Domain > sp-clientlog.spccint.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to sp-clientlog.spccint.com

MD5	A/V
b1f998c852d85c979a3831286797f40e	[Artemis!B1F998C852D8] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [PE:PUF.OpenCandy!1.9DE5] [OpenCandy] [Adware.Downware.1446] [AdWare.OpenCandy] [Win32/JoyDownloader.A] [Sevas.204]
60421fc2d42bdf99e5a1455e3dfb57b9	[Artemis!60421FC2D42B] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [Adware.Downware.1446] [OpenCandy] [Downloader.ASQ] [Win32/JoyDownloader.A] [PE:PUF.OpenCandy!1.9DE5]
b72d502aa28687b44e7406b5870122e8	[Artemis!B72D502AA286] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [OpenCandy] [Adware.Downware.1446] [Win32/JoyDownloader.A] [PE:PUF.OpenCandy!1.9DE5] [Downloader.ASQ]
564edbf26b62fb9fa6bfe22c0886cef6	[Artemis!564EDBF26B62] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [OpenCandy] [Adware.Downware.1446] [Win32/JoyDownloader.A] [PE:PUF.OpenCandy!1.9DE5] [Downloader.ASQ]
6f56544d5a5c9e159b2f064e81be177a	[PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [not-a-virus:AdWare.Win32.OpenCandy.e] [Adware.Downware.1446] [Win32/JoyDownloader.A] [PE:PUF.OpenCandy!1.9DE5] [Downloader.ASQ]
96ad863ccf71ca5386db90208d9005c1	[PUP.Optional.SearchProtect.A] [Adware.Conduit.40] [NSIS.Application.SearchProtect.U] [Win32/Conduit.SearchProtect.N] [Trojan.Win32.AdGazelle.BA]
495a050e26ec441e3025a6f45b1b96fa	[Artemis!495A050E26EC] [PUP.Optional.OpenCandy] [Win32/Tnega.eQYfNQB] [PUA.OpenCandy!] [OpenCandy] [Adware.Downware.1446] [AdWare.OpenCandy] [Win32/OpenCandy] [PE:PUF.OpenCandy!1.9DE5] [Sevas.204]
cd13dc03fa46dac971872fb850ef37e8	[Artemis!CD13DC03FA46] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [Adware.Downware.1446] [OpenCandy] [Win32/OpenCandy] [PE:PUF.OpenCandy!1.9DE5] [Sevas.204]
78167050aa2820595074d8a7abd6b1a7	[Artemis!78167050AA28] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [OpenCandy] [Adware.Downware.1446] [AdWare.OpenCandy] [Win32/JoyDownloader.A] [PE:PUF.OpenCandy!1.9DE5] [Downloader.ASQ]
51c6b5ce0767fcb2806f8f6d5c78d3d0	[Artemis!51C6B5CE0767] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [Adware.Downware.1446] [Win32/JoyDownloader.A] [PE:PUF.OpenCandy!1.9DE5] [Downloader.ASQ] [OpenCandy] [Sevas.204]
3afb58cbf98ebd25196094e762265b8c	[Artemis!3AFB58CBF98E] [PUP.Optional.OpenCandy] [Riskware.OpenCandy!] [PE:PUF.OpenCandy!1.9DE5] [OpenCandy] [Adware.Downware.1446] [AdWare.OpenCandy] [Win32/JoyDownloader.A] [Sevas.204]
742512981580c2233a69f273a88e47b9	[SafeSearch] [PUP/Win32.Helper] [Win32/Conduit.SearchProtect.M] [Riskware/Conduit_SearchProtect] [Adware.Win32.Conduit.BM]
3a978182a050ecb3bbb2d830ad9b531f
3cbec453c2ec3ca15e117a56b8b2c005	[W32.HfsAdware.A5D5] [Artemis!3ABEA0051F78] [PUP.Optional.SearchProtect.AppFlsh] [Riskware.Win32.SearchProtect.dzkeog] [not-a-virus:AdWare.Win32.SearchProtect.tt] [Adware.Conduit.298] [BehavesLike.Win32.Suspicious.rc] [AdWare.SearchProtect.cy] [GrayWare[AdWare]/Win32.SearchProtect.tt] [PUP.Adware.ClientConnect] [AdWare.SearchProtect] [PUA.Conduit.SearchProtect] [Adware/SearchProtect] [PUP/SearchProtect]
ec3eda9a0c2d36e02fd2b8dcc030acb5	[W32.HfsAdware.A5D5] [PUP.Optional.SearchProtect.AppFlsh] [PUA.SearchProtect!] [W32/Application.IBVZ-0813] [TROJ_GE.E8E0A7F3] [not-a-virus:AdWare.Win32.SearchProtect.tt] [Riskware.Win32.Conduit.dyxdte] [Adware.Conduit.298] [TROJ_GE.E8E0A7F3] [BehavesLike.Win32.Downloader.rc] [AdWare.SearchProtect.cy] [GrayWare[AdWare]/Win32.SearchProtect.tt] [PUP.Adware.ClientConnect] [Artemis!EC3EDA9A0C2D] [PUP/SearchProtect] [PUA.Conduit.SearchProtect] [Adware/SearchProtect] [Win32/Application.763]

