Domain > loca.betrule.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to loca.betrule.com

MD5	A/V
0ff3276a01ae66bff8ba6d41e7a8a3d6	[Trojan.Rimecud.AA] [Win32/Kryptik.AVIR] [W32/Kryptik.AVIR!tr] [Win32/Cryptor] [Trojan.Win32.Rimecud] [Trojan*Win32/Rimecud.A] [Troj/Rimecud-DI] [TROJ_RIMECUD.SMW]
c620e2beedc4e8a11efcde919d59a64a	[Trojan.Rimecud.AA] [Win32/Kryptik.BUTP] [W32/Bflient.YA!tr] [Trojan.Win32.Rimecud] [W32/Worm-FFD!C620E2BEEDC4] [Trojan*Win32/Rimecud.A] [Troj/Rimecud-DJ] [WORM_PALEVO.SMBX] [BScope.Malware-Cryptor.Dofoil.2813]
67598a193f9eb8a9af81130e39c524f0	[W32.MassiveUsbL.Worm] [Trojan.Rimecud.AA] [W32/Worm-FGC!67598A193F9E] [Trojan.Palevo] [Trojan.Win32.Palevo.bjeycm] [Rimecud.CBSF] [Worm.P2P.Palevo!GmUcCsxpowk] [Troj/Rimecud-DI] [TrojWare.Win32.Kryptik.AUDQ] [Win32.HLLW.Autoruner.44048] [TROJ_RIMECUD.SMW] [Worm.Palevo.gs.(kcloud)] [Trojan:Win32/Rimecud.A] [Worm/Win32.Palevo] [Trojan.Win32.Rimecud] [W32/Kryptik.AVIR!tr] [Win32/Cryptor]
323a18fa3de434f60d5239071410adf4	[Win32/Cryptor]
c13abb6be8a1c7fc9b18c8fd0a9488b7	[Trojan.Rimecud.U] [Trojan.Inject] [Trojan.Kryptik!3hP78epND/Y] [Suspicious.Cloud] [TROJ_RIMECUD.SMX] [TrojWare.Win32.Kryptik.AOFK] [Win32.HLLW.Autoruner1.14825] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Troj/Rimecud-DD] [Trojan:Win32/Rimecud.A] [Trojan/Win32.Inject] [Malware-Cryptor.Grygoryi.3] [Trojan.Win32.Rimecud] [W32/Kryptik.AOFK!tr] [Win32/Cryptor]
05dc3704bfd74d1909044274f9182039	[VitroWin32Vitro] [Trojan.Rimecud.AA] [Win32.HLLW.Autoruner.44048] [Win32/Kryptik.AVIR] [W32/Kryptik.AVIR!tr] [Win32/Cryptor] [Trojan.Win32.Rimecud] [W32/Worm-FGC!05DC3704BFD7] [Trojan*Win32/Rimecud.A] [Troj/Rimecud-DI] [TROJ_RIMECUD.SMW]
320254d93eec664c0bf9c0da3a5de061	[W32.HobokC.Trojan] [Trojan.Rimecud.AA] [W32/Worm-FGC!320254D93EEC] [Trojan.Win32.Palevo.bybbhp] [Rimecud.CBSF] [Worm.P2P.Palevo!UTXh1AYBXRw] [TrojWare.Win32.Kryptik.AUDQ] [Win32.HLLW.Autoruner.44048] [TROJ_RIMECUD.SMW] [Troj/Rimecud-DI] [Worm/Palevo.bnpi] [Worm[P2P]/Win32.Palevo] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Rimecud.A] [Worm/Win32.Palevo] [Trojan.Win32.Rimecud] [W32/Kryptik.AVIR!tr] [Win32/Cryptor]
99060901a7294a924042498375855833	[Win32/Cryptor]
94685cac057265ba9b0457239923240e	[Trojan.Rimecud.U] [Win32.HLLW.Autoruner1.14825] [Win32/Kryptik.BQJA] [W32/Kryptik.AOFK!tr] [Win32/Cryptor] [Trojan.Win32.Rimecud] [Trojan.Inject] [Trojan*Win32/Rimecud.A] [Troj/Rimecud-DD] [TROJ_RIMECUD.SMX] [Malware-Cryptor.Grygoryi.3]
