IP
xt.sqlteam.info	2014-01-02	192.155.89.148
xx.sqlteam.info	2014-07-22	192.155.89.148

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]