Domain > zoo.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to zoo.com

MD5	A/V
16eca097f6bdf78953c6d79b8a7fa7e3	[Win32/Virut.A] [Virus*Win32/Virut.A] [Worm.Bagle-54]
d896b6a09a0939db4d54b3b9d1bc80f4	[Win32/Sality] [Virus*Win32/Sality.M] [Worm.Bagle-54] [W32/Sality.K]
a54d0df9e22adcdd1fa7e8dd9662d071	[Win32/Sality] [Virus*Win32/Sality.G] [Worm.Bagle-54] [WORM/Bagle.FJ]
8968bb6b5be47188e43e14564040d1f4	[Win32/Sality] [Virus*Win32/Sality.G] [Worm.Bagle-54] [WORM/Bagle.FJ]
2354ef34971024529b5162d727201283	[Virus*Win32/Sality.G] [Worm.Bagle-54]
0717f773f6b478c194fc9dcb6f101ca1	[Worm.Bagle-54] [Win32/Sality] [Virus*Win32/Sality.G]
73974d2468d5ee352e5241922972f0f4	[Worm.Bagle-54] [Win32/Sality] [Virus*Win32/Sality.G]
bc3d10041e5a550a2cbb2bc405bcde41	[Worm.Bagle-54] [WORM/Bagle.FJ] [Win32/Sality]
805a6e462509b62061ab897316440114	[Worm.Bagle-54] [Virus*Win32/Sality.G] [Win32/Sality]
5e7982a4b44f483f138adc79f36846e1	[Worm.Bagle-54] [Virus*Win32/Sality.G]
070bd32e86d07ec129dbf58f93b5f2a4	[W32.BuzusBN.Worm] [Win32.Bagle.FK@mm] [Email-Worm.Win32.Bagle!O] [W32.Sality.K] [W32/Bagle.fk] [Trojan.Win32.Bagle.lxgm] [W32/Bagle.DY@mm] [W32.Beagle.DN@mm] [Downloader] [Win32/Bagle.DT] [WORM_BAGLE.EF] [Win32:Sality-V] [Worm.Bagle-54] [Email-Worm.Win32.Bagle.fk] [I-Worm.Bagle!jsGJXQUy5Gs] [I-Worm.Win32.Bagle.2822] [W32/Bagle-CF] [Win32.HLLM.Beagle.19802] [Worm/Bagle.FJ] [I-Worm/BBEagle.fa] [Worm[Email]/Win32.Bagle.124] [Worm.Beagle.fk.(kcloud)] [Worm:Win32/Bagle.IE@mm] [W32/Bagle.EHFN-1234] [Virus.Win32.Heur.d] [MalwareScope.Trojan-PSW.Pinch.1] [W32/Bagle.GT.worm] [Win32/Bagle.FB] [PE:Worm.Mail.Bagle.il!1073950910] [Virus.Win32.Sality] [W32/Sality.P] [Win32/Sality] [Virus.Win32.Sality.$l]
fb3c9345e1dfa4ca1e8de971b5283bd3	[Virus*Win32/Sality.G]
2ee3a330300d2bde9b11058d591e0d63	[W32/Virut.a] [Win32/Virut.A] [Virus*Win32/Virut.A] [W32/Virut.A] [Worm.Bagle-54]
410c82c9a99f698cff6905c4abde82f3	[Virus*Win32/Sality.G] [Worm.Bagle-54]
3f4889784366d84872fef81085438402	[Worm.Bagle-54] [Virus*Win32/Sality.G]
ac6070e2d278e38ab7285cc1ff2325e5	[Worm.Bagle-54] [Win32/Sality] [Virus*Win32/Sality.G]
799d5809ac1a53ad8de2b0c6748a9da4	[Worm.Bagle-54]
3b8adabe1eef955efa12f9691c3e3aa3	[Worm.Bagle-54] [Win32/Sality] [Virus*Win32/Sality.G]
babf58c5c2543e955cc2444d64577b75	[Worm.Bagle-54] [Win32/Sality] [Virus*Win32/Sality.G]
4c915500b5cab3aa93bb6839a4cb9414	[Worm.Bagle-54] [Win32/Sality] [Virus*Win32/Sality.G]

