Domain > eduvantage.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to eduvantage.com

MD5	A/V
76ef9c92ac26cead869b4817d84ed828	[Win32/Injector.CFWO] [BehavesLike.Win32.Downloader.cc] [TR/Crypt.Xpack.2534] [Ransom:Win32/Crowti] [Trojan/Win32.Injector] [Trojan.Win32.Injector] [W32/CFWO!tr] [Trojan.Win32.Injector.CFWO]
3cc59be78fbab4b0eb2b77054c4d847c
a0c99d273a1d41d981c1c1a96dda8221	[Virus/MSWord.Kpmv]
1a304a6125f93fc765fa65073619176b
1300121f710f431f1f9bd0ae45d19872	[PP97M/Downloader.AA] [W2KM_BA.9474108A] [W2KM_BA.9474108A] [Troj/DocDl-YV]
7043dfa17aabc3c3ea6ab24c04932812
740e9048ac0dd918340efedd9ef06c6a	[Trojan.Tinba.WR4] [Trojan.CryptoLocker] [Trojan.Cryptodef.Win32.890] [Trojan/Kryptik.dsev] [Trojan.Win32.Cryptodef.duwtwv] [W32/Trojan.LTMD-9217] [Trojan.Cryptodefense] [TROJ_CRYPWALL.CBQ1583] [Trojan-Ransom.Win32.Cryptodef.xlu] [Trojan.Kryptik!0n8/khWP2zY] [Troj.Ransom.W32.Cryptodef!c] [Win32.Trojan.Cryptodef.Aeeg] [UnclassifiedMalware] [Trojan.Encoder.514] [TROJ_CRYPWALL.CBQ1583] [BehavesLike.Win32.PWSZbot.dc] [Mal/Tinba-G] [Trojan/Cryptodef.qm] [TR/Crypt.ZPACK.55398] [Ransom:Win32/Crowti.A] [Ransom-CWall.a] [Hoax.Cryptodef] [Trojan.Win32.Crypt] [W32/Kryptik.DSAB!tr] [Crypt4.BTSN]
4211d94ebfaa799ff390f8d5d7f51dc6
ba226261101330f76e331016978d579d	[W32.OzenziH.Trojan] [Trojan.Ransom.AKE] [Trojan.Ransom.AKE] [Ransom.Cryptowall.A4] [Ransom-CWall-FXG!BA2262611013] [Trojan.CryptoLocker] [Trojan.Filecoder.Win32.559] [Trojan/Filecoder.co] [Trojan.Ransom.AKE] [Trojan.Win32.Cryptodef.dxnson] [Trojan.Randsom.A] [Win32/Filecoder.CryptoWall.D] [TROJ_CRYPWALL.SMJC] [Win.Trojan.Ransom-4567] [Trojan-Ransom.Win32.Cryptodef.cku] [Trojan.Ransom.AKE] [Trojan.Cryptodef!] [Trojan.Win32.Z.Ransom.135168[h]] [Win32.Trojan.Inject.Auto] [Trojan.Ransom.AKE] [Trojan.Ransom.AKE] [Trojan.Encoder.514] [TROJ_CRYPWALL.SMJC] [BehavesLike.Win32.Trojan.ch] [Troj/Ransom-AGU] [W32/Ransom.QSLH-9334] [Trojan.Cryptodef.bb] [Trojan[Ransom]/Win32.Cryptodef] [Ransom:Win32/Crowti.A] [Troj.Ransom.W32.Cryptodef!c] [Trojan/Win32.CryptoWall] [Trojan.Ransom.AKE] [Trojan.Ransom.AKE] [BScope.TrojanRansom.Cryptowal]

Whois

Property	Value
NameServer	NS-1986.AWSDNS-56.CO.UK
Created	2002-02-06 00:00:00
Changed	2016-02-07 00:00:00
Expires	2017-02-06 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2015-07-30	54.187.137.89 (ClassC)
2015-08-12	54.186.195.204 (ClassC)
2025-05-03	15.197.148.33 (ClassC)
2025-08-05	3.33.130.190 (ClassC)

Port 443

Subdomains

Date	Domain	IP
www.eduvantage.com	2025-05-24	15.197.148.33

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]