Help RSS API Feed Maltego Contact                        

Domain > copy.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://www.clearskysec.com/dustysky/    
https://otx.alienvault.com/pulse/568e917967db8c057...    

Files that talk to copy.com

MD5A/V
77a4aa9a892900856033e330fd6eea45
87dbc9aac324b434558266c05f324217[TrojanDownloader.JS.r4] [RDN/Downloader.a!qj] [Trojan.RA-based!mts/RlSxtb8] [WS.Reputation.1] [Win32/VB.WBcMSHC] [TROJ_DROPPE.YYXT] [Trojan-Downloader.JS.Small.ps] [JS.A.Small.127319] [SCRIPT.Virus] [TR/Visucius.119] [Trj/CI.A] [Win32/RA-based.NAW] [Trojan-Spy.Zbot] [JS/Small.NAW!tr.dldr] [Trojan.JS.Downloader.ahsa] [Win32/Trojan.Downloader.a9a]
6c5c36f11862a7781f2afad43c052843[Artemis!6C5C36F11862] [WS.Reputation.1] [TROJ_SPNV.03D214] [Trojan-Downloader.JS.Small.ps] [UnclassifiedMalware] [SCRIPT.Virus] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Win32/RA-based.NAW] [W32/RA_based.NAW!tr] [Trojan.JS.Downloader.AG] [Win32/Trojan.Downloader.a9a]
b5f63e79903d39e9d4831d249654981a[RDN/PWS-Banker.dldr!g] [Trojan.Win32.Badur.cubwxj] [TrojWare.Win32.Delf.ebs] [Trojan.DownLoader9.40604] [Trojan/Win32.Downloader] [Trj/dtcontx.L] [PE:Trojan.Banload!6.1270] [Trojan-Dropper.Delf] [W32/Delf.RQV!tr.dldr] [Win32/DH{ICQiJVdO}] [Trojan.Win32.Delf.RQV]
8bb9d1b8bf19d333fc82b073f70f72f4
1457d1dcad83198505bbc6c59125b235[Riskware] [Trojan.Win32.Scar.bypouk] [Trojan.Win32.Scar.hqtx] [Trojan.Scar!kHLHfkt40Dg] [UnclassifiedMalware] [TR/Kilim.C.4] [Heuristic.LooksLike.Win32.Suspicious.B] [Trojan/Win32.Scar] [W32/Trojan.OLGW-9305] [Trojan.Scar] [W32/Scar.HQTX!tr]
4f2fa37969f3837eba837ab10682c9b5[Artemis!4F2FA37969F3] [Posible_Worm32] [WS.Reputation.1] [Trojan-Downloader.JS.Small.ps] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [Trojan.JS.Downloader.ACR] [Win32/RA-based.NAW] [W32/RA_based.NAW!tr]
359923bda4d5fef7137a9ff933a4570f
324e4807229f820fd346142161818ef3[PossibleThreat.SB!tr]
3ea1e7c26047f6df9cc034ae4acf88cc
fb7da857ab5555734f862b5dd746c620[Artemis!FB7DA857AB55] [WS.Reputation.1] [BehavesLike.Win32.Trojan.gc] [Virus.Win32.Heur.l]
e5294340d07abd7f86a690a5f1b0053a[RDN/Downloader.a!pv] [Trojan.Dropper.SFX] [Trojan.RA-based!TQtkdAFAcCs] [WS.Reputation.1] [Trojan-Downloader.JS.Small.ps] [UnclassifiedMalware] [SCRIPT.Virus] [TR/Visucius.8] [Heuristic.BehavesLike.Win32.Suspicious-PKR.G] [TrojanDownloader.JS.Small] [Trojan.JS.Downloader.athy] [Win32/RA-based.NAW] [JS/Small.NAW!tr.dldr] [Trj/CI.A]
8e709d95713b873b5dccb7d62fc2e77b
6f6d56466b65c76d586d5a35433a74e6
5e320d401ab416a63ee11422495107d0[Trojan.Dropper]
7de11e8baba2bc7d67959b97bb12d83a
6578dad52399f7feaffe1e55aaf11d59[MSIL/Small.UF!tr.dldr]
84e7f824725d2cd8de13d8c4a52adae6
6aa5bca10373ed1cc270e025458a0588
a6c4e99dffe7ac3ad21938fe93056abb