Whois

Property	Value
Email	dnsadmin@infospace.com
NameServer	NS-1981.AWSDNS-55.CO.UK
Created	1997-06-06 00:00:00
Changed	2014-05-04 00:00:00
Expires	2016-06-05 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2014-02-07	176.32.97.212 (ClassC)
2014-02-16	176.32.101.132 (ClassC)
2014-04-15	54.231.0.180 (ClassC)
2014-04-19	176.32.97.252 (ClassC)
2014-04-24	205.251.242.171 (ClassC)
2014-04-30	54.231.2.100 (ClassC)
2014-06-23	176.32.102.100 (ClassC)
2014-08-05	54.231.16.52 (ClassC)
2014-09-10	54.231.2.252 (ClassC)
2014-09-25	205.251.242.252 (ClassC)
2014-09-25	54.231.0.116 (ClassC)
2014-09-27	176.32.97.220 (ClassC)
2014-09-27	54.231.1.212 (ClassC)
2014-09-30	176.32.101.60 (ClassC)
2014-09-30	54.231.8.220 (ClassC)
2014-10-02	54.231.10.252 (ClassC)
2014-10-02	205.251.243.204 (ClassC)
2014-10-05	54.246.131.145 (ClassC)
2014-11-10	54.231.96.148 (ClassC)
2014-11-12	54.231.15.4 (ClassC)
2014-11-12	54.231.15.20 (ClassC)
2014-11-15	54.231.96.236 (ClassC)
2014-11-15	54.231.1.148 (ClassC)
2015-02-09	54.231.65.44 (ClassC)
2015-02-09	54.231.96.124 (ClassC)
2015-02-09	54.231.0.132 (ClassC)
2015-03-01	54.231.33.60 (ClassC)
2015-03-01	54.231.34.36 (ClassC)
2015-03-13	54.231.17.108 (ClassC)
2015-03-13	54.231.10.92 (ClassC)
2015-03-21	54.231.9.84 (ClassC)
2015-03-29	54.231.18.204 (ClassC)
2015-03-31	54.231.32.52 (ClassC)
2015-03-31	54.231.9.52 (ClassC)
2015-03-31	54.231.0.196 (ClassC)
2015-03-31	54.231.13.164 (ClassC)
2015-03-31	54.231.10.108 (ClassC)
2015-03-31	54.231.1.172 (ClassC)
2015-04-09	54.231.2.244 (ClassC)
2015-04-09	54.231.0.92 (ClassC)
2015-04-09	54.231.1.28 (ClassC)
2015-04-09	54.231.2.28 (ClassC)
2015-04-09	54.231.18.36 (ClassC)
2015-04-10	54.231.10.204 (ClassC)
2015-04-10	54.231.10.4 (ClassC)
2015-04-11	54.231.14.164 (ClassC)
2015-04-14	54.231.13.204 (ClassC)
2015-04-16	54.231.32.236 (ClassC)
2015-04-17	54.231.12.228 (ClassC)
2015-04-17	54.231.8.28 (ClassC)
2015-04-20	54.231.13.252 (ClassC)
2015-04-26	54.231.2.108 (ClassC)
2015-04-27	54.231.64.164 (ClassC)
2015-05-04	54.231.18.108 (ClassC)
2015-05-21	54.231.11.44 (ClassC)
2015-06-17	54.231.18.180 (ClassC)
2015-06-23	54.231.16.60 (ClassC)
2015-06-24	54.231.8.68 (ClassC)
2015-06-30	54.231.96.196 (ClassC)
2015-06-30	54.231.9.92 (ClassC)
2015-06-30	54.231.9.228 (ClassC)
2015-07-09	54.231.65.12 (ClassC)
2015-07-10	54.231.18.4 (ClassC)
2015-07-25	54.231.19.4 (ClassC)
2015-08-02	54.231.12.156 (ClassC)
2015-08-06	54.231.2.204 (ClassC)
2015-08-10	54.231.80.58 (ClassC)
2015-08-18	54.231.1.252 (ClassC)
2015-09-16	54.231.14.116 (ClassC)
2015-10-03	54.231.33.20 (ClassC)
2015-10-22	54.231.10.44 (ClassC)
2015-10-30	54.231.17.212 (ClassC)
2015-11-18	54.231.9.100 (ClassC)
2015-12-06	54.231.33.84 (ClassC)
2016-05-15	54.88.202.12 (ClassC)
2018-07-05	34.253.15.220 (ClassC)
2019-10-27	34.215.83.32 (ClassC)
2019-11-27	3.232.90.139 (ClassC)
2020-10-29	3.225.197.67 (ClassC)
2020-12-14	34.227.133.190 (ClassC)
2021-11-17	52.11.139.67 (ClassC)
2024-06-07	3.163.24.73 (ClassC)
2024-07-02	3.163.24.41 (ClassC)
2025-02-07	52.84.162.89 (ClassC)
2025-03-24	52.84.162.38 (ClassC)
2025-04-22	52.84.162.46 (ClassC)
2025-05-24	52.84.162.109 (ClassC)
2025-06-21	18.161.6.53 (ClassC)
2025-07-04	18.161.6.7 (ClassC)
2025-07-23	18.161.6.64 (ClassC)
2025-08-11	18.161.6.70 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
canary-prod-us-east-1.zoo.com	2025-01-17	34.218.200.108
ra.zoo.com	2024-11-02	52.89.122.36
find.zoo.com	2024-08-07	104.18.16.25
prod.zoo.com	2024-11-02	44.241.205.152
www.prod.zoo.com	2025-01-10	52.36.188.174
isearch.zoo.com	2014-07-18	54.191.30.20
info.zoo.com	2014-07-23	54.191.30.20
zoo.zoo.com	2024-11-02	44.241.205.152
debut.zoo.com	2014-03-15	54.194.225.248
www.zoo.com	2014-07-30	54.191.30.20

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]