Domain > createsend2.com

More information on this domain is in AlienVault OTX

Property	Value
Email	domainadmin@campaignmonitor.com
NameServer	NS1.CREATESEND.COM
Created	2007-05-09 00:00:00
Changed	2012-08-29 00:00:00
Expires	2016-05-09 00:00:00
Registrar	MARKMONITOR INC.

DNS Resolutions

Date	IP Address
2012-08-12	27.126.145.32 (ClassC)
2012-08-12	27.126.145.31 (ClassC)
2014-07-23	103.28.41.31 (ClassC)
2015-05-20	-
2025-05-06	13.56.30.207 (ClassC)
2025-08-06	52.8.34.0 (ClassC)

HTTP/1.1 200 OKServer: cswDate: Sun, 27 Aug 2023 07:03:44 GMTContent-Type: text/html; charsetutf-8Content-Length: 988Connection: keep-aliveVary: Accept-EncodingCache-Control: privateX-Robots-Tag: noin

html>head>    meta http-equivContent-Type contenttext/html; charsetutf-8 />    meta namerobots contentnoindex, nofollow>    title>An error has occurred/title>    link hrefhttp://css.createsend1.com/css/landing-pages.min.css?hD7647EC220230811 mediascreen,projection relstylesheet typetext/css />    link hrefhttp://css.createsend1.com/css/completeunsubscribe.min.css?hD2905A6C20230811 mediascreen,projection relstylesheet typetext/css />/head>body classc-subscribe-unsubscribe-layout>    div classcontainer>        div classtitle>            h2>An error has occurred/h2>p>We apologize for the inconvenience but an error has occurred. Please try again a bit later./p>        /div>            div classcta>        div classaction>a hrefjavascript:history.go(-1)>Click here/a> to return to the page you were just on./div>    /div>    /div>    /body>/html>

Port 443

HTTP/1.1 200 OKServer: cswDate: Sun, 27 Aug 2023 07:03:44 GMTContent-Type: text/html; charsetutf-8Content-Length: 990Connection: keep-aliveVary: Accept-EncodingCache-Control: privateX-Robots-Tag: noin

html>head>    meta http-equivContent-Type contenttext/html; charsetutf-8 />    meta namerobots contentnoindex, nofollow>    title>An error has occurred/title>    link hrefhttps://css.createsend1.com/css/landing-pages.min.css?hD7647EC220230811 mediascreen,projection relstylesheet typetext/css />    link hrefhttps://css.createsend1.com/css/completeunsubscribe.min.css?hD2905A6C20230811 mediascreen,projection relstylesheet typetext/css />/head>body classc-subscribe-unsubscribe-layout>    div classcontainer>        div classtitle>            h2>An error has occurred/h2>p>We apologize for the inconvenience but an error has occurred. Please try again a bit later./p>        /div>            div classcta>        div classaction>a hrefjavascript:history.go(-1)>Click here/a> to return to the page you were just on./div>    /div>    /div>    /body>/html>

Subdomains

Date	Domain	IP
i4.createsend2.com	2025-03-15	108.138.94.67
i5.createsend2.com	2024-08-15	18.161.6.33
i6.createsend2.com	2024-06-26	18.161.6.35
www.createsend2.com	2025-06-19	54.176.81.4

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
9aa81fa022c0b159758efa1bda4f9be1	[HW32.CDB.A20b] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dthd] [UnclassifiedMalware] [BackDoor.Slym.13011] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Win32.Backdoor.Hlux.Hwcu] [Trojan.Crypt3] [W32/Kryptik.BD!tr] [Crypt3.OHL] [Backdoor.Win32.Hlux.Ac]
d6a71b4d3098eab4dddab30fddbaef35	[FakeSecTool-FCX!D6A71B4D3098] [Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]

Domain > createsend2.com

Is this malicious?

Files that talk to createsend2.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains