Domain > crowdsystem.net

More information on this domain is in AlienVault OTX

Files that talk to crowdsystem.net

MD5	A/V
16c1c21e08ab875dc2026d0dd07050f8	[Win32/Cryptor] [Trojan.FBLock] [TrojanSpy*Win32/Nivdort.V]
eb42fbdcf4c774edd1daeac55c59ffc4	[W32/Trojan.EGQW-5001] [Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock]
172f6aa52d94d63a5d834b6fac49e7e0	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock]
f068fc833cdea7b2c2367f6a995b918b	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock]
edf4980f075421b360b2a2d5eb81238a	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock]
2d9543685e6bb0ddf98e7c94aca43c6d	[Trojan-DownloaderW32/Verse.A] [Win32/Cryptor] [Trojan.FBLock] [Trojan.HBCrypter] [PWSZbot-FCTZ!2D9543685E6B] [TrojanWin32/Dynamer!ac]
ee923d003c6c3c8a9519132b4536e01d	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock]
dd79c32f99065a4a2423c0a61eb68e8c	[Trojan.Dynamer.AC3] [Win32/Cryptor] [Trojan.FBAccountLock]

DNS Resolutions

Date	IP Address
2015-05-16	-
2019-10-26	72.26.218.81 (ClassC)
2019-11-13	72.26.218.77 (ClassC)
2020-01-07	72.26.218.72 (ClassC)
2020-02-08	72.26.218.84 (ClassC)
2020-04-21	64.95.103.189 (ClassC)
2025-06-14	92.112.198.106 (ClassC)
2025-08-29	147.79.120.64 (ClassC)
2025-08-29	148.135.128.56 (ClassC)
2025-08-29	92.112.198.165 (ClassC)
2025-08-31	77.37.53.4 (ClassC)
2025-09-01	148.135.128.127 (ClassC)
2025-09-01	91.108.98.77 (ClassC)
2025-09-02	91.108.98.0 (ClassC)
2025-09-02	77.37.83.227 (ClassC)
2025-09-14	148.135.128.14 (ClassC)
2025-09-22	147.79.120.167 (ClassC)
2025-10-30	77.37.76.82 (ClassC)
2025-11-22	147.79.120.174 (ClassC)
2025-12-09	77.37.76.75 (ClassC)
2025-12-24	77.37.76.77 (ClassC)
2026-01-13	147.79.120.45 (ClassC)

Port 443

HTTP/1.1 200 OKDate: Sat, 14 Jun 2025 17:54:09 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveVary: Accept-Encodingcache-control: no-cache, privateset-cookie:

!DOCTYPE html>html  langar dirrtl >head>    meta charsetUTF-8>    meta nameviewport contentwidthdevice-width, initial-scale1.0>    meta http-equivX-UA-Compatible contentieedge>        link relstylesheet hrefhttps://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/css/bootstrap.rtl.min.css 		integritysha384-dpuaG1suU0eT09tx5plTaGMLBsfDLzUCCUXOY2j/LSvXYuG6Bqs43ALlhIqAJVRb 		crossoriginanonymous	>                style>		@import url(https://fonts.googleapis.com/css2?familyCairo:wght@200..1000&displayswap);    /style>    link relstylesheet hrefhttps://crowdsystem.net/css/style.css>    title>Foowj | فوج/title>/head>body>    nav classnavbar navbar-home navbar-expand-lg bg-body-tertiary>        div class container-fluid px-2 px-sm-5 >            a classnavbar-brand href/>h1 classheader-logo>Foowj | فوج/h1>/a>            button classnavbar-toggler typebutton data-bs-togglecollapse data-bs-target#navbarNavAltMarkup aria-controlsnavbarNavAltMarkup aria-expandedfalse aria-labelToggle navigation>                span classnavbar-toggler-icon>/span>            /button>            div classcollapse navbar-collapse idnavbarNavAltMarkup>                div classnavbar-nav>                    li classnav-item dropdown  ml-3  >                        form actionhttps://crowdsystem.net/changeLanguage methodget>                            input typehidden name_token valuexQnakG0vqYfWUrGQwbErhPHEESh7HTyIloEK516p autocompleteoff>                            div classdropdown-item>button typesubmit classlang-icon lang-icon-ar  lang-icon-active                                 namelocale valuear                                 disabled                                 >Ar/button>                            /div>                            div classdropdown-item>button typesubmit classlang-icon lang-icon-en                                  namelocale valueen                                                                >En/button>                            /div>                        /form>                    /li>                    li clas

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > crowdsystem.net

Is this malicious?

Files that talk to crowdsystem.net

DNS Resolutions

Port 80

Port 443