Domain > wt1.wxsx.org

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to wt1.wxsx.org

MD5	A/V
f2fe00778fe7f6bc5b012d7957ff0c40	[Trojan.Downloader.Hicrazyk.A] [StartPage-NY] [PUP.Optional.Meinv] [Riskware.Nsis.Downloader.cwhxun] [Malware] [TrojanDownloader:Win32/Hicrazyk.A] [W32/StartPage.NY!tr]
8bee46b4f3b260c40a57248485a58fd3	[Trojan.Downloader.Hicrazyk.A] [Artemis!8BEE46B4F3B2] [Riskware.Nsis.Downloader.cwhxun] [WS.Reputation.1] [TR/Dldr.Hicrazyk.A.4385] [Troj/StartP-HX] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr] [Trojan.Win32.Hicrazyk.A] [Win32/Trojan.34a]
80e3817e526af3abd045ff5a346428e9	[WS.Reputation.1] [Malware] [Trojan.Nsis.Downloader.cwybas] [Trojan.StartPage.62501] [Troj/StartP-HV] [Trj/CI.A] [Heuristic.BehavesLike.Win32.Suspicious.D]
cf45125a662052db262429c1d6038a67	[Trojan.Downloader.Hicrazyk.A] [Artemis!CF45125A6620] [PUP.Optional.Meinv] [WS.Reputation.1] [Riskware.Nsis.Downware.culntp] [TR/Dldr.Hicrazyk.A.5677] [Troj/StartP-HV] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Hicrazyk.A] [NSIS/TrojanDownloader.Grinidou.B] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr] [Trojan.NSIS.Grinidou.B]
94ee5d1b9dd2cb51e24adae79f836445	[Trojan.Downloader.Hicrazyk.A] [Artemis!94EE5D1B9DD2] [PUP.Optional.Meinv] [WS.Reputation.1] [Riskware.Nsis.Downware.culntp] [Troj/StartP-HV] [UnclassifiedMalware] [TR/Dldr.Hicrazyk.A.5803] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan.NSIS.Grinidou.B] [NSIS/TrojanDownloader.Grinidou.B] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr]
67ab407c1f1f4732908a8b28b8207eec	[Artemis!67AB407C1F1F] [WS.Reputation.1] [Malware] [Trojan.Nsis.Downloader.cwyayc] [Troj/StartP-HX] [Trojan.StartPage.62192] [TR/Dldr.Hicrazyk.A.5273] [Trojan:Win32/Dynamer!ac] [Trojan.Win32.A.Downloader.130582] [NSIS/TrojanDownloader.Grinidou.H] [Trojan.Win32.Dynamer] [W32/StartPage.NY!tr] [Trj/CI.A]
e9eef8809e945cc4dba4697a225e5693	[Trojan.Downloader.Hicrazyk.A] [Artemis!E9EEF8809E94] [PUP.Optional.Meinv] [Riskware.Nsis.Downware.culntp] [WS.Reputation.1] [TR/Dldr.Hicrazyk.A.5824] [Troj/StartP-HV] [TrojanDownloader:Win32/Hicrazyk.A] [NSIS/TrojanDownloader.Grinidou.B] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr] [Trojan.NSIS.Grinidou.B] [Win32/Trojan.Downloader.ca5]
1e074396e7faafd731b792a5692f826d	[Trojan.Downloader.Hicrazyk.A] [Artemis!1E074396E7FA] [Trojan.Downloader.cn] [Riskware.Nsis.Downloader.cwhxun] [WS.Reputation.1] [TR/Dldr.Hicrazyk.A.4532] [Troj/StartP-HX] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr] [Trojan.Win32.Hicrazyk.A] [Win32/Trojan.Downloader.ca5]
3af8b42e2d87e8488da6ae3bda6f27dd	[Trojan.Downloader.Hicrazyk.A] [Artemis!3AF8B42E2D87] [PUP.Optional.Meinv] [WS.Reputation.1] [Malware] [Trojan.Nsis.Downloader.cwybig] [TR/Dldr.Hicrazyk.A.8362] [Troj/StartP-HV] [TrojanDownloader:Win32/Hicrazyk.A] [NSIS/TrojanDownloader.Grinidou.G] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr] [Trojan.Win32.Hicrazyk.A] [Win32/Trojan.Downloader.ca5]
1b8bfe72ea8771ef4e3ab97f3ef43933	[Trojan.Downloader.Hicrazyk.A] [Artemis!1B8BFE72EA87] [Trojan.StartPage] [Trojan.Nsis.Downloader.cwyayc] [WS.Reputation.1] [Malware] [TrojWare.NSIS.TrojanDownloader.Grinidou.~H] [Trojan.StartPage.62010] [TR/Dldr.Hicrazyk.A.5166] [Troj/StartP-HX] [NSIS/TrojanDownloader.Grinidou.H] [Trojan-Downloader.Hicrazyk] [W32/StartPage.NY!tr] [Trojan.Win32.Downloader.axB]
49f96610ffe883e2c52a8c04f280392e	[Trojan.Downloader.Hicrazyk.A] [Artemis!49F96610FFE8] [PUP.Optional.Meinv] [WS.Reputation.1] [Malware] [Trojan.Nsis.Downloader.cwybig] [Troj/StartP-HV] [TR/Dldr.Hicrazyk.A.8292] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan.Win32.Hicrazyk.A] [NSIS/TrojanDownloader.Grinidou.G] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr] [Win32/Trojan.Downloader.ca5]
6b4399ec54403b6112a056c1efd2eef8	[Trojan.Nsis.Downloader.cwybas] [WS.Reputation.1] [Malware] [Trojan.StartPage.62225] [Troj/StartP-HV] [Trojan[Backdoor]/Win32.ZAccess] [Trj/CI.A] [W32/StartP.HV!tr] [Trojan.Win32.Downloader.AVS] [Heuristic.BehavesLike.Win32.Suspicious.D]
36261ec32d851583a1ebc2cbe1f269c5	[Trojan.Downloader.Hicrazyk.A] [Artemis!36261EC32D85] [PUP.Optional.Meinv] [Malware] [TR/Dldr.Megone.tga] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan.Win32.Hicrazyk.A] [not-a-virus:Downloader.NSIS] [W32/StartPage.NY!tr]
36bdf9d149e7fb1468899ebf33d3b0b2	[Trojan.Downloader.Hicrazyk.A] [Artemis!36BDF9D149E7] [Riskware.Nsis.Downloader.cwhxun] [WS.Reputation.1] [TR/Dldr.Hicrazyk.A.5495] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan.Win32.Hicrazyk.A] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr] [Win32/Trojan.Downloader.ca5]
c6d64d4a1d4f8528078ba9f769a20d4b	[Trojan.Downloader.Hicrazyk.A] [Artemis!C6D64D4A1D4F] [Trojan.StartPage] [Trojan.Nsis.Downloader.cwyayc] [Trojan.ADH.2] [Malware] [Troj/StartP-HV] [UnclassifiedMalware] [Trojan.StartPage.62430] [TR/Dldr.Hicrazyk.A.5226] [NSIS/TrojanDownloader.Grinidou.H] [Trojan-Downloader.Hicrazyk] [W32/StartPage.NY!tr] [Trojan.Win32.Downloader.40] [Win32/Trojan.Downloader.f84]
8bbfefa7bd973d00f4306d2905be31f0	[Trojan.Downloader.Hicrazyk.A] [Artemis!8BBFEFA7BD97] [PUP.Optional.Meinv] [Trojan.Nsis.Downloader.cwyayc] [WS.Reputation.1] [Malware] [Trojan.Win32.A.Downloader.283722] [Trojan.StartPage.62192] [TR/Dldr.Megone.tga] [Troj/StartP-HV] [TrojanDownloader:Win32/Hicrazyk.A] [PE:Trojan.Crypt!6.191F] [not-a-virus:Downloader.NSIS] [W32/StartPage.NY!tr] [Trojan.Win32.Hicrazyk.A] [Win32/Trojan.Downloader.f84]
3159c46935444286b80d13b11a694009	[Trojan.Downloader.Hicrazyk.A] [Artemis!3159C4693544] [Trojan.Downloader.cn] [Riskware.Nsis.Downloader.cwhxun] [WS.Reputation.1] [TR/Dldr.Hicrazyk.A.4929] [Troj/StartP-HX] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr]
24b3f9b4cda27351f408c1d1db6f9592	[Trojan.Downloader.Hicrazyk.A] [Artemis!24B3F9B4CDA2] [Trojan.Downloader.cn] [Riskware.Nsis.Downloader.cwhxun] [WS.Reputation.1] [TR/Dldr.Hicrazyk.A.5571] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr] [Win32/Trojan.Downloader.ca5]
52c1f14804dc2c93cb5c060721ee8794	[Trojan.Downloader.Hicrazyk.A] [Artemis!52C1F14804DC] [PUP.Optional.Meinv] [Win32.Malware!Drop] [Trojan.Nsis.Downloader.cwyayc] [WS.Reputation.1] [Malware] [Troj/StartP-HV] [Trojan.StartPage.62192] [TR/Dldr.Megone.tga] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan.Win32.Hicrazyk.A] [PE:Trojan.Crypt!6.191F] [not-a-virus:Downloader.NSIS] [W32/StartPage.NY!tr]
962ae72de14e9c5603a002d4cbda8e0d	[Trojan.Downloader.Hicrazyk.A] [Artemis!962AE72DE14E] [PUP.Optional.Meinv] [Trojan.Nsis.Downloader.cwybig] [WS.Reputation.1] [Malware] [Troj/StartP-HV] [TR/Dldr.Hicrazyk.A.8315] [TrojanDownloader:Win32/Hicrazyk.A] [Trojan.Win32.Hicrazyk.A] [NSIS/TrojanDownloader.Grinidou.G] [Trojan-Downloader.Win32.Hicrazyk] [W32/StartPage.NY!tr]

