Domain > 2680.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 2680.com

MD5	A/V
0f692c8e89c3ffb3b102caac25cae2ae	[W32.SapinH.Trojan] [Win32/Gamepass.HKIaME] [Trojan-Dropper/W32.Injector.1067008] [Trojan-Dropper.Win32.Injector!O] [Trojan.Orsam.A5] [Dropper-FDT!0F692C8E89C3] [Trojan.Chad] [Trojan.Win32.KillProc.brmetk] [TROJ_DLOADER_EJ1900FC.UVPM] [Win.Trojan.Ascii.203_189_143_14] [Trojan.DR.Injector!TKwDV1ksBkc] [Dropper.A.Injector.1067008[h]] [Win32.Trojan-dropper.Injector.Hzd] [Application.Win32.Kuaiba.BC] [Trojan.KillProc.22109] [Trojan.Packed.Win32.29983] [BehavesLike.Win32.Dropper.tc] [TrojanDropper.Injector.ayai] [TR/Graftor.pqient] [Trojan[Dropper]/Win32.Injector.hxth] [Trojan.Application.Symmi.D7781] [Troj.Dropper.W32.Injector.hxth!c] [Dropper/Win32.Injector] [Trojan:Win32/Scoreem!rfn] [TrojanDropper.Injector] [Trojan.Win32.Dropper.hxth] [Trojan.SuspectCRC] [W32/Injector.RREW!tr] [Win32/Trojan.Dropper.eb3]
120fe294acce68d6ddde3b4f2c26ad75	[WS.Reputation.1]
df25136f833b5883d4f3ada2c44d22be	[W32.WasamalaX.Trojan] [Trojan-Dropper.Win32.Injector!O] [Trojan.Orsam.A5] [Trojan-FBJW!DF25136F833B] [Trojan.Downloader] [Trojan.Llac.Win32.38707] [Trojan/BlackHole] [Trojan.Win32.KillProc.bfqtoc] [TrojanDownloader.D] [Win32/EXEEmbedded.HORAMQD] [Trojan-Dropper.Win32.Injector.hxbu] [Trojan.DR.Injector!zKTZDrN6uAg] [Trojan.KillProc.21800] [TR/Graftor.65786] [TrojanDropper.Injector.bmmj] [Trojan[Dropper]/Win32.Injector] [Win32.Troj.Injector.HX.(kcloud)] [Dropper/Win32.Injector] [TrojanDropper.Injector] [Adware.Win32.Dropper.aab] [Trojan.Crypt] [Trojan.Win32.Injector.ajgv] [Win32/Trojan.e6]
55d54c3d7c64202d5a14906e1275cbcf	[W32.Clod07e.Trojan.37c8] [Heur.Win32.Veebee.3!O] [WS.Reputation.1] [Win.Trojan.8291187] [UnclassifiedMalware] [Heuristic.BehavesLike.Win32.Suspicious-PKR.K] [Trojan/StartPage.suj] [Trojan[Backdoor]/Win32.VB] [Win32.Trojan.Atap.Qibv] [Virus.Win32.Malware]

Whois

Property	Value
Email	wjcathreine@163.com
NameServer	F1G1NS2.DNSPOD.NET
Created	2003-05-17 00:00:00
Changed	2015-01-16 00:00:00
Expires	2016-05-17 00:00:00
Registrar	ENAME TECHNOLOGY CO.

DNS Resolutions

Date	IP Address
2011-09-22	61.174.63.183 (ClassC)
2011-09-22	58.211.79.118 (ClassC)
2012-08-24	115.238.248.76 (ClassC)
2012-10-30	61.147.70.80 (ClassC)
2012-12-17	115.238.251.239 (ClassC)
2013-05-31	58.218.199.30 (ClassC)
2014-10-12	58.218.207.226 (ClassC)
2016-09-19	107.167.19.78 (ClassC)
2016-09-19	107.167.19.77 (ClassC)
2016-12-30	103.241.230.131 (ClassC)
2016-12-30	103.241.230.132 (ClassC)
2017-02-17	103.241.230.134 (ClassC)
2024-05-07	3.33.152.147 (ClassC)
2024-06-26	15.197.142.173 (ClassC)
2024-09-12	15.197.225.128 (ClassC)
2024-11-23	202.95.14.234 (ClassC)
2025-05-15	154.39.251.223 (ClassC)
2025-08-03	154.91.230.80 (ClassC)

Port 80

Subdomains

Date	Domain	IP
bk.2680.com	2013-10-08	58.218.199.30
nfsq.2680.com	2013-09-19	115.238.251.239
soft.2680.com	2014-06-01	58.218.207.226
dw.2680.com	2014-06-01	58.218.199.30

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]