Domain > npower.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to npower.com

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
a472f9d1a78fa6cb3eb6896d9c319726	[TrojanDownloader.Cutwail.bs] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btelgd] [WS.Reputation.1] [BKDR_PUSHDO.FC] [Backdoor.Win32.Pushdo.qgz] [Backdoor.Pushdo!+jNmAzmKgNc] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.RMSR-3833] [Trojan.CryptHWZ] [W32/Pushdo.QGZ!tr.bdr] [Crypt.CHWZ] [Trj/Pushdo.L]
860dd245cbecd656df047b97456d0ad0	[HW32.CDB.9069] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.AntiWare!1.9D9B] [W32/Kelihos.KK@mm]
2263766e2732eb5e6eb78b5d35423883	[Crypt2.BTUL] [TrojanDownloader*Win32/Cutwail.BS]
3b54013dbac240d454b929a3745a46e4	[Artemis!3B54013DBAC2] [WS.Reputation.1] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.ppt] [UnclassifiedMalware] [BackDoor.Bulknet.958] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ]
2ba1c7eb19cc61d8cfb858e81b613787	[Crypt2.BVGD] [RDN/Downloader.a!nu] [TrojanDownloader*Win32/Cutwail.BS]
e3346adfbe598fe8dacfcf07debecc50	[TrojanDownloader*Win32/Cutwail.BS]
1623be5a046aa215162665c5067332e0	[HW32.CDB.Db63] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan-PSW.Win32.Tepfer.tybm] [Trojan.PWS.Tepfer!sA6n+JUlMF8] [UnclassifiedMalware] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Trojan.YSDP-3009] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Trojan.Win32.InfoStealer.aRBP]
4a110bd7cb835d71df2345ad50c25b23	[HW32.CDB.9f50] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [UnclassifiedMalware] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ] [Win32/Trojan.0de]
0dd56a0b8ea7bedb57cebf9aacdac40f	[Malware.Packer.HGX1] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [W32/Kryptik.AXUE!tr]
06d40abb65ee157ff2574df8d24743f1
e57d3b285148fa02129b9c0044aa8737	[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
43415b6d9537a142cec2c22c31f8bfae	[Cutwail-FBYD!43415B6D9537] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo.qev] [Trojan.Kryptik!NPQTFtfoX4A] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Artemis!43415B6D9537] [TrojanDownloader:Win32/Cutwail] [Trojan.CryptCQK] [W32/Pushdo.QEV!tr.bdr] [Crypt.CCQK] [Trj/Dtcontx.E]
98428f0dd3514edeb4f14e4d14cccdb3
eda12e74f2bad4b28fdd71781fe4eee8	[Crypt2.BTUL] [TrojanDownloader*Win32/Cutwail.BS]
fe734b28009c7dd5389f64d72722bb21
75b137894f58fa200e8ef67d1af6595c
28450f092671f0a9243e0810ed8bf536	[W32.UsernameBiomoefC.Trojan] [Trojan/W32.Inject.37376.AD] [Backdoor.Win32.Pushdo!O] [TrojanDownloader.Cutwail.BS4] [Spyware.Password] [Backdoor.Pushdo.Win32.8] [Backdoor/Pushdo.b] [Trojan.Wigon!2ViUZd+YYyE] [New] [Win32/Wigon.PB] [Mal_DLDER] [WIN.Trojan.Pushdo-16] [Backdoor.Win32.Pushdo.b] [Trojan.Win32.Pushdo.bgkqij] [Backdoor.Win32.A.Pushdo.37376[h]] [Trojan.DownLoader6.62576] [Mal_DLDER] [Downloader-FKQ!28450F092671] [Backdoor/Pushdo.a] [W32/Pushdo.B!tr.bdr] [Trojan[Backdoor]/Win32.Pushdo] [Win32.Hack.Pushdo.(kcloud)] [Backdoor/Win32.Pushdo] [TrojanDownloader:Win32/Cutwail.BS] [Downloader-FKQ!28450F092671] [Backdoor.Pushdo] [Trj/OCJ.A] [Win32.Backdoor.Pushdo.Hqlp] [Backdoor.Win32.Pushdo.b]
