Domain > amy-escort.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to amy-escort.com

MD5	A/V
89f45f68a0568996a6a109a1d04b6670	[PE:Trojan.FakePDF@CV!1.9EEF]
cbfdd8eee878c40c2311394de81edd18
d28060e32efce67914462f0d184b86a7	[Downloader-FSH!D28060E32EFC] [TR/Rogue.AI.141291] [Trojan.17B2B69AC5A0650B] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [Downloader.Upatre] [W32/Waski.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Downloader.Upatre] [W32/Trojan.GEPN-2648] [W32/Trojan3.HIQ] [Trojan-Downloader.Win32.Upatre] [Trojan.Inject.Win32.68463] [Trojan.Win32.Inject.hjqa] [TROJ_UPATRE.BMC] [Troj/Zbot-HMK] [TrojanDownloader.Upatre.A4] [Trojan.Inject] [Win.Trojan.Upatre-76] [Trojan.DownLoad.64861] [Win32/Upatre.DH]
b5090c0b129e66e7eb31e654c48d5a17	[Downloader-FSH!B5090C0B129E] [TR/Rogue.AI.141291] [Trojan.17B2B69AC5A0650B] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [Downloader.Upatre] [W32/Waski.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Downloader.Upatre] [W32/Trojan.GEPN-2648] [W32/Trojan3.HIQ] [Trojan-Downloader.Win32.Upatre] [Trojan.Inject.Win32.68463] [Trojan.Win32.Inject.hjqa] [TROJ_UPATRE.BMC] [Troj/Zbot-HMK] [TrojanDownloader.Upatre.A4] [Trojan.Inject] [Win.Trojan.Upatre-76] [Trojan.DownLoad.64861] [Win32/Upatre.DH]
d3547f670131bb24ab4a86ee473e9717	[Trojan.60E809000000@1200.mg] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [W32/Inject.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Upatre] [W32/Heuristic-210!Eldorado] [W32/Heuristic-210!Eldorado] [Trojan-Downloader.Win32.Mazahaka] [Downloader.Waski.Win32.4646] [TROJ_UPATRE.SM37] [Troj/DwnLdr-LIQ] [Trojan.Inject] [BC.Heuristic.Trojan.SusPacked.BF-6.A] [Trojan.DownLoad.64861]
eaf7d2d9e3dc5d62c995748a3f162498	[Trojan.60E809000000@1200.mg] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [W32/Inject.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Upatre] [W32/Heuristic-210!Eldorado] [W32/Heuristic-210!Eldorado] [Trojan-Downloader.Win32.Mazahaka] [Downloader.Waski.Win32.4646] [TROJ_UPATRE.SM37] [Troj/DwnLdr-LIQ] [Trojan.Inject] [BC.Heuristic.Trojan.SusPacked.BF-6.A] [Trojan.DownLoad.64861]
f2f859aa7a0726ad0bce585e91e567da	[Trojan.60E809000000@1200.mg] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [W32/Inject.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Upatre] [W32/Heuristic-210!Eldorado] [W32/Heuristic-210!Eldorado] [Trojan-Downloader.Win32.Mazahaka] [Downloader.Waski.Win32.4646] [TROJ_UPATRE.SM37] [Troj/DwnLdr-LIQ] [Trojan.Inject] [BC.Heuristic.Trojan.SusPacked.BF-6.A] [Trojan.DownLoad.64861]
5eae3e1682322af909a3edb180aa2693	[Trojan.DownLoad.64861] [BC.Heuristic.Trojan.SusPacked.BF-6.A] [Trojan.Inject] [Troj/DwnLdr-LIQ] [TROJ_UPATRE.SM37] [Downloader.Waski.Win32.4646] [Trojan-Downloader.Win32.Mazahaka] [W32/Heuristic-210!Eldorado] [W32/Heuristic-210!Eldorado] [Trojan.Upatre] [TrojanDownloader*Win32/Upatre.AA] [W32/Inject.A!tr] [Luhe.Fiha.A] [Win32/TrojanDownloader.Waski.A] [Trojan.60E809000000@1200.mg]