Whois

PropertyValue
NameBarracuda Hostmaster
Organization Barracuda Networks Inc
Email hostmaster@barracuda.com
Address 3175 Winchester Blvd
Zip Code 95008
City Campbell
State CA
Country US
Phone +1.4083425400
Fax +1.4083421061
NameServer NS2.P23.DYNECT.NET
Created 1995-02-16 05:00:00
Changed 2015-02-26 20:45:02
Expires 2016-02-17 00:00:00
Registrar Domain.com, LLC

DNS Resolutions

DateIP Address
2013-05-1864.235.151.10 (ClassC)
2013-05-3164.235.151.14 (ClassC)
2013-05-3164.235.151.6 (ClassC)
2013-06-0264.235.151.13 (ClassC)
2013-06-0264.235.151.11 (ClassC)
2013-06-0364.235.151.17 (ClassC)
2013-06-0664.235.151.19 (ClassC)
2013-06-0664.235.154.165 (ClassC)
2013-06-1064.235.151.15 (ClassC)
2013-06-1264.235.151.18 (ClassC)
2013-06-1264.235.151.16 (ClassC)
2013-08-2864.235.151.34 (ClassC)
2013-10-1564.235.154.173 (ClassC)
2013-10-1564.235.154.174 (ClassC)
2013-10-1564.235.154.176 (ClassC)
2013-10-1564.235.151.36 (ClassC)
2013-10-1564.235.154.172 (ClassC)
2013-10-1664.235.154.177 (ClassC)
2013-10-1964.235.151.34 (ClassC)
2013-10-1964.235.151.32 (ClassC)
2013-10-1964.235.151.35 (ClassC)
2013-10-1964.235.154.175 (ClassC)
2013-10-1964.235.151.33 (ClassC)
2013-11-0264.235.151.41 (ClassC)
2013-11-0264.235.151.40 (ClassC)
2013-11-0364.235.151.39 (ClassC)
2013-11-0764.235.151.42 (ClassC)
2013-11-3064.235.151.4 (ClassC)
2013-11-3064.235.151.9 (ClassC)
2013-11-3064.235.151.29 (ClassC)
2013-12-1364.235.151.45 (ClassC)
2013-12-1364.235.151.46 (ClassC)
2013-12-1664.235.151.47 (ClassC)
2013-12-2264.235.151.44 (ClassC)
2013-12-2664.235.151.52 (ClassC)
2013-12-2664.235.151.25 (ClassC)
2013-12-2664.235.151.51 (ClassC)
2013-12-2764.235.151.43 (ClassC)
2014-04-0564.235.151.32 (ClassC)
2014-05-0664.235.151.39 (ClassC)
2014-05-0766.96.161.160 (ClassC)
2014-05-3164.235.151.41 (ClassC)
2014-07-2164.235.151.45 (ClassC)
2014-10-1564.235.151.36 (ClassC)
2014-10-2364.235.151.33 (ClassC)
2015-09-0164.235.153.67 (ClassC)
2015-09-0864.235.153.68 (ClassC)
2015-09-1564.235.153.72 (ClassC)
2015-09-2964.235.153.66 (ClassC)
2016-08-0769.58.186.114 (ClassC)
2016-12-01216.87.148.114 (ClassC)
2018-03-2845.79.181.179 (ClassC)
2019-05-1535.192.143.62 (ClassC)
2020-06-28104.18.39.88 (ClassC)
2020-11-18104.18.38.88 (ClassC)
2025-04-19104.21.39.72 (ClassC)
2025-05-12172.67.143.166 (ClassC)

Port 80

Port 443

Subdomains

DateDomainIP
notification.copy.com2015-03-2454.237.217.91
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information