Domain > surrogacyandadoption.com

More information on this domain is in AlienVault OTX

Reports

http://ransomwaretracker.abuse.ch/feeds/csv/

https://otx.alienvault.com/pulse/56e85de34637f24cb...

https://ransomwaretracker.abuse.ch/downloads/RW_UR...

Files that talk to surrogacyandadoption.com

MD5	A/V
ebfc25d6bb8b9a940760fee534d245fd	[HW32.Packed.F3F8] [Ransom.TeslaCrypt]
d4dbed1d467089a4048e8fffc169d2ee	[HW32.Packed.7899]
e026007cc3dc456bff6577e42dcf017b	[HW32.Packed.5079] [Ransom.TeslaCrypt]
a56e2674190af5e65e7835693957c760
32798c41814a6a7d2a779fcf7f9931ce
3631b45b2870c1ad753d85e7013933b8
196dbc6b8ffa2c80a29765c66c2f2d4c	[TR/Crypt.ZPACK.230682] [Trojan.Mikey.D7E6C] [Uds.Dangerousobject.Multi!c] [Win32/Filecoder.TeslaCrypt.I] [W32/Filecoder_TeslaCrypt.I!tr]
afc41d00e17a31a31c71cb59d8bd1bec	[HW32.Packed.7702] [Ransom.TeslaCrypt] [Trojan-Banker.Win32.Shifu.dmy] [Troj.Banker.W32.Shifu!c] [Trojan.Encoder.4022] [Artemis] [Mal/Ransom-EC] [Artemis!AFC41D00E17A]
3a5e900f33d3d04568633882e42b08ce
1c6391df45519425b0b14401f07708e6	[HW32.Packed.189E]
acc92f8af4528a240762478e1943d98a
86d7ba0c17bee08f2245f5f320f7513a
438440c64864e51792cf0b04641a90ba	[Trojan.SelfDel] [BehavesLike.Win32.PWSZbot.gc] [W32/Kryptik.EPRI!tr] [Trojan.Mikey.D7F0B] [Win32.Trojan.Bp-ransomware.Ejqz]
c0f8c498456197663e2f230c2bbad6f0	[HW32.Packed.5A68] [Trojan.Kelihos] [Trojan-Ransom.Win32.Bitman.lfe] [Troj.W32.Hrup] [Mal/Ransom-EC] [Trojan.AVKill.60145] [TR/Crypt.ZPACK.231054] [W32/Bitman.EC!tr] [Ransom:Win32/Tescrypt.A] [Trojan/Win32.Ransom] [Trj/RansomCrypt.H] [Win32.Trojan.Bp-ransomware.Ejqz] [Inject3.ACSI]
ea7d9f62e3d92d2d63b171dc013e8da4
9ce01dfbf25dfea778e57d8274675d6f
3b7af1e08dd1576098598c301d3ecd52	[W32.LenstopaLTAR.Trojan] [Ransomware-FFK!3B7AF1E08DD1] [Ransom.TeslaCrypt] [Trojan.Win32.Encoder.easuyc] [Win32/Filecoder.TeslaCrypt.I] [Ransom_CRYPTESLA.YUYAIP] [Win.Trojan.Ransom-4627] [Trojan-Ransom.Win32.Bitman.lne] [Mal/Wonton-CB] [Trojan.Encoder.4022] [Trojan.Crypmod.Win32.256] [Ransom_CRYPTESLA.YUYAIP] [BehavesLike.Win32.PWSZbot.fh] [W32/Ransom.ZFOV-4968] [Trojan.Bitman.lb] [TR/Crypt.Xpack.414210] [Trojan[Ransom]/Win32.Bitman] [Ransom:Win32/Tescrypt] [Trojan/Win32.Teslacrypt] [Trj/CryptoWall.C] [Win32.Trojan.Bitman.Llrm] [Trojan.Win32.Filecoder] [W32/Kryptik.EPQR!tr] [FileCryptor.HUV]
176100b82d9b225cacfa27a4675cc0fd
59cd9a688eddff21cbc9dc31b4f77b35	[RDN/Ransom] [Trojan.Kovter] [Win32.Trojan.WisdomEyes.151026.9950.9998] [Trojan.Win32.Encoder.ebfuin] [UnclassifiedMalware] [Trojan.Encoder.4022] [BehavesLike.Win32.PWSZbot.dh] [Ransom:Win32/Tescrypt.K] [Trojan.Zusy.D2CDA8] [SScope.TrojanRansom.Filecoder] [Trj/GdSda.A] [Trojan.Win32.Filecoder] [W32/Filecoder_TeslaCrypt.I!tr]
dc56ff2ad208373e7894272128dcfd13	[HW32.Packed.1F13] [Ransomware.Teslacrypt.A5] [Trojan.Cryptolocker.N] [Ransom_CRYPTESLA.SMJ7] [Trojan-Banker.Win32.Shifu.dhp] [Trojan.Win32.AVKill.eaoytu] [Win32.Trojan.Filelocker.Wstq] [Trojan.AVKill.60131] [Trojan.Shifu.Win32.108] [RDN/PWS-Banker] [Mal/Ransom-EC] [W32/Trojan.XGFK-7165] [Trojan.Banker.Shifu.ig] [TR/TeslaCrypt.A.22] [Trojan[Banker]/Win32.Shifu] [Troj.Banker.W32.Shifu!c] [Ransom:Win32/Tescrypt.H] [RDN/PWS-Banker] [Trojan.PWS.Shifu!] [Trojan.Win32.Crypt] [Malicious_Behavior.VEX.99] [Crypt5.ALNX]

