Help RSS API Feed Maltego Contact                        

Domain > shaw.ca

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to shaw.ca
MD5A/V
970a7ea91d4845a5c13d26b6fa4664a0[HW32.CDB.95aa] [PWSZbot-FBOS!970A7EA91D48] [Trojan.Crypt.NKN] [TROJ_FORUCON.BMC] [Trojan.Win32.Inject.nnuq] [TR/Dropper.VB.7310] [Virus.Win32.Heur.p] [SHeur4.BWOZ]
abe19665682ad3e10ba09471775c150b[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E]
e21b3469b4fc1efddf76d8c89f1ebb2a[Malware.Packer.HGX1] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
9aa81fa022c0b159758efa1bda4f9be1[HW32.CDB.A20b] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dthd] [UnclassifiedMalware] [BackDoor.Slym.13011] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Win32.Backdoor.Hlux.Hwcu] [Trojan.Crypt3] [W32/Kryptik.BD!tr] [Crypt3.OHL] [Backdoor.Win32.Hlux.Ac]
971d6821a96e8f41da919db02ebc60da[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Yakes] [W32/Kelihos.BCEB!tr]
3fb83eaf2a665f71ac2065f5f6956d50[HW32.CDB.5da2] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cynagk] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.GeEUUIB] [Backdoor.Win32.Hlux.dqkq] [Backdoor.Hlux!m6CCC6SKjdo] [Win32.Backdoor.Hlux.Lose] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aDM]
8e0c45d714cfb9ec425923a8167305d6
0f5f90b03b49b276d148f7e6be7c30f1[HW32.CDB.27e0] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cxxldj] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.OWUMMQC] [Backdoor.Win32.Hlux.dqeh] [Backdoor.Hlux!9TTR+wn2IWc] [Backdoor.Win32.Hlux.DUHE] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Hpn] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.ArxZ]
db5b440f6419090cd9567f3b33fd3ced[Malware.Packer.HGX1] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
833009a54c295a72ad64ab0941f482fe[Suspicious.Cloud.5] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [TR/Crypt.EPACK.9220] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/FakeAV-UF] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GIF] [Trojan.Win32.Kryptik.BZOO]
b36385662ebdaf40bc3d28f90b6a4751[Spyware.Zbot.USBV] [Trojan] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Foreign]
3220ab9b63a767c299000ea9d9e3a056[HW32.CDB.1b0b] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!u8SUOkHyYnA] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.RbUfAWB] [Backdoor.Win32.Hlux.dpoo] [Trojan.Win32.Hlux.cxxuzn] [TrojWare.Win32.Kryptik.CAUP] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Backdoor.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Lgjg] [Trojan.Crypt_s] [W32/Kryptik.CAXO!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]
924be15014f785cb08ccda07be93344c[HW32.CDB.954a] [Trojan.Gatak.r3] [Spyware.Password] [TROJ_GATAK.SMZ] [UnclassifiedMalware] [Trojan.Inject1.39822] [Trojan:Win32/Gatak] [W32/Trojan.YPKT-3534] [Trojan.Win32.Dropper.Arz] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.SuspectCRC] [W32/Kryptik.BWVS!tr] [Crypt3.CQE] [Win32/Trojan.e46]
27213d33434bf796a9f535ec98e8a918[HW32.CDB.03b6]
860dd245cbecd656df047b97456d0ad0[HW32.CDB.9069] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.AntiWare!1.9D9B] [W32/Kelihos.KK@mm]
c7bf064346fafe4fc55b43abcfe96b00[HW32.CDB.E6f3] [Backdoor.Kelihos.r3] [Backdoor.Hlux!zUFIktBYK3s] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfw] [Trojan.Win32.S.PSW-Tepfer.835600.AM] [UnclassifiedMalware] [BackDoor.Slym.14049] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.QQUO-1304] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUC] [Trojan.Win32.Kryptik.BZIX]
d23e1b1c21087cfab86abe73c285956f[RDN/Spybot.bfr!l] [Trojan.Crypt.NKN] [Backdoor.Androm!s+mLSVBpBBw] [Backdoor.Win32.Androm.dqjv] [Trojan.PWS.Stealer.12751] [TR/Dropper.VB.13202] [Spyware/Win32.Zbot] [Virus.Win32.Heur.p] [Backdoor.Win32.Androm.at] [W32/Injector.BAEN!tr] [Trj/dtcontx.L]
7abb1e7e80e0f342f0452ae91375fce3
e6d960bf587f5cb1497520fe716f1fb4[Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [Backdoor:Win32/Kelihos.F] [PE:Malware.XPACK/RDM!5.1]
8889d486a91b3448e8b429ef99a536d0[HW32.CDB.1cb9] [Trojan.Win32.Kryptik.cwzoai] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnla] [Backdoor.Hlux!yM05ScK42o0] [Trojan.Packed.26544] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.DNLA!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]

Whois
PropertyValue
NameShaw Communications Inc.
Email john.tran@sjrb.ca
NameServer ns8socg.shawcable.net
Created 2000-10-30 00:00:00
Changed 2014-02-24 00:00:00
Expires 2016-03-28 00:00:00
Registrar Webnames.ca Inc.

