Domain > createsend1.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as not malicious

Files that talk to createsend1.com

MD5	A/V
69105950b2bb95843dea5937bea0e8f0	[HW32.CDB.5919] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
b1ceb0baf757b66d5a7e33948b4da0d2

Whois

Property	Value
Email	domainadmin@campaignmonitor.com
NameServer	NS1.CREATESEND.COM
Created	2007-05-09 00:00:00
Changed	2013-07-02 00:00:00
Expires	2016-05-09 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2013-06-21	27.126.145.31 (ClassC)
2013-07-02	27.126.145.32 (ClassC)
2013-10-17	103.28.41.31 (ClassC)
2014-06-18	103.28.41.32 (ClassC)
2014-11-03	23.37.53.173 (ClassC)
2014-11-04	23.192.112.87 (ClassC)
2014-11-21	180.189.137.31 (ClassC)
2014-11-21	180.189.137.32 (ClassC)
2015-05-18	-
2025-10-26	13.56.30.207 (ClassC)
2026-01-17	52.8.34.0 (ClassC)

HTTP/1.1 200 OKServer: cswDate: Fri, 04 Aug 2023 16:35:45 GMTContent-Type: text/html; charsetutf-8Content-Length: 1000Connection: keep-aliveVary: Accept-EncodingCache-Control: privateX-Robots-Tag: noi

html>head>    meta http-equivContent-Type contenttext/html; charsetutf-8 />    meta namerobots contentnoindex, nofollow>    title>An error has occurred/title>    link hrefhttp://css.createsend1.com/css/landing-pages.min.css?hD7647EC220210825125555 mediascreen,projection relstylesheet typetext/css />    link hrefhttp://css.createsend1.com/css/completeunsubscribe.min.css?hD2905A6C20210825125555 mediascreen,projection relstylesheet typetext/css />/head>body classc-subscribe-unsubscribe-layout>    div classcontainer>        div classtitle>            h2>An error has occurred/h2>p>We apologize for the inconvenience but an error has occurred. Please try again a bit later./p>        /div>            div classcta>        div classaction>a hrefjavascript:history.go(-1)>Click here/a> to return to the page you were just on./div>    /div>    /div>    /body>/html>

Port 443

HTTP/1.1 200 OKServer: cswDate: Fri, 04 Aug 2023 16:35:45 GMTContent-Type: text/html; charsetutf-8Content-Length: 1002Connection: keep-aliveVary: Accept-EncodingCache-Control: privateX-Robots-Tag: noi

html>head>    meta http-equivContent-Type contenttext/html; charsetutf-8 />    meta namerobots contentnoindex, nofollow>    title>An error has occurred/title>    link hrefhttps://css.createsend1.com/css/landing-pages.min.css?hD7647EC220210825125555 mediascreen,projection relstylesheet typetext/css />    link hrefhttps://css.createsend1.com/css/completeunsubscribe.min.css?hD2905A6C20210825125555 mediascreen,projection relstylesheet typetext/css />/head>body classc-subscribe-unsubscribe-layout>    div classcontainer>        div classtitle>            h2>An error has occurred/h2>p>We apologize for the inconvenience but an error has occurred. Please try again a bit later./p>        /div>            div classcta>        div classaction>a hrefjavascript:history.go(-1)>Click here/a> to return to the page you were just on./div>    /div>    /div>    /body>/html>

Subdomains

Date	Domain	IP
i10.createsend1.com	2024-08-27	108.138.94.83
ha1.createsend1.com	2025-04-11	3.163.24.22
i1.createsend1.com	2024-12-20	108.138.94.32
hi1.createsend1.com	2024-10-20	18.161.6.40
t1.createsend1.com	2024-08-27	3.163.24.34
i2.createsend1.com	2021-02-27	54.230.126.100
i3.createsend1.com	2021-12-21	54.192.73.89
i4.createsend1.com	2024-02-12	108.139.10.31
i5.createsend1.com	2024-04-15	108.138.94.83
i6.createsend1.com	2016-10-16	104.106.16.120
i7.createsend1.com	2024-04-15	108.138.94.32
i8.createsend1.com	2024-04-15	108.139.10.58
i9.createsend1.com	2021-02-26	54.230.126.100
img.createsend1.com	2024-01-26	18.161.6.127

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]