Domain > cookcountygov.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to cookcountygov.com

MD5	A/V
ebbf2139fa265c6896be78fe8bbd44f7
15d18c6131366d57c2dd18d866444746	[HW32.CDB.2393] [Packed.Win32.Katusha.3!O] [Trojan/Kryptik.djh] [Hlux.ZY] [Backdoor.Win32.Hlux.dtsu] [UnclassifiedMalware] [BackDoor.Slym.13011] [TR/Kryptik.oenzk] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [W32/Trojan.XKZV-6012] [Win32/Kryptik.CBNK] [Trojan.Crypt3] [W32/Hlux.DJH!tr.bdr] [Crypt3.OLP] [Backdoor.Win32.Hlux.Aq]
9844a1b8a10ed4568240ae7a528bef5d	[HW32.CDB.Bf28] [Backdoor.Kelihos] [Malware.Packer.OCD] [Trojan.PWS.Tepfer!vHSA+Pr89Pk] [Kryptik.CCFN] [Win32/Kelihos.baJHSHD] [Trojan-PSW.Win32.Tepfer.tokd] [Trojan.Win32.Kryptik.cvtteo] [UnclassifiedMalware] [BackDoor.Slym.13304] [TR/Crypt.EPACK.53967] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/FakeAv.BWUN!tr] [Crypt_s.GCT] [Trojan.Win32.InfoStealer.AZ] [Win32/Trojan.65e]
2bb1e0a0c6f6082824d6fd9d4095bcd0	[Malware.Packer.SCD] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.BDPK!tr]
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]

Whois

Property	Value
NameServer	NS60.WORLDNIC.COM
Created	1998-02-23 00:00:00
Changed	2015-02-25 00:00:00
Expires	2020-02-22 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2014-04-25	216.167.118.36 (ClassC)
2014-05-20	162.216.172.197 (ClassC)
2014-05-22	162.216.172.197 (ClassC)
2014-07-01	173.254.37.126 (ClassC)
2014-11-28	162.216.172.149 (ClassC)
2015-05-18	-
2019-08-25	52.218.236.10 (ClassC)
2019-08-30	52.218.220.2 (ClassC)
2019-09-05	52.218.236.210 (ClassC)
2019-09-06	52.218.228.146 (ClassC)
2019-09-13	52.218.220.202 (ClassC)
2019-09-13	52.218.229.50 (ClassC)
2019-09-14	52.218.229.42 (ClassC)
2019-09-14	52.218.229.74 (ClassC)
2019-09-16	52.218.228.74 (ClassC)
2019-09-16	52.218.221.146 (ClassC)
2019-09-17	52.218.229.210 (ClassC)
2019-09-19	52.218.236.2 (ClassC)
2019-09-22	52.218.220.26 (ClassC)
2019-09-23	52.218.230.26 (ClassC)
2019-09-27	52.218.229.18 (ClassC)
2019-10-07	52.218.221.250 (ClassC)
2019-10-07	52.218.222.18 (ClassC)
2019-10-17	52.218.229.234 (ClassC)
2020-12-07	52.218.136.210 (ClassC)
2021-01-09	52.218.178.106 (ClassC)
2021-01-09	52.218.182.138 (ClassC)
2021-01-25	52.218.178.50 (ClassC)
2021-01-27	52.218.169.18 (ClassC)
2021-04-26	52.218.169.218 (ClassC)
2021-05-02	52.218.132.2 (ClassC)
2021-07-30	52.218.168.210 (ClassC)
2023-08-27	52.92.224.35 (ClassC)
2023-11-11	52.218.182.235 (ClassC)
2024-01-28	52.92.248.3 (ClassC)
2024-05-10	52.92.180.203 (ClassC)
2024-05-17	52.92.250.27 (ClassC)
2024-05-31	52.218.237.66 (ClassC)
2024-06-25	52.92.131.51 (ClassC)
2024-06-29	52.92.195.11 (ClassC)
2024-07-14	52.92.241.243 (ClassC)
2024-08-04	52.92.178.163 (ClassC)
2024-08-09	52.92.233.3 (ClassC)
2024-08-26	52.218.197.130 (ClassC)
2024-09-13	52.218.217.122 (ClassC)
2024-10-27	52.218.253.138 (ClassC)
2024-11-10	52.92.132.75 (ClassC)
2024-12-01	52.218.236.74 (ClassC)
2024-12-14	52.92.210.11 (ClassC)
2024-12-24	52.92.250.251 (ClassC)

Subdomains

Date	Domain	IP
8963af1f72f44c739823730ba3da16d0.cookcountygov.com	2024-03-09	52.92.129.83
5b6b64f79c594a8185c6d34b8015b901.cookcountygov.com	2024-09-06	52.92.236.179
38aee23b850d448c9ac017c9ba95f793.cookcountygov.com	2024-07-24	52.218.183.43
1f23989da8184bdb8f568fbe6edcbd55.cookcountygov.com	2024-07-24	52.92.243.75
08f88fec8f9b430e83edafc91f85eba8.cookcountygov.com	2024-11-24	52.92.153.11
1de1e8f6a11a4a588685ea536b7541b8.cookcountygov.com	2024-09-29	52.92.181.27
64b9e3afdc6c4b33a5d7417b37fdb45a.cookcountygov.com	2024-10-04	52.92.236.211

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]