Help RSS API Feed Maltego Contact                        

Domain > download.costmin.info

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to download.costmin.info
MD5A/V
b62ba959db5435de5159e27cf286c01b[Artemis!B62BA959DB54] [WS.Reputation.1] [Trojan.DL.Adload!sPstmMTxrtQ] [Trojan.DownLoader11.4346] [TR/Kazy.367484.21] [Win32.Troj.Undef.(kcloud)] [Win32.SuspectCrc] [W32/Adload.NMU!tr] [Trojan.Win32.Adload.NMY] [Win32/Trojan.ddc]
63611f40eaf3de595b04919fc16b77af[Artemis!63611F40EAF3] [Trojan.Downloader] [WS.Reputation.1] [Trojan.Win32.Downloader.ALF] [MalSign.T-Installer.9F8] [Win32/Trojan.Downloader.f06]
13202033dc3eb1c58747313dc09dace1
fb72ceea4c43084098e86a9b51f8897e
0dc2e8af16a9273c1dea64dc607c693f[Artemis!0DC2E8AF16A9] [Trojan.Downloader] [WS.Reputation.1] [MalSign.T-Installer.9F8] [Trojan.Win32.Downloader.AHE] [Win32/Trojan.6a8]
654aa22777e104f1e36d3805b45651fe[Trojan.Win32.Downloader.ALF]
df4b3720989448086e70db8abe6021af[Artemis!DF4B37209894] [Trojan.DownLoader11.4255] [Adware/Graftor.139281.63] [Win32.SuspectCrc] [W32/Adload.NMU!tr] [Trojan.Win32.Adload.NMY]
a148ff670d9784e798c5eb2e57de23eb
2d7b6869092840ea6592e4acdc98e155[TR/Zusy.69875.56] [Trojan*Win32/Sisproc]
f46f6a3bbf1a44fb9b64419a70845405
1db2a462e62c204df4d08448062e9be4[Trojan.DownLoader11.3077] [Win32/TrojanDownloader.Teeloads.A] [W32/Adload.NLZ!tr.dldr] [Trojan-Dropper] [winpe/Adload.AGWY]
fa89320dc3afdfbdcd0765bcf73809c1[Artemis!FA89320DC3AF] [WS.Reputation.1] [Adload.AGWY] [TR/Graftor.138906.56] [Trojan-Downloader.Win32.Adload] [W32/Adload.NMU!tr] [Trojan.Win32.Adload.NMY] [Win32/Trojan.Downloader.447]
0040813246ce52c8a1ee4f61704f207f[HW32.Laneul.sigm] [RDN/Downloader.a!qv] [Trojan.Badur!] [WS.Reputation.1] [Trojan.Win32.Badur.hyvj] [Trojan.Win32.Dolerg.cylmfa] [Win32.Trojan.Badur.Bnk] [UnclassifiedMalware] [TR/Dolerg.A.1] [Trojan/Win32.Badur] [Trojan/Win32.Dropper] [Trojan.Win32.Downloader.BAOK] [Win32/Trojan.Downloader.b21]
5b8ce5d9122c665cd6b945870f69f62b[HW32.Laneul.nouq] [SoftwareBundler:Win32/CostMin] [Win32/DH.FF8200A4{gRI0gQ4}]
20085e31ac7ff9bf538100e400e5884a[Artemis!20085E31AC7F] [Trojan.Downloader] [MalSign.T-Installer.9F8] [Trojan.Win32.Downloader.AHE] [Win32/Trojan.Downloader.f06]
84688364dbbc8d228a246bedb0c454b5[Adware.Bprotector.I] [Trojan.Downloader] [Trojan.Badur!] [Adware/BProtector.I] [Trojan/Win32.Badur] [Trojan/Win32.Downloader]
b1ee1a662824834a9603225739365806[Trojan.Downloader] [Trojan.Badur!] [Trojan/Win32.Badur] [Trojan/Win32.Downloader]
efe08ffe13862ef51888971745c31810[HW32.Laneul.tqim] [Trojan.SCTMP] [TR/Dolerg.A.2] [Win32.Troj.Undef.(kcloud)] [Win32/DH.FF8200A4{gRI0LoET}] [Trojan.Win32.Downloader.BAPY]
f235b51e3063254b59ea661a4e369b29[Artemis!F235B51E3063] [Trojan.Win32.Downloader.ALF] [MalSign.T-Installer.9F8]
aa36624784ef9941fc87fd075bdf00c2