3bc00403666e978444ea56f6a38063e3	[Trojan.60E809000000@1200.mg] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [W32/Inject.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Upatre] [W32/Heuristic-210!Eldorado] [W32/Heuristic-210!Eldorado] [Trojan-Downloader.Win32.Mazahaka] [TROJ_UPATRE.SM37] [Troj/DwnLdr-LIQ] [Trojan.Inject] [BC.Heuristic.Trojan.SusPacked.BF-6.A] [Trojan.DownLoad.64861]
e22f7afac73179f55c66f9cc0d2a448c
f421bab8c2c72d3e61e9283904c9908d	[Downloader-FSH!F421BAB8C2C7] [TR/Rogue.AI.141291] [Trojan.17B2B69AC5A0650B] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [Downloader.Upatre] [W32/Waski.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Upatre] [W32/Trojan.GEPN-2648] [W32/Trojan3.HIQ] [Trojan-Downloader.Win32.Upatre] [Trojan.Inject.Win32.68463] [Trojan.Win32.Inject.hjqa] [TROJ_UPATRE.SM13] [Troj/Zbot-HMK] [Trojan.Inject] [TrojanDownloader.Upatre.A4] [Win.Trojan.Upatre-76] [Trojan.DownLoad.64861]
e7628fbf07c2297938690884347a9471	[Downloader-FSH!E7628FBF07C2] [TR/Rogue.AI.141291] [Trojan.17B2B69AC5A0650B] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [Downloader.Upatre] [W32/Waski.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Upatre] [W32/Trojan.GEPN-2648] [W32/Trojan3.HIQ] [Trojan-Downloader.Win32.Upatre] [Trojan.Inject.Win32.68463] [Trojan.Win32.Inject.hjqa] [TROJ_UPATRE.SM13] [Troj/Zbot-HMK] [Trojan.Inject] [TrojanDownloader.Upatre.A4] [Win.Trojan.Upatre-76] [Trojan.DownLoad.64861]
cb84297f4890981d688f379002b9ad95	[Downloader-FSH!CB84297F4890] [TR/Rogue.AI.141291] [Trojan.17B2B69AC5A0650B] [Win32/TrojanDownloader.Waski.A] [Luhe.Fiha.A] [Downloader.Upatre] [W32/Waski.A!tr] [TrojanDownloader*Win32/Upatre.AA] [Trojan.Upatre] [W32/Trojan.GEPN-2648] [W32/Trojan3.HIQ] [Trojan-Downloader.Win32.Upatre] [Trojan.Inject.Win32.68463] [Trojan.Win32.Inject.hjqa] [TROJ_UPATRE.SM13] [Troj/Zbot-HMK] [Trojan.Inject] [TrojanDownloader.Upatre.A4] [Win.Trojan.Upatre-76] [Trojan.DownLoad.64861]

Whois

Property	Value
NameServer	NS2.HOSTINGBAY.NET
Created	2002-07-21 00:00:00
Changed	2015-07-22 00:00:00
Expires	2016-07-21 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2014-01-29	173.192.21.195 (ClassC)
2022-02-15	188.114.96.7 (ClassC)
2023-08-31	188.114.97.1 (ClassC)
2024-12-25	104.21.93.8 (ClassC)
2025-01-03	172.67.201.221 (ClassC)
2025-03-15	104.21.16.1 (ClassC)
2025-05-20	104.21.96.1 (ClassC)
2025-06-06	104.21.112.1 (ClassC)
2025-06-29	104.21.64.1 (ClassC)
2025-07-04	104.21.32.1 (ClassC)
2025-08-11	76.223.67.189 (ClassC)

Subdomains

Date	Domain	IP
www.amy-escort.com	2024-10-13	172.67.201.221

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]