Domain > bandoo.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to bandoo.com

MD5	A/V
98884f5e4ce63ff7874258924a1a5633	[Win32.Mydoom.BG@mm] [Worm/W32.Mydoom.94208] [I-Worm.Doombot.k] [Trojan.Dropper] [W32/Mydoom.bg] [EmailWorm] [Trojan.Win32.Doombot.wrdt] [W32/Mytob.YA@mm] [W32.Mytob@mm] [Malware] [Win32/Mytob.NP] [WORM_MYTOB.HM] [Win32.Mydoom.bg] [Email-Worm.Win32.Doombot.k] [Win32.Mydoom.BG@mm] [Worm.Mytob.UE] [W32/Mytob-JO] [Worm.Win32.Mytob.VL] [Win32.Mydoom.BG@mm] [Win32.HLLM.MyDoom.1423] [WORM_MYTOB.HM] [Heuristic.LooksLike.Win32.Suspicious.C!89] [Backdoor/RBot.czi] [Worm.Mydoom.bg.(kcloud)] [Worm:Win32/Mytob.RA@mm] [Win32/Mydoom.worm.94208] [Win32.Mydoom.BG@mm] [W32/Mytob.YA@mm] [Win32/Mytob.VL] [Email-Worm.Win32.Doombot] [W32/Mytob.QI.worm]
329e65751a9b5d6370ab0476a0e06ec3	[W32.FakeHPWu.Worm] [Trojan/W32.Buzus.406016.E] [Trojan.Win32.Buzus!O] [Worm.Prolaco] [Trojan.Buzus.Win32.56369] [Trojan/Buzus.fptv] [Trojan.Zusy.Elzob.D57B3] [Trojan.Buzus!tQv92rJ0Rbc] [W32/Delfinject.KHXW-3303] [WORM_PROLACO.SMX] [Trojan.Buzus-8259] [Trojan.Win32.Buzus.fptv] [Trojan.Win32.Buzus.bqkwr] [Trojan.Win32.A.Buzus.406016.A[h]] [Win32.Trojan.Inject.Auto] [UnclassifiedMalware] [Trojan.AVKill.2679] [WORM_PROLACO.SMX] [W32/Xirtem@MM] [W32/AutoRun-BHY] [W32/Delfinject.L] [Trojan/Buzus.qys] [Trojan/Win32.Buzus] [Win32.Troj.Buzus.(kcloud)] [Trojan:Win32/Bulta!rfn] [Win-Trojan/Buzus.406016.E] [W32/Xirtem@MM] [Trojan.Buzus] [Trojan.Win32.Buzus] [W32/Injector.fam!tr] [Dropper.Delf.CMZ] [Win32/Trojan.6af]
c2478a24bc9892d9897c01a8a3a10fe1	[Trojan/W32.Buzus.489984.E] [Trojan] [Trojan.Buzus!KvA+YN5PnXY] [W32/Trojan3.CFZ] [Win32/Fruspam.FE] [WORM_PROLACO.SMX] [Trojan.Win32.Buzus.fuyt] [Trojan.Win32.Buzus.489984.A] [Mal/Cabbling-A] [Trojan.AVKill.2] [TR/Spy.ZBot.ajig] [WORM_PROLACO.SMX] [Trojan.Win32.Buzus!IK] [Trojan/Buzus.rqn] [W32/Trojan3.CFZ] [Trojan/Win32.Buzus] [Trojan.Buzus.fuyt] [Malware.Ackantta] [Win32/Merond.O] [Trojan.Win32.Buzus] [W32/Injector.fam!tr] [W32/P2PShared.U]
c1a5ba03f0ba9832cc87180a4c4622a5	[Trojan/W32.Buzus.403968.G] [W32/Xirtem@MM] [Trojan] [Trojan/Buzus.fsbq] [Trojan.Win32.Buzus.bqczc] [W32/Trojan2.NKSM] [W32.Ackantta@mm] [Hiloti.FUR] [Win32/Fruspam.FB] [Trojan.Win32.Buzus.fsbq] [Trojan.Buzus!f4MhjlBaWM8] [UnclassifiedMalware] [Trojan.AVKill.2] [WORM_PROLACO.SMX] [Troj/Hiloti-AY] [Trojan/Buzus.qxm] [Win32.AutoInfector.a.(kcloud)] [Trojan.Win32.Buzus.403968] [Trojan/Win32.Hiloti] [W32/Trojan.RQOS-1035] [Trojan.Buzus] [Trojan.Delf!sd5] [Win32/Merond.O] [Trojan.Win32.Buzus] [W32/Injector.fam!tr] [Injector.ZG] [W32/P2PShared.BA.worm]
5988f5eea2e0f6275a0f4232b4386bf9
3e41ab7c70701452d046b93f764564ec	[W32.FakeBluetoothB.Trojan] [Win32.Worm.TSY] [Trojan/W32.Buzus.558592.B] [Trojan.Buzus.9827] [W32/Xirtem@MM] [Trojan/Buzus.gcjo] [Win32.Worm.TSY] [WORM_PROLACO.SMX] [W32/Zbot.LVMW-0523] [W32.Ackantta@mm] [Win32/Merond.O] [WORM_PROLACO.SMX] [Win.Trojan.Buzus-8522] [Win32.Worm.TSY] [Trojan.Win32.Buzus.brukw] [Troj.W32.Buzus.gcjo!c] [Win32.Trojan.Inject.Auto] [Win32.Worm.TSY] [UnclassifiedMalware] [Win32.Worm.TSY] [Trojan.AVKill.3097] [Trojan.Buzus.Win32.58598] [worm.win32.rebhip.z] [BehavesLike.Win32.Dropper.hc] [W32/Autorun-BUB] [W32/Zbot.AYN] [Trojan/Buzus.apot] [TR/Killav.NO] [Trojan/Win32.Buzus] [Win32.Troj.Buzus.(kcloud)] [Trojan:Win32/Bulta!rfn] [Win32.Worm.TSY] [Worm/Win32.Palevo.R2102] [Win32.Worm.TSY] [I-Worm.Merond.O] [Trojan.Buzus!eSFcCGu2qBc] [Trojan.Win32.Buzus] [W32/Injector.fam!tr] [W32/P2PShared.AY.worm]
CA6677D75151BA4C2C12F1B337F7C201
7fa440581d2c22c8a33d1432cdb6c07c	[W32.HfsAdware.5221] [PUP.Bandoo/Variant] [Adware.Bandoo.280] [BehavesLike.Win32.Suspicious.tc] [Win32.Application.Bandoo.C] [Bandoo.654]
6b26b93e0427019ce371151c24cdf1b9