390356aa6d253114208eca84354e4528	[VitroWin32Vitro] [Trojan.Rimecud.AA] [Win32.HLLW.Autoruner.44048] [Win32/Kryptik.AVIR] [W32/Kryptik.AVIR!tr] [Win32/Cryptor] [Trojan.Win32.Rimecud] [W32/Worm-FGC!390356AA6D25] [Trojan*Win32/Rimecud.A] [Troj/Rimecud-DI] [TROJ_RIMECUD.SMW] [Worm.Palevo]
1d70a885000fa13055b074c0d1a48a11	[W32.MassiveUsbL.Worm] [Trojan.Rimecud.AA] [W32/Worm-FGC!1D70A885000F] [Trojan.Win32.Palevo.bgycfq] [Rimecud.CBSF] [Troj/Rimecud-DI] [TrojWare.Win32.Kryptik.AUDQ] [Win32.HLLW.Autoruner.44048] [TROJ_RIMECUD.SMW] [Trojan[:HEUR]/Win32.Unknown] [Worm.Palevo.gr.(kcloud)] [Trojan:Win32/Rimecud.A] [Worm/Win32.Palevo] [Worm.Palevo] [Trojan.Win32.Rimecud] [W32/Kryptik.AVIR!tr] [Win32/Cryptor]
6cad5ad7f18d810146a8e39b2bb0bb30	[HW32.Ecepton.zgio] [Trojan.Win32.Rimecud.1!O] [Trojan.Rimecud.U] [Trojan.Inject] [Rimecud.BHGX] [Trojan.Win32.Autoruner1.ceihzn] [Win32.HLLW.Autoruner1.14825] [Trojan.Kryptik.Win32.495875] [TROJ_RIMECUD.SMX] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Troj/Rimecud-DD] [Pack.Mal.AntiVM] [Trojan:Win32/Rimecud.A] [Trojan/Win32.Inject] [Malware-Cryptor.Grygoryi.3] [Virus.Win32.Cryptor] [W32/Kryptik.AOFK!tr] [Win32/Cryptor] [Win32/Trojan.a9e]
bee986018d9bae6e9402db9d8a601a32	[Win32/Cryptor]
69455ac7bb80136bd2a6b443f51f7971	[Win32/Cryptor]
5740eea91aa1ac6f04414fe2d1bf39b1	[W32.FavilogLTL.Trojan] [Trojan.Win32.Rimecud.2!O] [Trojan.Rimecud.AA] [Trojan.Graftor] [Trojan.Win32.Autoruner.cohjaz] [TrojWare.Win32.Kryptik.APQL] [Win32.HLLW.Autoruner.44048] [Trojan.Kryptik.Win32.367794] [WORM_PALEVO.SMBX] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Troj/Rimecud-DG] [Pack.Mal.AntiVM.a] [Trojan:Win32/Rimecud.A] [BScope.Malware-Cryptor.2712] [Virus.Win32.Cryptor] [W32/Palevo.MATH!worm] [Win32/Cryptor]
aa97b33d2295a003decf3b060afba582	[Win32/Cryptor]
1941070ccaa8af9533296199118f0464	[Win32/Cryptor]
293f6b9a2466486bc08789ea179dfaee	[Trojan.Rimecud.U] [Win32/Kryptik.BIZA] [W32/Kryptik.AXKY!tr] [Win32/Cryptor] [Virus.Win32.Cryptor] [Trojan*Win32/Rimecud.A] [Mal/EncPk-ADK] [BScope.Malware-Cryptor.6313]
4bba2acccc48923ef0355d8cb69c17f1	[W32.MassiveUsbL.Worm] [Trojan.Rimecud.AA] [W32/Worm-FGC!4BBA2ACCCC48] [Trojan.Win32.Palevo.bhjgcg] [Rimecud.CBSF] [Troj/Rimecud-DI] [TrojWare.Win32.Kryptik.AUDQ] [Win32.HLLW.Autoruner.44048] [TROJ_RIMECUD.SMW] [Worm[P2P]/Win32.Palevo] [Worm.Palevo.gr.(kcloud)] [Trojan:Win32/Rimecud.A] [Worm/Win32.Palevo] [Worm.Palevo] [Trojan.Win32.Rimecud] [W32/Kryptik.AVIR!tr] [Win32/Cryptor]
52f5533d51dcb4430e8fab75e64aeb9f	[Trojan.Rimecud.U] [Win32.HLLW.Autoruner.44048] [Win32/Kryptik.BORP] [W32/Kryptik.AXKY!tr] [Win32/Cryptor] [Win32.SuspectCrc] [Trojan*Win32/Rimecud.A] [Mal/EncPk-ADK] [TROJ_SPNR.38KH13] [BScope.Malware-Cryptor.6313]