Whois

Property	Value
Name	luo keli
Organization	luokeli
Email	www_hiapk_com_s1@163.com
Address	Nantan Lu 28 Hao
Zip Code	200000
City	Beijing
State	Beijing
Country	CN
Phone	+86.13800138000
Fax	+86.13800138000
NameServer	f1g1ns2.dnspod.net
Created	2014-03-30 09:32:39
Changed	2015-04-04 00:20:54
Expires	2016-03-30 09:32:39
Registrar	1API GmbH (R1724-LRO

DNS Resolutions

Date	IP Address
2014-05-10	221.203.3.40 (ClassC)
2018-06-19	52.7.102.57 (ClassC)
2018-06-19	52.71.245.135 (ClassC)
2019-07-27	52.45.143.178 (ClassC)
2019-07-27	52.201.200.28 (ClassC)
2019-09-30	47.88.84.51 (ClassC)
2019-09-30	47.91.202.66 (ClassC)
2019-09-30	47.91.205.63 (ClassC)
2019-11-29	5.180.96.234 (ClassC)
2019-12-08	156.229.144.179 (ClassC)
2020-01-07	156.253.39.169 (ClassC)
2020-02-12	154.213.63.138 (ClassC)
2020-02-13	154.216.58.179 (ClassC)
2020-08-24	154.213.62.142 (ClassC)
2021-01-19	104.250.151.171 (ClassC)
2026-01-04	148.135.127.16 (ClassC)
2026-02-11	154.204.218.189 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]