Domain > ns2.thebuisness.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to ns2.thebuisness.com

MD5	A/V
3b0e3e6a3c1589de01da44905db1a705
d0428bc4ee19f8c739ef5b299c2118f5	[Backdoor.Win32.Bifrose] [Trojan.Typic] [Trojan-Downloader.Win32.Dapato.stb] [Trojan.Downloader.WCA] [ObfuscatedAKN!hb!D0428BC4EE19] [TrojanDownloader*Win32/Tonick!rfn] [Malware.Trojan.Typic] [Win32/TrojanDownloader.VB.OSN] [W32/Dapato.KQ!tr.dldr] [TROJ_AG.6ADCF040] [Backdoor.DDA501D481E62633] [Win32/Fruspam.GF] [TrojanDownloader.VB] [Dropper.Typic.Win32.736]
0929434c2098ecdc01daf2a391932293	[Win32/Fruspam.GF] [Trojan.Typic] [Malware.Trojan.Typic] [TrojanDownloader.VB] [TROJ_AG.6ADCF040] [Trojan-Downloader.Win32.Dapato.stb] [Dropper.Typic.Win32.736] [Backdoor.Win32.Bifrose] [Trojan.Downloader.WCA] [TrojanDownloader*Win32/Tonick!rfn] [W32/Dapato.KQ!tr.dldr] [Win32/TrojanDownloader.VB.OSN] [Backdoor.DDA501D481E62633] [ObfuscatedAKN!hb!0929434C2098]
390695cf9d70868747f2ff32ddf80cb6	[Backdoor.DDA501D481E62633] [Trojan.Downloader.WCA] [Win32/TrojanDownloader.VB.OSN] [Dropper.Typic.Win32.736] [ObfuscatedAKN!hb!390695CF9D70] [TrojanDownloader*Win32/Tonick!rfn] [Malware.Trojan.Typic] [Backdoor.Win32.Bifrose] [TROJ_AG.6ADCF040] [TrojanDownloader.VB] [Win32/Fruspam.GF] [Trojan.Typic] [Trojan-Downloader.Win32.Dapato.stb] [W32/Dapato.KQ!tr.dldr]
721daef50b9beddedf329cfc3697b35d	[Backdoor.DDA501D481E62633] [Trojan*Win32/Dynamer!ac] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [TROJ_DR.045D828D] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
8b031e81a9b24986ed6624ae171ee1ae	[Backdoor.DDA501D481E62633] [Trojan*Win32/Dynamer!ac] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [TROJ_DR.045D828D] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
97b882e5a42f56c3bf7a16af63c72d5d	[Win32/Fruspam.GF] [Trojan.Typic] [Malware.Trojan.Typic] [TrojanDownloader.VB] [TROJ_DR.045D828D] [Dropper.Typic.Win32.736] [Backdoor.Win32.Bifrose] [Trojan.Downloader.WCA] [Trojan*Win32/Dynamer!ac] [Backdoor.DDA501D481E62633]
7cb569f63dac8230871afbca25bff0d1	[Win32/Fruspam.GF] [Trojan.Typic] [Malware.Trojan.Typic] [TrojanDownloader.VB] [TROJ_DR.045D828D] [Dropper.Typic.Win32.736] [Backdoor.Win32.Bifrose] [Trojan.Downloader.WCA] [Trojan*Win32/Dynamer!ac] [Backdoor.DDA501D481E62633]
c1d61c1b0b34b4fcaf1b126a735a9ed6	[Win32/Fruspam.GF] [Trojan.Typic] [Malware.Trojan.Typic] [TrojanDownloader.VB] [TROJ_DR.045D828D] [Dropper.Typic.Win32.736] [Backdoor.Win32.Bifrose] [Trojan.Downloader.WCA] [Trojan*Win32/Dynamer!ac] [Backdoor.DDA501D481E62633]
5aefaaad9b0ecc399d15d68fd718e91e	[Backdoor.DDA501D481E62633] [Trojan*Win32/Dynamer!ac] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [TROJ_DR.045D828D] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
540b4a97f76c0905ce636163633bc199	[Backdoor.DDA501D481E62633] [Trojan*Win32/Dynamer!ac] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [TROJ_DR.045D828D] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
524387a2d232552e9e7cbfbcc85932d9	[Backdoor.DDA501D481E62633] [Trojan*Win32/Dynamer!ac] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [TROJ_DR.045D828D] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
8714308cf6bec236c695cdaf52fdadd6	[ObfuscatedAKN!hb!8714308CF6BE] [Backdoor.DDA501D481E62633] [Win32/TrojanDownloader.VB.OSN] [W32/Dapato.KQ!tr.dldr] [TrojanDownloader*Win32/Tonick!rfn] [Trojan.Downloader.WCA] [W32/Risk.IHOM-0017] [W32/MalwareF.QDHO] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [Trojan-Downloader.Win32.Dapato.stb] [TROJ_AG.6ADCF040] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
9768fc705f7783779c67e3b561577869	[Win32/Fruspam.GF] [ObfuscatedAKN!hb!9768FC705F77] [Backdoor.DDA501D481E62633] [Win32/TrojanDownloader.VB.OSN] [W32/Dapato.KQ!tr.dldr] [TrojanDownloader*Win32/Tonick!rfn] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [Trojan-Downloader.Win32.Dapato.stb] [TROJ_AG.6ADCF040] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic]
d00face2daf6672d62dee5a356fe0564	[Backdoor.DDA501D481E62633] [Trojan*Win32/Dynamer!ac] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [TROJ_DR.045D828D] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
9748cf257b4db9cbaecd52b5f8fea4ef	[Win32/Fruspam.GF] [Trojan.Typic] [Malware.Trojan.Typic] [TrojanDownloader.VB] [TROJ_DR.045D828D] [Dropper.Typic.Win32.736] [Backdoor.Win32.Bifrose] [Trojan.Downloader.WCA] [Trojan*Win32/Dynamer!ac] [Backdoor.DDA501D481E62633]
b6dc497c744f2d60353e96cfc900434f	[Backdoor.DDA501D481E62633] [Trojan*Win32/Dynamer!ac] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [TROJ_DR.045D828D] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
38edf876309e25f335d7a1a12b375adc	[Backdoor.DDA501D481E62633] [Trojan*Win32/Dynamer!ac] [Trojan.Downloader.WCA] [Backdoor.Win32.Bifrose] [Dropper.Typic.Win32.736] [TROJ_DR.045D828D] [TrojanDownloader.VB] [Malware.Trojan.Typic] [Trojan.Typic] [Win32/Fruspam.GF]
0bf61130f5ff259aff8813bc7dcc9bbb	[Win32/Fruspam.GF] [Trojan.Typic] [Malware.Trojan.Typic] [TrojanDownloader.VB] [TROJ_AG.6ADCF040] [Trojan-Downloader.Win32.Dapato.stb] [Dropper.Typic.Win32.736] [Backdoor.Win32.Bifrose] [Trojan.Downloader.WCA] [TrojanDownloader*Win32/Tonick!rfn] [W32/Dapato.KQ!tr.dldr] [Win32/TrojanDownloader.VB.OSN] [Backdoor.DDA501D481E62633] [ObfuscatedAKN!hb!0BF61130F5FF]
7a69a82caf62af27bf00957cec8556f1	[TrojanDownloader*Win32/Tonick!rfn] [Win32/TrojanDownloader.VB.OSN] [Malware.Trojan.Typic] [Win32/Fruspam.GF] [W32/Dapato.KQ!tr.dldr] [TROJ_AG.6ADCF040] [Trojan.Typic] [ObfuscatedAKN!hb!7A69A82CAF62] [Backdoor.DDA501D481E62633] [Backdoor.Win32.Bifrose] [TrojanDownloader.VB] [Trojan-Downloader.Win32.Dapato.stb] [Trojan.Downloader.WCA] [Dropper.Typic.Win32.736]

