Domain > xxdrgdurxx.ws

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to xxdrgdurxx.ws

MD5	A/V
1e1cddf7bfad6e1d6d3c733d85d1d96d	[Infostealer.Donx] [TROJ_GE.DB5455AD] [Trojan-Ransom.Win32.Foreign.lfgn] [W32/KeyLogger.OLW!tr] [Trojan.Win32.KeyLogger.bODN] [Win32/Trojan.Ransom.097]
576ac427eab4256032b1bbe7f6a358f9
2854e4c27e4d058c6a7b32570c3fcaaa	[Spyware.KeyLogger] [Infostealer.Donx] [VBKrypt.ITP] [Trojan-Ransom.Win32.Foreign.lfnn] [Troj/VB-HSZ] [BehavesLike.Win32.Rontokbro.cm] [Trojan/Win32.Dynamer] [Trojan.Win32.VB] [W32/KeyLogger.OLW!tr]
446ebae6c751e99d60eab6d8f4bb878e
a9514dac6197ad58bf43c4906c70b89d
2f195beb481da492d23656053a3f92fd	[Infostealer.Donx] [VBKrypt.ITP] [Trojan-Ransom.Win32.Foreign.lfnn] [Troj/VB-HSZ] [Trojan.Win32.VB] [W32/KeyLogger.OLW!tr]
7a7f53012e171dedd95c92fd2ad8c0e2	[Artemis!7A7F53012E17] [Trojan.Ransom.Foreign] [Infostealer.Donx] [Trojan-Ransom.Win32.Foreign.lfgn] [Trojan.Win32.Foreign.dhpvdb] [Trojan.Win32.S.Foreign.1290336] [Win32.Trojan.Foreign.Ajch] [Trojan.DownLoader11.38987] [BehavesLike.Win32.PWSZbot.th] [W32/Keylogger.BAHP-5961] [Trojan:Win32/Brologx.A] [Trojan/Win32.Foreign] [W32/KeyLogger.OLW!tr] [Trojan.Win32.Ransom.AXWi]
932fc7acc8e8ca5803b7d0f81f1d0a68
9bb6e8a5c7b553b67839654757fd0e14	[Trojan.Keylogger.FS] [Trojan-Ransom.Win32.Foreign.lfdb] [BehavesLike.Win32.Downloader.fh] [Troj/VB-HRV] [W32/KeyLogger.OLW!tr]
c4e6936009ce734173e20ccf211f82df
4cf632da9aa7b1271fe48d7b6c6fa7c9	[Artemis!A86C9021C816] [Spyware.KeyLogger] [VBKrypt.ITP] [Trojan-Ransom.Win32.Foreign.lfnn] [Heur.Dual.Extensions] [HEUR_NAMETRICK.A] [Troj/VB-HSZ] [W32/Heuristic-300!Eldorado] [Trojan.Win32.VB] [W32/KeyLogger.OLW!tr] [Trojan.Win32.KeyLogger.BODN]
126d061bcab363e0ddfbcfab52f26ce3	[W32/Banker.EXFF-3933] [Infostealer.Donx] [VBKrypt.ITP] [Trojan-Ransom.Win32.Foreign.lfnn] [Troj/VB-HSZ] [BehavesLike.Win32.PWSZbot.ch] [W32/Banker2.WX] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Dynamer] [Trojan.Win32.VB] [W32/KeyLogger.OLW!tr] [Trojan.Win32.Ransom.AL] [Win32/Trojan.Ransom.088]
a5c4cecd8f9f8e79e1b3177467e432c4	[Artemis!A5C4CECD8F9F] [Infostealer.Limitail] [BackDoor.Andromeda.404] [BehavesLike.Win32.Backdoor.fc] [TR/Dropper.MSIL.91105] [Trojan/Win32.Kazy] [Trojan.MSIL.Injector.BFZI]
ebecfaea00dc13741c23c0caf1c8f602
bcc35894a451a6b69412620e78a6f788	[W32/Trojan3.LVF] [Trojan-Ransom.Win32.Foreign.lfkb] [Mal/Ransom-CW] [W32/Trojan.FLVR-3705] [W32/KeyLogger.OLW!tr]

DNS Resolutions

Date	IP Address
2014-07-10	5.199.167.26 (ClassC)
2014-11-10	167.160.46.17 (ClassC)
2014-11-10	167.160.46.17 (ClassC)
2016-06-20	209.99.40.221 (ClassC)
2016-06-30	64.70.19.34 (ClassC)
2019-03-01	173.230.130.175 (ClassC)
2025-08-06	64.70.19.203 (ClassC)

Port 80

Subdomains

Date	Domain	IP
www.xxdrgdurxx.ws	2014-10-28	5.199.167.26

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]