Domain > su.edu

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to su.edu

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
69105950b2bb95843dea5937bea0e8f0	[HW32.CDB.5919] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
b34430b8e494c41f86c5aa47b002a212	[Crypt2.AZDS]
2422279645dc3f8f9201bf042122d6d5	[W32.Clod317.Trojan.772f] [Backdoor/W32.Pushdo.36280.C] [Trojan.Cutwail.AQ] [Trojan.Win32.XPACK.bdjuve] [W32.Pilleuz] [Pushdo.B] [TROJ_CUTWAIL.KK] [Trojan.Wigon!3W+DBvqt2Q0] [Backdoor.Win32.A.Pushdo.36280.A] [UnclassifiedMalware] [Trojan.DownLoad3.17030] [Heuristic.BehavesLike.Win32.Suspicious-DTR.K] [Troj/FakeAV-GDI] [Backdoor/Pushdo.dr] [Win32.Hack.Pushdo.(kcloud)] [TrojanDownloader:Win32/Cutwail.BW] [Trojan/Win32.Zbot] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo] [W32/CutMail.EE!tr] [SHeur4.ATIK] [Trojan.Win32.Kryptik.aN]
5ea646ffdc1e9bc7759fdfc926de7660	[PWS-FASY!5EA646FFDC1E] [Malware.Packer.EGX7] [Password-Stealer] [Trojan] [Hlux.XD] [Trojan-PSW.Win32.Tepfer.ijnk] [BackDoor.Slym.1498] [TR/Rogue.14575.23] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Troj/Tepfer-Q] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Foreign] [HeurEngine.MaliciousPacker] [Win32/Kelihos.F] [Trojan-PWS.Win32.Tepfer] [W32/Kryptik.X!tr] [Trj/Tepfer.B]
9377d78f1f97104f41a6b42b195c8e51	[SHeur4.BLZU]
63e2d975b940af1a4ae7c80f7f6f7052	[TrojanDownloader*Win32/Cutwail.BS]
baa408ed5bf00d6bbc48d25119f9e412	[SHeur4.BLIR] [PWS-Zbot-FBFS!BAA408ED5BF0]
134820f2642ecd70da1e252bc6b94d36
a1c6f433289e28861c8876b0c161afee
2f80660b47db546c6907edd95868b901	[Backdoor.Pushdo] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo]

Whois

Property	Value
Email	dfox2@su.edu
Address	Shenandoah University 1460 University Drive Winchester, VA 22601 UNITED
NameServer	TIM.NS.CLOUDFLARE.COM
Created	1994-10-20 00:00:00
Changed	2013-01-09 00:00:00
Expires	2015-07-31 00:00:00

DNS Resolutions

Date	IP Address
2013-04-01	184.106.55.84 (ClassC)
2013-06-19	141.101.123.29 (ClassC)
2013-06-19	141.101.112.29 (ClassC)
2013-06-27	190.93.254.108 (ClassC)
2013-06-27	190.93.255.108 (ClassC)
2013-09-01	190.93.241.29 (ClassC)
2013-10-11	190.93.240.29 (ClassC)
2013-10-12	190.93.241.29 (ClassC)
2013-10-12	141.101.112.29 (ClassC)
2013-10-12	141.101.113.29 (ClassC)
2013-10-12	190.93.240.29 (ClassC)
2014-03-07	141.101.113.29 (ClassC)
2014-06-18	72.21.81.168 (ClassC)
2014-10-02	72.21.81.168 (ClassC)
2025-04-16	141.193.213.10 (ClassC)
2025-05-10	141.193.213.11 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
www.financial-aid.su.edu	2015-02-04	72.21.81.168
www.student-life.su.edu	2014-11-14	72.21.81.168
stage.su.edu	2025-04-17	72.21.81.168
edge.su.edu	2025-05-08	72.21.81.168
www.nursing.su.edu	2015-03-22	72.21.81.168
education.su.edu	2015-03-03	72.21.81.168
www.education.su.edu	2015-05-03	72.21.81.168
ftp.su.edu	2025-04-12	72.21.81.168
www.academics.su.edu	2014-11-14	72.21.81.168
www.admissions.su.edu	2014-12-10	72.21.81.168
www.business.su.edu	2014-10-14	72.21.81.168
www.physician-assistant.su.edu	2014-05-31	72.21.81.168
areyou.su.edu	2023-07-23	18.161.6.125
www.su.edu	2013-04-01	141.101.112.29
www.pharmacy.su.edu	2015-03-04	72.21.81.168
www.occupational-therapy.su.edu	2014-11-14	72.21.81.168
www.conservatory.su.edu	2014-06-30	72.21.81.168

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]