DNS Resolutions

Date	IP Address
2013-12-26	208.87.149.250 (ClassC)
2015-09-23	198.71.232.3 (ClassC)
2017-01-31	74.220.199.9 (ClassC)
2018-06-19	54.208.77.124 (ClassC)
2018-07-22	184.168.221.104 (ClassC)
2018-10-19	52.58.78.16 (ClassC)
2019-12-11	3.19.199.187 (ClassC)
2019-12-11	3.15.79.248 (ClassC)
2019-12-11	3.19.155.149 (ClassC)
2020-02-08	3.20.85.141 (ClassC)
2020-02-08	3.136.202.58 (ClassC)
2020-03-03	3.136.104.101 (ClassC)
2020-03-03	3.13.56.55 (ClassC)
2020-03-03	3.135.250.103 (ClassC)
2020-03-16	3.13.49.71 (ClassC)
2020-03-16	3.132.183.211 (ClassC)
2020-03-16	3.135.66.72 (ClassC)
2020-04-15	3.133.74.242 (ClassC)
2020-04-22	3.13.149.21 (ClassC)
2020-04-22	3.134.242.68 (ClassC)
2020-04-22	3.22.132.225 (ClassC)
2020-04-29	3.13.78.141 (ClassC)
2020-04-29	3.22.28.115 (ClassC)
2020-04-29	3.135.49.148 (ClassC)
2024-08-30	3.64.163.50 (ClassC)
2024-11-03	99.83.138.213 (ClassC)
2025-11-27	76.223.54.146 (ClassC)
2026-01-24	13.248.169.48 (ClassC)

Subdomains

Date	Domain	IP
ns2.thebuisness.com	2013-12-26	208.87.149.250
ns3.thebuisness.com	2013-12-02	208.87.149.250

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]