Help RSS API Feed Maltego Contact                        

Domain > covance.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports
https://www.virustotal.com/en/file/638ddc24875a6ec...    

Files that talk to covance.com
MD5A/V
18e1ec2d3092fa3be2c970ce91ef31a0[HW32.CDB.4548] [RDN/q2z-art6.s_318383!a] [Trojan.Win32.Slym.cxaqmr] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnxw] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]

Whois
PropertyValue
NameDomain Admin
Organization Covance, Inc.
Email domain.registrar@covance.com
Address 210 Carnegie Center
Zip Code 08540
City Princeton
State NJ
Country US
Phone +1.6094524923
Fax +1.6094192135
NameServer ns3.ubm-us.net
Created 1997-03-13 05:00:00
Changed 2015-03-10 05:27:03
Expires 2016-03-14 00:00:00
Registrar CSC CORPORATE DOMAIN

DNS Resolutions
DateIP Address
2014-05-29207.97.219.185 (ClassC)
2014-08-0669.58.186.114 (ClassC)
2019-09-19216.87.148.114 (ClassC)
2019-12-10204.74.99.103 (ClassC)
2020-06-28162.134.132.9 (ClassC)
2021-11-10208.66.166.156 (ClassC)
2021-11-10208.66.166.157 (ClassC)
2021-11-10208.66.166.215 (ClassC)
2021-11-10208.66.166.216 (ClassC)
2025-12-17104.18.0.25 (ClassC)
2026-01-10104.18.1.25 (ClassC)

Subdomains
DateDomainIP
ap1expe01.covance.com2025-12-17113.29.67.145
eu1expe01.covance.com2026-01-06208.66.167.185
smtprewrite01.covance.com2025-12-17162.134.132.73
nadcsmtp01.covance.com2025-12-17208.66.166.156
ap1expe02.covance.com2025-12-17113.29.67.146
eu1expe02.covance.com2025-12-09208.66.167.186
smtprewrite02.covance.com2026-01-04162.134.132.74
nadcsmtp02.covance.com2025-12-17208.66.166.157
nadcsmtp04.covance.com2025-12-17208.66.166.216
vpn-na.covance.com2025-12-09208.66.166.24
tibesb.covance.com2025-12-17208.66.166.146
mysource.covance.com2025-12-07104.18.4.42
inside.covance.com2025-04-1644.219.32.84
auth-stage.covance.com2025-12-07104.18.4.42
images.response.covance.com2014-12-21165.254.207.19
globalsiteloading.covance.com2025-12-1752.170.29.66
clscommercial.covance.com2026-01-0440.117.248.117
invision.covance.com2026-01-0554.159.234.47
activation.covance.com2025-12-08104.18.4.42
tibpon.covance.com2025-12-18208.66.166.72
tachyon.covance.com2025-12-11162.134.132.17
asavpn.covance.com2025-12-17208.211.205.123
patientintelligence-demo.covance.com2025-04-2920.206.176.3
xsp.covance.com2025-12-11162.134.132.22
invp.covance.com2025-12-09162.134.132.22
jobs.covance.com2025-12-1150.19.241.165
solutions.covance.com2025-01-02104.18.4.42
careers.covance.com2025-09-01104.18.5.42
argus.covance.com2025-12-1114.143.203.193
lablinkplus.covance.com2025-12-11208.66.166.179
mfttest.covance.com2025-12-16208.66.166.159
vpn-eu.covance.com2025-12-11208.66.167.24
www.covance.com2025-11-14104.18.5.42
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information