Whois
PropertyValue
NameRegistration Private
Organization Domains By Proxy, LLC
Email COSTMIN.INFO@domainsbyproxy.com
Zip Code 85260
City Scottsdale
State Arizona
Country US
Phone +1.4806242599
Fax +1.4806242598
NameServer ns100.rookdns.com
Created 2015-01-25 10:09:44
Changed 2015-03-26 20:31:17
Expires 2016-01-25 10:09:44
Registrar GoDaddy.com, LLC (R1

DNS Resolutions
DateIP Address
2013-10-11173.245.60.133 (ClassC)
2013-10-12173.245.61.133 (ClassC)
2013-10-28141.101.116.97 (ClassC)
2014-01-19108.162.192.30 (ClassC)
2014-01-19108.162.193.30 (ClassC)
2014-03-03173.245.61.166 (ClassC)
2014-03-04173.245.60.166 (ClassC)
2014-05-03141.101.117.97 (ClassC)
2014-06-16141.101.117.97 (ClassC)
2014-06-30173.245.61.124 (ClassC)
2014-06-30173.245.60.124 (ClassC)
2014-07-01173.245.60.124 (ClassC)
2014-07-01173.245.61.124 (ClassC)
2014-07-12141.101.116.97 (ClassC)
2014-07-15104.28.28.95 (ClassC)
2014-07-22104.28.29.95 (ClassC)
2014-07-22104.28.29.95 (ClassC)
2014-07-22104.28.28.95 (ClassC)
2014-08-26162.210.193.206 (ClassC)
2014-08-26162.210.193.209 (ClassC)
2014-09-22146.185.253.147 (ClassC)
2014-09-30146.185.253.147 (ClassC)
2014-12-06209.99.40.223 (ClassC)
2014-12-07209.99.40.222 (ClassC)
2015-02-08141.8.224.239 (ClassC)
2016-04-12208.73.211.70 (ClassC)
2017-06-01184.168.221.104 (ClassC)
2018-08-0568.178.213.61 (ClassC)
2021-02-10104.200.23.95 (ClassC)
2022-05-08104.200.22.130 (ClassC)
2023-12-1196.126.123.244 (ClassC)
2024-07-1845.79.19.196 (ClassC)
2024-08-0645.33.18.44 (ClassC)
2025-01-2845.33.23.183 (ClassC)
2025-03-0172.14.185.43 (ClassC)
2025-03-1645.56.79.23 (ClassC)
2025-03-2045.33.30.197 (ClassC)
2025-03-27173.255.194.134 (ClassC)
2025-04-0445.33.20.235 (ClassC)
2025-04-0872.14.178.174 (ClassC)
2025-04-14198.58.118.167 (ClassC)
2025-04-1745.33.2.79 (ClassC)

Subdomains
DateDomainIP
dl10.costmin.info2024-10-2745.33.18.44
dl2.costmin.info2024-03-12173.255.194.134
dl3.costmin.info2025-01-1172.14.178.174
dl4.costmin.info2024-09-0945.79.19.196
dl5.costmin.info2014-07-02173.245.60.124
dl9.costmin.info2025-02-0872.14.178.174
download.costmin.info2014-07-22104.28.29.95
dl.costmin.info2024-03-1545.33.23.183
downloadapp.costmin.info2025-03-0545.33.20.235
s.costmin.info2014-07-22104.28.29.95
support.costmin.info2014-07-16104.28.28.95
www.costmin.info2024-09-10173.255.194.134
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information