Domain > cfnmail.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to cfnmail.com

MD5	A/V
ebbf2139fa265c6896be78fe8bbd44f7
165f5084043893cc35334b568d0f6ec0	[HW32.CDB.73df] [Packed.Win32.Katusha.3!O] [Win32.Malware!Drop] [Backdoor.Hlux!tc7SLh6zR0c] [WS.Reputation.1] [Kryptik.CCFN] [UnclassifiedMalware] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Backdoor.Win32.Kelihos] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.aBgj] [Win32/Trojan.337]
462b7c4b2b5db7dbd9c6531eed3bcea1	[HW32.CDB.13b2] [Backdoor.Hlux.r3] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djae] [Backdoor.Hlux!S3hIEdaLTpA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.HBIJ-4969] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZDO] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV]
d90bf83bd6aa6a9dce3505f7ab584977

Whois

Property	Value
NameServer	NS2.COMMONWEALTH.COM
Created	2004-09-14 00:00:00
Changed	2014-04-01 00:00:00
Expires	2016-09-14 00:00:00
Registrar	TUCOWS DOMAINS INC.

DNS Resolutions

Date	IP Address
2013-09-19	207.154.7.101 (ClassC)
2014-05-22	65.120.115.101 (ClassC)
2015-02-26	65.120.115.101 (ClassC)
2015-02-26	146.82.241.145 (ClassC)
2015-05-18	131.239.20.145 (ClassC)
2024-11-13	162.248.249.100 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
mail.cfnmail.com	2014-07-01	67.231.152.229
smtp1w.cfnmail.com	2014-07-01	67.231.144.236
smtp2w.cfnmail.com	2024-04-01	67.231.152.229

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]