Domain > crazyleafdesign.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to crazyleafdesign.com

MD5	A/V
30de621003aaf1878613258355d9beca	[Backdoor.Cycbot.B] [Trojan.Diple-13] [BackDoor.Gbot.18] [Win32/Cycbot.AF] [W32/FraudLoad.MK!tr] [Trojan-Spy.Win32.Zbot] [Trojan.Win32.Diple.das] [Backdoor*Win32/Cycbot.G] [winpe/Cycbot.BP] [Mal/FakeAV-IS] [BKDR_CYCBOT.SME3] [Trojan.Diple]
5b4ca6f62d6c979add8714ee11379cf1	[W32.Clod0b6.Trojan.c93f] [Backdoor/W32.GBot.197632.F] [Backdoor.Win32.Gbot!O] [Backdoor.Cycbot.B] [Backdoor.Bot] [Backdoor/Gbot.nwp] [Trojan.Win32.XPACK.fjejp] [Crypt.AWIO] [BKDR_CYCBOT.SME3] [Trojan.Gbot-452] [Backdoor.Win32.Gbot.nwp] [TrojWare.Win32.Kryptik.SDE] [Trojan.Packed.194] [Backdoor.Gbot.Win32.2573] [Mal/ZAccess-BL] [Backdoor/Gbot.gei] [Backdoor:Win32/Cycbot.G] [Backdoor.Win32.A.Gbot.197632.E] [Trojan/Win32.Jorik] [BScope.Trojan-Spy.Zbot] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Backdoor.Win32.Cycbot] [W32/Kryptik.SMY!tr.bdr] [Win32/Cryptor] [Win32/Trojan.3dc]
DA71275A5939C34C1BBEE22B63BB7C49
3a266a6a4fe33d0b5eaab77e12811819	[Backdoor/W32.GBot.192000.E] [FakeAlert-BlueFAV] [Backdoor/Gbot.npu] [Riskware] [Backdoor.Gbot!WpQrrhgBS+A] [Backdoor.Trojan] [Gbot.AT] [Backdoor.Win32.Gbot.npu] [Troj/FakeAV-EFL] [Heur.Suspicious] [Trojan.DownLoader4.33557] [BDS/Cycbot.B.4394] [Backdoor.Win32.Gbot!IK] [Win32/Cycbot.IF] [Backdoor/Gbot.fiz] [Backdoor:Win32/Cycbot.B] [Backdoor.Win32.Gbot.192000] [Backdoor.Win32.Gbot] [W32/Gbot.EFL!tr.bdr]
09011879fb3e0198cb5767c7538950be	[TR/Kazy.14362.6] [Backdoor.Cycbot.B] [Trojan.Diple-14] [Trojan.Packed.21587] [Win32/Kryptik.LIZ] [W32/FraudLoad.MK!tr] [Cryptic.CIX] [Trojan.Win32.Diple] [Backdoor*Win32/Cycbot.G] [winpe/Cycbot.BP] [Mal/FakeAV-IS] [BKDR_CYCBOT.SMX]
856b131bf00921970a519f1b30130bda	[BDS/Gbot.aida] [Backdoor.Cycbot.B] [Trojan.Packed.21563] [Win32/Kryptik.LRI] [W32/FraudLoad.MK!tr] [Cryptic.CMD] [Backdoor.Win32.Gbot] [Backdoor.Win32.Gbot.aib] [Backdoor*Win32/Cycbot.G] [winpe/Cycbot.BP] [Mal/FakeAV-IS] [BKDR_CYCBOT.SMX] [Backdoor.Gbot]
053E481A17A5EA067C05493B289B16F2
52E3B51F0B8B13D243B95B0451432942
3FB839BED5F393CB3445CE29F8145DFA
195ef94668b17b47e46767d36d3a62d8	[Backdoor.Cycbot.B] [Win32/Kryptik.SYW] [W32/Kryptik.SMY!tr.bdr] [RogueW32/OpenCloud.A] [Win32/Cryptor] [Backdoor.Win32.Cycbot] [Backdoor.Bot] [BackdoorWin32/Cycbot.G] [Backdoor.Win32.Cycbot.a] [Mal/FakeAV-IS] [BKDR_CYCBOT.SME3] [BScope.DeadCryptor.01597]
48bef483d906fabb7278ecad1c8b17b5	[Backdoor.Cycbot.B] [Trojan.FakeAV-4863] [Trojan.DownLoader2.14054] [Win32/Kryptik.LAD] [W32/FraudLoad.MK!tr] [Cryptic.CFW] [Trojan-Spy.Win32.Zbot] [Backdoor*Win32/Cycbot.G] [winpe/Cycbot.BP] [Mal/FakeAV-IS] [BKDR_CYCBOT.SME3]
ef7cd85f9eb3f2c3cf120d590620fc04	[Backdoor.Gbot.pge] [Backdoor.Cycbot.B] [Trojan.Gbot-575] [Win32/Cycbot.AD] [W32/FakeAV.ISS!tr] [RogueW32/OpenCloud.A] [Win32/Cryptor] [Win32.SuspectCrc] [Backdoor.Win32.Gbot.pge] [Backdoor.Bot] [BackdoorWin32/Cycbot.G] [win32/Cycbot.EI] [Mal/FakeAV-IS] [Backdoor.Trojan] [BKDR_CYCBOT.SME3] [Backdoor.Gbot]
4f26503cc4627e6a9034080b58fa64db	[HW32.CDB.4449] [Backdoor.Win32.Gbot!O] [Backdoor.Cycbot.B] [Backdoor/Gbot.abh] [Trojan.Win32.Gbot.cekwa] [Cycbot.BP] [BKDR_CYCBOT.SME3] [Trojan.Diple-16] [Backdoor.Win32.Gbot.abh] [Mal/FakeAV-IS] [TrojWare.Win32.Kryptik.LEJ] [Trojan.DownLoader2.17303] [Worm/Cycbot.I] [Backdoor/Gbot.mw] [Trojan[Backdoor]/Win32.Gbot] [Backdoor:Win32/Cycbot.B] [Backdoor.Win32.A.Gbot.196096.AJ] [Win-Trojan/Cycbot.175616] [Backdoor.Gbot] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan-Spy.Win32.Zbot] [W32/FraudLoad.MK!tr] [Cryptic.CGS]
0D5039D6406D4ADED4951D9F64ED1C20
fa8292adac74c1fb7fbb6483b54f77c0	[W32/FakeAV.ACWY] [Trojan.Packed.1881]