DNS Resolutions
DateIP Address
2012-03-0264.59.134.11 (ClassC)
2014-06-05204.209.208.8 (ClassC)
2021-01-20204.209.208.8 (ClassC)
2023-07-1623.193.128.212 (ClassC)
2023-08-0396.17.46.186 (ClassC)
2023-08-2323.38.225.22 (ClassC)
2023-10-04104.78.225.157 (ClassC)
2024-01-3023.209.27.153 (ClassC)
2024-02-24104.81.178.139 (ClassC)
2024-03-0923.207.220.244 (ClassC)
2024-03-2623.202.197.206 (ClassC)
2024-08-1323.213.23.168 (ClassC)
2024-09-1723.196.145.173 (ClassC)
2024-09-2623.202.204.213 (ClassC)
2025-01-3023.49.140.65 (ClassC)
2025-03-0323.10.203.175 (ClassC)
2025-03-07104.92.251.104 (ClassC)
2025-03-1623.36.140.19 (ClassC)
2025-03-3123.49.131.241 (ClassC)

Port 80

Port 443

Subdomains
DateDomainIP
myaccount-api-pre-1.shaw.ca2025-03-17204.209.211.73
myaccount-api-pre-2.shaw.ca2023-08-26104.100.75.97
myaccount-api-2.shaw.ca2023-08-2523.209.27.153
www.pre-shawca.shaw.ca2023-08-25104.86.251.204
www.test-shawca.shaw.ca2023-08-26104.100.75.97
rda.shaw.ca2023-08-2523.209.27.153
media.shaw.ca2015-02-2754.192.6.121
my-pre-spa.shaw.ca2023-08-26104.100.75.97
my-test-spa.shaw.ca2023-08-26104.100.75.97
my-dev-spa.shaw.ca2023-08-26104.100.75.97
beta.shaw.ca2024-02-24104.81.178.139
my-beta.shaw.ca2025-03-27204.209.208.14
support-pre.shaw.ca2024-12-0118.161.6.17
entitlement.pre.shaw.ca2023-08-2624.244.0.90
secure.shaw.ca2023-08-2523.209.27.153
shawsecure.shaw.ca2025-03-1869.49.101.57
register.enterprise.shaw.ca2023-08-2523.202.204.213
pre.register.enterprise.shaw.ca2023-08-26104.100.75.97
activate.shaw.ca2024-03-2223.202.204.213
pre-activate.shaw.ca2023-08-26104.100.75.97
test-activate.shaw.ca2023-08-26104.100.75.97
image.marketing.shaw.ca2014-12-25165.254.206.97
mail.shaw.ca2024-12-2464.59.136.142
webmail.shaw.ca2024-03-1723.44.175.159
www.webmail.shaw.ca2024-11-2523.46.17.68
idcmail.shaw.ca2013-12-0264.59.134.8
videomail.shaw.ca2025-01-0364.59.134.46
newsroom.shaw.ca2023-08-2523.209.27.153
san.shaw.ca2020-04-27104.103.150.21
signin.shaw.ca2023-08-2523.209.27.153
pre.signin.shaw.ca2023-08-26104.100.75.97
tst.signin.shaw.ca2023-08-26104.100.75.97
wifi-registration.shaw.ca2025-01-1124.244.20.181
signon.shaw.ca2023-08-2523.209.27.153
wifisignon.shaw.ca2025-01-1124.244.20.182
shop.shaw.ca2023-08-2523.209.27.153
register.shaw.ca2024-03-2223.202.204.213
pre.register.shaw.ca2023-08-26104.100.75.97
chatapps-services.shaw.ca2024-12-2023.196.145.173
images.shaw.ca2023-08-2523.202.204.213
activations.shaw.ca2023-08-2523.209.27.153
members.shaw.ca2024-11-0264.59.134.46
www.members.shaw.ca2013-04-0164.59.134.11
business.shaw.ca2015-04-0923.194.44.28
media.business.shaw.ca2014-03-30216.137.39.235
securepayment.business.shaw.ca2023-08-2523.209.27.153
pre-securepayment.business.shaw.ca2023-08-26104.100.75.97
auth.consumer-ui.prod.stc.aws.shaw.ca2023-07-163.163.24.72
edl.prod.stc.aws.shaw.ca2024-07-0318.161.6.93
cognito.prod.stc.aws.shaw.ca2024-10-163.163.24.41
edl.nonprod.stc.aws.shaw.ca2024-10-0818.172.170.59
edl.playpen.stc.aws.shaw.ca2024-08-2099.84.66.39
ciu.playpen.stc.aws.shaw.ca2024-06-2618.161.6.24
api.playpen.digital.aws.shaw.ca2024-04-2354.148.102.117
api-tmp.playpen.digital.aws.shaw.ca2024-04-2344.236.100.20
dtprod2-billing-invoice.dtprod2.dsl.aws.shaw.ca2023-08-2523.202.204.213
prd-outageservice.dtprod2.dsl.aws.shaw.ca2023-08-2523.209.27.153
dtprod2-enterprise-internetusage.dtprod2.dsl.aws.shaw.ca2023-08-2523.209.27.153