Whois

Property	Value
NameServer	NS2.P23.DYNECT.NET
Created	2013-11-21 00:00:00
Changed	2015-05-04 00:00:00
Expires	2017-01-01 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2014-05-31	23.67.7.61 (ClassC)
2014-10-25	23.60.103.61 (ClassC)
2014-10-27	23.194.96.11 (ClassC)
2014-12-03	23.60.247.61 (ClassC)
2015-03-12	23.65.16.11 (ClassC)
2015-06-26	104.79.143.63 (ClassC)
2015-07-19	23.72.45.173 (ClassC)
2015-12-20	184.31.192.226 (ClassC)
2016-01-07	23.221.36.210 (ClassC)
2016-02-09	23.61.10.197 (ClassC)
2017-03-11	23.4.109.193 (ClassC)
2017-05-13	23.9.97.214 (ClassC)
2018-12-21	23.1.130.7 (ClassC)
2019-06-24	23.40.37.43 (ClassC)
2019-09-15	104.65.40.9 (ClassC)
2019-09-15	2.19.121.61 (ClassC)
2019-09-15	23.45.72.11 (ClassC)
2019-09-17	104.100.233.160 (ClassC)
2020-03-11	100.25.94.202 (ClassC)
2023-12-06	3.218.125.113 (ClassC)
2024-01-03	34.193.27.102 (ClassC)
2024-01-28	23.20.4.92 (ClassC)
2024-02-16	3.214.252.117 (ClassC)
2024-02-24	44.214.172.204 (ClassC)
2024-03-19	54.145.48.70 (ClassC)
2024-04-08	52.6.221.29 (ClassC)
2024-05-04	52.86.148.192 (ClassC)
2024-05-27	34.206.9.225 (ClassC)
2024-06-18	52.23.129.229 (ClassC)
2024-07-02	52.5.88.225 (ClassC)
2024-07-19	52.4.139.135 (ClassC)
2024-07-25	54.145.196.100 (ClassC)
2024-08-05	54.157.182.212 (ClassC)
2024-08-24	52.73.239.201 (ClassC)
2024-09-20	34.225.22.20 (ClassC)
2024-10-03	54.162.206.218 (ClassC)
2024-11-23	44.199.119.249 (ClassC)
2025-01-06	34.199.131.21 (ClassC)
2025-01-13	3.230.192.61 (ClassC)
2025-03-09	44.218.131.131 (ClassC)
2025-03-31	44.198.219.125 (ClassC)
2025-04-14	34.199.221.250 (ClassC)
2025-05-29	54.81.76.42 (ClassC)
2025-05-29	107.20.88.55 (ClassC)
2025-06-16	100.28.37.94 (ClassC)
2025-06-22	3.216.239.39 (ClassC)
2025-06-28	13.219.28.111 (ClassC)
2025-07-01	3.210.81.1 (ClassC)
2025-07-14	34.232.174.116 (ClassC)
2025-07-24	54.235.247.65 (ClassC)
2025-07-31	34.194.198.121 (ClassC)
2025-08-17	34.236.40.121 (ClassC)
2025-09-09	98.85.153.226 (ClassC)
2025-09-19	3.233.7.95 (ClassC)
2025-10-07	3.214.19.36 (ClassC)
2025-10-19	52.203.30.234 (ClassC)
2025-10-22	52.45.205.173 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
sp-download.spccint.com	2014-06-03	195.78.120.164
c-sp-download.spccint.com	2014-06-03	23.67.7.61
spms-download.spccint.com	2014-11-05	199.101.115.231
sp-storage.spccint.com	2014-06-24	23.67.7.61

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]