Whois

Property	Value
NameServer	NS3.HOSTLAND.RU
Created	2015-10-05 00:00:00
Changed	2016-02-11 00:00:00
Expires	2017-10-05 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2015-10-06	184.168.221.36 (ClassC)
2016-02-26	185.26.122.59 (ClassC)
2018-07-06	64.22.111.219 (ClassC)
2019-09-07	109.73.238.245 (ClassC)
2020-05-07	35.209.43.160 (ClassC)
2022-10-20	34.98.99.30 (ClassC)
2023-12-03	3.19.116.195 (ClassC)
2023-12-12	54.209.32.212 (ClassC)
2023-12-13	52.71.57.184 (ClassC)
2024-02-19	3.94.41.167 (ClassC)
2024-06-17	3.130.204.160 (ClassC)
2024-06-23	18.119.154.66 (ClassC)
2024-07-05	3.140.13.188 (ClassC)
2024-08-02	3.18.7.81 (ClassC)
2024-08-25	54.161.222.85 (ClassC)
2024-09-13	3.130.253.23 (ClassC)
2024-09-26	34.205.242.146 (ClassC)
2024-10-06	52.86.6.113 (ClassC)
2024-10-22	52.44.33.141 (ClassC)
2024-10-27	44.213.140.181 (ClassC)
2025-01-05	54.205.192.227 (ClassC)
2025-01-12	23.23.66.93 (ClassC)
2025-01-21	54.85.129.208 (ClassC)
2025-03-17	54.205.0.78 (ClassC)
2025-03-24	3.218.211.55 (ClassC)
2025-04-07	52.205.213.233 (ClassC)
2025-04-19	44.205.92.141 (ClassC)
2025-04-29	3.214.18.45 (ClassC)
2025-05-08	52.44.252.51 (ClassC)
2025-05-18	52.2.128.121 (ClassC)
2025-06-02	54.237.116.149 (ClassC)
2025-06-08	3.210.147.83 (ClassC)
2025-06-15	52.4.148.156 (ClassC)
2025-06-19	54.88.199.97 (ClassC)
2025-07-11	52.5.217.205 (ClassC)
2025-08-02	52.202.138.172 (ClassC)

HTTP/1.1 200 OKServer: nginxDate: Thu, 09 May 2019 20:13:14 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Cache-Enabled: TrueLink: https://surrogacyandadopt

!doctype html>html langen-US prefixog: http://ogp.me/ns#>head>	meta charsetUTF-8>	meta nameviewport contentwidthdevice-width, initial-scale1>	link relprofile hrefhttps://gmpg.org/xfn/11>	title>Full Service Surrogacy Agency | Surro Moms Abroad/title>!-- This site is optimized with the Yoast SEO plugin v11.1.1 - https://yoast.com/wordpress/plugins/seo/ -->meta namedescription contentSurro Moms Abroad is an international full service surrogacy agency that offers IVF services at a lower rates to create traditional families./>link relcanonical hrefhttps://surrogacyandadoption.com/ />meta propertyog:locale contenten_US />meta propertyog:type contentwebsite />meta propertyog:title contentFull Service Surrogacy Agency | Surro Moms Abroad />meta propertyog:description contentSurro Moms Abroad is an international full service surrogacy agency that offers IVF services at a lower rates to create traditional families. />meta propertyog:url contenthttps://surrogacyandadoption.com/ />meta propertyog:site_name contentSURRO MOMS ABROAD - INTERNATIONAL SURROGACY />meta nametwitter:card contentsummary_large_image />meta nametwitter:description contentSurro Moms Abroad is an international full service surrogacy agency that offers IVF services at a lower rates to create traditional families. />meta nametwitter:title contentFull Service Surrogacy Agency | Surro Moms Abroad />meta nametwitter:image contenthttps://surrogacyandadoption.com/wp-content/uploads/2018/08/people_-300x124.png />script typeapplication/ld+json classyoast-schema-graph yoast-schema-graph--main>{@context:https://schema.org,@graph:{@type:Organization,@id:https://surrogacyandadoption.com/#organization,name:,url:https://surrogacyandadoption.com/,sameAs:},{@type:WebSite,@id:https://surrogacyandadoption.com/#website,url:https://surrogacyandadoption.com/,name:SURRO MOMS ABROAD - INTERNATIONAL SURROGACY,publisher:{@id:https://surrogacyandadoption.com/#organization},potentialAction:{@type:SearchAction,target:https://surrogacyandadoption.com/?s{search_term_string},query-inpu

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > surrogacyandadoption.com

Is this malicious?

Reports

Files that talk to surrogacyandadoption.com

Whois

DNS Resolutions

Port 443