af4b04164d37352490ff297a719b575e	[Win32/Cutwail.BXH] [Backdoor/W32.Pushdo.41472.B] [TrojanDownloader.Cutwail.BS5] [Trojan/Kryptik.axmu] [Trojan.Win32.Bulknet.bqoczp] [W32/Backdoor2.HRTG] [W32.Pilleuz] [Win32/Wigon.PH] [TROJ_CUTWAIL.LM] [Backdoor.Win32.Pushdo.pvb] [Trojan.Kryptik!aoUJfE0IuXs] [Backdoor.Win32.Pushdo.41472[h]] [Troj/Bckdr-RPP] [UnclassifiedMalware] [BackDoor.Bulknet.847] [Backdoor.Pushdo.Win32.320] [TROJ_CUTWAIL.LM] [BehavesLike.Win32.Downloader.pc] [W32/Backdoor.WDQO-6126] [Backdoor/Pushdo.zh] [TR/Dldr.Cutwail.BS.101] [Trojan[Backdoor]/Win32.Pushdo] [Win32.Troj.Dorifel.ac.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Pushdo.pvb] [Trj/OCJ.E] [Trojan.Wigon.PH] [Backdoor.Win32.Pushdo] [W32/Pushdo.PVB!tr.bdr] [SHeur4.BEJF] [Backdoor.Win32.Pushdo.pvb]
f593d4eaba8dc72a22309a69475e9729	[Win32/Cutwail.ZAAG!suspicious] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.Cutwail] [Trojan.Inject.IA] [Trojan.Win32.Bulknet.cssuqh] [New] [WS.Reputation.1] [Trojan.Downloader.Small-3221] [Trojan.Inject.IA] [Trojan.Inject!MMFDfR2fHM0] [Win32.Trojan.Spy.Ednf] [Trojan.Inject.IA] [UnclassifiedMalware] [Trojan.Inject.IA] [Trojan.MulDrop3.14959] [Mal_DRPR-3] [BehavesLike.Win32.Dreform.qh] [Patched] [Trojan[:HEUR]/Win32.Unknown] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Bagle] [Trojan.Inject.IA] [Cutwail-FBWN!F593D4EABA8D] [BScope.Trojan.Cutwail.4512] [Trojan.Win32.Wigon.PH] [W32/Scar.TMP!tr] [Win32/DH{AyAkIiUP}] [Trj/CI.A] [Win32/Trojan.c7d]

Whois

Property	Value
Name	npower ltd
Organization	npower ltd
Email	webmaster@npower.com
Address	Bridgwater Road
Zip Code	WR4 9FP
City	Worcester
State	Worcstershire
Country	GB
Phone	+44.1905340582
Fax	+44.1905340766
NameServer	dns4.rwe.com
Created	1997-11-25 00:00:00
Changed	2015-04-17 16:32:23
Expires	2015-11-24 00:00:00
Registrar	Ascio Technologies,

DNS Resolutions

Date	IP Address
2012-12-22	80.169.51.202 (ClassC)
2013-06-19	85.8.204.208 (ClassC)
2013-09-05	85.8.204.208 (ClassC)
2024-05-02	51.104.28.72 (ClassC)
2024-07-27	104.18.30.108 (ClassC)
2024-11-23	104.18.32.149 (ClassC)
2024-12-26	172.64.155.107 (ClassC)

Port 443

Subdomains

Date	Domain	IP
cssprod.npower.com	2023-08-25	20.8.3.25
image.businesssolutions.npower.com	2024-09-04	184.28.50.144
click.businesssolutions.npower.com	2024-09-29	23.38.194.63
click.businessenergy.npower.com	2024-02-21	23.219.78.206

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]