Whois

Property	Value
Email	admin@newvcorp.com
NameServer	NS2626.ZTOMY.COM
Created	2015-01-01 00:00:00
Changed	2015-01-08 00:00:00
Expires	2016-01-01 00:00:00
Registrar	DOMAINSOVERBOARD.COM

DNS Resolutions

Date	IP Address
2013-04-01	37.9.53.46 (ClassC)
2013-04-01	37.9.53.29 (ClassC)
2013-04-01	37.9.53.36 (ClassC)
2013-04-22	5.152.194.242 (ClassC)
2013-05-17	5.152.194.242 (ClassC)
2013-07-10	37.123.113.15 (ClassC)
2013-08-09	103.11.228.201 (ClassC)
2013-08-20	62.106.98.38 (ClassC)
2013-09-26	193.111.255.6 (ClassC)
2013-09-27	193.111.255.6 (ClassC)
2013-10-09	212.227.52.30 (ClassC)
2013-10-16	188.138.89.106 (ClassC)
2013-10-24	37.123.118.232 (ClassC)
2013-11-19	198.199.115.248 (ClassC)
2013-12-01	91.234.32.60 (ClassC)
2013-12-10	46.38.233.21 (ClassC)
2014-10-16	141.8.230.53 (ClassC)
2014-11-04	141.8.230.53 (ClassC)
2015-07-27	141.8.226.14 (ClassC)
2016-07-06	204.11.56.48 (ClassC)
2017-02-17	208.91.197.46 (ClassC)
2018-04-02	54.175.183.209 (ClassC)
2018-04-02	54.209.179.105 (ClassC)
2018-04-26	52.71.210.200 (ClassC)
2018-05-09	52.86.22.136 (ClassC)
2018-05-25	54.174.212.152 (ClassC)
2018-06-08	52.72.111.108 (ClassC)
2018-06-11	54.208.174.161 (ClassC)
2018-06-17	52.5.103.164 (ClassC)
2018-06-19	54.80.72.81 (ClassC)
2018-06-24	54.208.222.184 (ClassC)
2018-07-10	52.70.242.69 (ClassC)
2018-07-15	52.55.168.146 (ClassC)
2018-07-17	54.165.156.210 (ClassC)
2018-07-28	52.73.115.80 (ClassC)
2018-08-12	54.209.58.131 (ClassC)
2018-08-13	52.5.142.190 (ClassC)
2018-08-15	54.208.75.210 (ClassC)
2018-08-15	52.72.89.116 (ClassC)
2018-08-16	52.6.128.155 (ClassC)
2018-08-16	52.54.24.134 (ClassC)
2018-08-30	54.174.45.28 (ClassC)
2018-09-12	52.7.6.73 (ClassC)
2018-09-16	54.152.137.87 (ClassC)
2018-09-16	52.4.66.100 (ClassC)
2018-10-07	52.6.46.72 (ClassC)
2018-10-10	52.87.45.42 (ClassC)
2018-10-18	52.5.251.20 (ClassC)
2018-10-23	54.144.21.246 (ClassC)
2018-10-29	52.3.123.192 (ClassC)
2018-10-31	52.54.154.33 (ClassC)
2018-10-31	52.55.164.156 (ClassC)
2018-11-07	52.22.89.169 (ClassC)
2018-11-15	52.6.234.76 (ClassC)
2018-11-28	52.73.179.54 (ClassC)
2018-11-28	54.208.56.179 (ClassC)
2018-11-30	52.86.122.241 (ClassC)
2018-11-30	54.165.193.163 (ClassC)
2020-03-16	18.211.9.206 (ClassC)
2020-04-23	3.234.181.234 (ClassC)
2020-06-13	23.234.21.200 (ClassC)
2020-08-02	104.171.167.151 (ClassC)
2020-08-21	112.175.238.117 (ClassC)
2020-08-28	192.161.81.242 (ClassC)
2020-09-13	192.161.81.245 (ClassC)
2021-01-26	103.125.85.33 (ClassC)
2023-07-16	103.244.150.57 (ClassC)
2024-01-11	67.21.93.227 (ClassC)
2024-01-26	67.21.93.240 (ClassC)
2024-03-18	104.160.169.206 (ClassC)
2024-04-04	107.167.27.94 (ClassC)
2024-04-21	107.167.27.85 (ClassC)
2024-05-10	107.167.27.78 (ClassC)
2024-05-27	208.98.40.208 (ClassC)
2024-05-30	208.98.40.201 (ClassC)
2024-06-15	64.32.14.146 (ClassC)
2024-06-27	208.98.40.75 (ClassC)
2024-07-10	208.98.40.210 (ClassC)
2024-07-13	104.160.169.204 (ClassC)
2024-07-24	208.98.40.205 (ClassC)
2024-08-08	208.98.40.71 (ClassC)
2025-04-14	13.248.169.48 (ClassC)
2025-05-02	76.223.54.146 (ClassC)

Port 80

Subdomains

Date	Domain	IP
ns1.betrule.com	2013-09-09	103.11.228.201
ns2.betrule.com	2013-09-09	103.11.228.201
loca.betrule.com	2014-10-16	141.8.230.53
www.betrule.com	2024-12-03	76.223.54.146

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]