Whois

Property	Value
Email	1CFC9AFC41DA4777BADDA09CF7312AC8.PROTECT@WHOISGUARD.COM
NameServer	NS2.FUTUREHOSTING.COM
Created	2006-10-25 00:00:00
Changed	2014-09-13 00:00:00
Expires	2015-10-25 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2011-02-19	209.188.86.208 (ClassC)
2014-06-15	173.249.152.55 (ClassC)
2014-06-16	173.249.152.55 (ClassC)
2014-09-16	199.201.88.112 (ClassC)
2014-12-21	199.201.88.112 (ClassC)
2020-04-10	104.27.132.47 (ClassC)
2020-05-06	104.27.133.47 (ClassC)
2022-08-10	188.114.97.1 (ClassC)
2025-12-11	104.21.62.231 (ClassC)
2026-01-10	172.67.139.236 (ClassC)

Subdomains

Date	Domain	IP
media.crazyleafdesign.com	2014-05-01	173.249.152.55
cdn.crazyleafdesign.com	2014-02-22	198.232.124.224
maxcdn.crazyleafdesign.com	2013-04-01	108.161.187.128
www.crazyleafdesign.com	2014-02-19	173.249.152.55
webgallery.crazyleafdesign.com	2014-08-12	173.249.152.55

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]