dtprod2-myaccount-knowledgebase.dtprod2.dsl.aws.shaw.ca2023-08-2523.209.27.153
dtprod2-mfa-aggregate.dtprod2.dsl.aws.shaw.ca2024-07-11104.110.134.16
newsroom.dtprod2.dsl.aws.shaw.ca2024-03-2223.213.23.168
dtprod2-ecommerce-ordersubmission.dtprod2.dsl.aws.shaw.ca2024-01-08104.81.178.139
dtprod2-ecommerce-marketlocation.dtprod2.dsl.aws.shaw.ca2023-08-2523.202.204.213
dtprod2-ecommerce-customer.dtprod2.dsl.aws.shaw.ca2023-08-2523.209.27.153
dtprod2-enterprise-customer.dtprod2.dsl.aws.shaw.ca2023-08-2523.209.27.153
shawbusiness.dtprod2.dsl.aws.shaw.ca2023-08-2523.209.27.153
shawdirect.dtprod2.dsl.aws.shaw.ca2023-08-2523.209.27.153
api.prod.dsl.aws.shaw.ca2019-07-3013.249.134.104
preprod-billing-invoice.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
test-billing-invoice.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
pre-outageservice.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
tst-outageservice.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
pre-enterprise-internetusage.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
test-enterprise-internetusage.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
shawbusiness-pre.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
preprod-myaccount-knowledgebase.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
test-myaccount-knowledgebase.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
preprod-mfa-aggregate.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
nonprod-mfa-aggregate.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
newsroom.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
test-authenticationtoken.nonprod.dsl.aws.shaw.ca2024-12-2623.198.164.190
test-ecommerce-ordersubmission.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
preprod-ecommerce-customer.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
test-ecommerce-customer.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
pre-enterprise-customer.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
test-enterprise-customer.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
shawdirect.nonprod.dsl.aws.shaw.ca2023-08-26104.100.75.97
dtprod-billing-invoice-prod-api.dtprod.dsl.aws.shaw.ca2023-08-2523.209.27.153
dtprod-ecommerce-ordersubmission-prod-external.dtprod.dsl.aws.shaw.ca2023-08-2523.209.27.153
playpen-billing-invoice.playpen.dsl.aws.shaw.ca2023-08-26104.100.75.97
dev-outageservice.playpen.dsl.aws.shaw.ca2024-12-2623.198.164.190
dev-enterprise-internetusage.playpen.dsl.aws.shaw.ca2023-08-26104.100.75.97
playpen-myaccount-knowledgebase.playpen.dsl.aws.shaw.ca2024-07-28184.85.76.161
playpen-mfa-aggregate.playpen.dsl.aws.shaw.ca2023-08-26104.100.75.97
playpen-ecommerce-ordersubmission.playpen.dsl.aws.shaw.ca2023-08-26104.100.75.97
playpen-ecommerce-customer.playpen.dsl.aws.shaw.ca2023-08-26104.100.75.97
dev-enterprise-customer.playpen.dsl.aws.shaw.ca2023-08-26104.100.75.97
shawecomm-dev.playpen.dsl.aws.shaw.ca2023-08-25104.86.251.204
shawbusiness-dev.playpen.dsl.aws.shaw.ca2024-03-22104.100.75.97
auth.prod.ffm.aws.shaw.ca2024-12-263.96.121.101
app.prod.ffm.aws.shaw.ca2024-12-2618.172.170.99
api-gateway.prod.ffm.aws.shaw.ca2024-12-2615.157.89.162
media.direct.shaw.ca2014-08-2054.230.90.53
pre-securepayment.shawdirect.shaw.ca2023-08-26104.100.75.97
pre-myshawdirect.shaw.ca2023-08-26104.100.75.97
entitlement.shaw.ca2023-08-2624.244.7.136
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information