Whois

Property	Value
NameServer	A20-65.AKAM.NET
Created	2000-04-18 00:00:00
Changed	2015-04-15 00:00:00
Expires	2016-04-18 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2009-12-31	207.232.22.25 (ClassC)
2009-12-31	212.235.109.70 (ClassC)
2010-09-10	92.122.188.98 (ClassC)
2010-10-22	92.123.68.42 (ClassC)
2010-12-08	92.122.188.106 (ClassC)
2010-12-08	92.123.72.88 (ClassC)
2011-02-24	195.95.193.94 (ClassC)
2011-07-23	92.123.68.34 (ClassC)
2012-03-15	80.239.230.155 (ClassC)
2012-03-20	80.239.201.32 (ClassC)
2012-04-13	80.239.230.179 (ClassC)
2012-05-01	80.239.224.27 (ClassC)
2012-05-15	92.122.50.170 (ClassC)
2012-06-06	195.12.231.56 (ClassC)
2012-07-12	93.158.110.203 (ClassC)
2012-07-25	82.96.58.65 (ClassC)
2012-08-05	80.239.221.16 (ClassC)
2012-10-02	80.239.148.33 (ClassC)
2012-10-28	80.239.254.17 (ClassC)
2012-11-07	213.248.111.34 (ClassC)
2013-04-15	207.232.22.55 (ClassC)
2013-04-22	95.100.249.112 (ClassC)
2013-05-09	23.62.237.118 (ClassC)
2013-05-09	23.62.237.94 (ClassC)
2013-05-10	95.100.249.115 (ClassC)
2013-05-24	109.201.151.90 (ClassC)
2013-06-25	109.201.151.85 (ClassC)
2013-07-19	95.100.249.83 (ClassC)
2013-10-31	173.192.130.195 (ClassC)
2013-12-08	94.31.0.55 (ClassC)
2014-01-13	94.31.0.25 (ClassC)
2014-07-07	95.101.0.34 (ClassC)
2014-07-28	23.14.92.56 (ClassC)
2014-08-04	23.62.237.88 (ClassC)
2014-08-08	2.20.142.227 (ClassC)
2025-08-12	82.163.48.55 (ClassC)

Subdomains

Date	Domain	IP
minicatalog.bandoo.com	2014-05-24	23.63.227.187
download.cdn.bandoo.com	2013-10-18	23.3.96.106
wpcontent.cdn.bandoo.com	2014-07-28	67.132.183.9
lp.bandoo.com	2013-12-08	94.31.0.55
js.wp.bandoo.com	2014-06-19	64.145.86.42
www.bandoo.com	2025-08-03	82.163.48.55

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]