Domain > fnf.com

More information on this domain is in AlienVault OTX

Files that talk to fnf.com

MD5	A/V
1a809031288d3e1ef3327e87dfefa861	[HW32.CDB.042b] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxahyf] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!jqpo62AJz0o] [TrojWare.Win32.Kryptik.BZOO] [BackDoor.Slym.13852] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [W32/Trojan.HFOT-6937] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZMB] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Win32/Trojan.337]
9844a1b8a10ed4568240ae7a528bef5d	[HW32.CDB.Bf28] [Backdoor.Kelihos] [Malware.Packer.OCD] [Trojan.PWS.Tepfer!vHSA+Pr89Pk] [Kryptik.CCFN] [Win32/Kelihos.baJHSHD] [Trojan-PSW.Win32.Tepfer.tokd] [Trojan.Win32.Kryptik.cvtteo] [UnclassifiedMalware] [BackDoor.Slym.13304] [TR/Crypt.EPACK.53967] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/FakeAv.BWUN!tr] [Crypt_s.GCT] [Trojan.Win32.InfoStealer.AZ] [Win32/Trojan.65e]
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]

Whois

Property	Value
Name	Fidelity National Financial, Inc.
Organization	Fidelity National Financial
Email	FNFDomainAdmin@fnf.com
Address	601 Riverside Avenue
Zip Code	32204
City	Jacksonville
State	FL
Country	US
Phone	+1.9048548974
NameServer	ns2.fisglobal.com
Created	1996-02-11 11:00:00
Changed	2014-12-29 13:11:38
Expires	2016-02-12 00:00:00
Registrar	DNC Holdings, Inc.

DNS Resolutions

Date	IP Address
2013-05-22	206.54.154.14 (ClassC)
2014-04-17	206.211.96.11 (ClassC)
2014-05-29	206.211.96.11 (ClassC)
2018-10-18	206.211.106.46 (ClassC)
2019-08-22	206.211.106.82 (ClassC)
2019-12-10	52.177.80.200 (ClassC)
2022-02-15	104.47.73.10 (ClassC)
2022-02-15	104.47.73.138 (ClassC)
2023-08-13	52.177.111.47 (ClassC)
2024-01-27	20.85.64.178 (ClassC)
2024-04-11	52.101.42.4 (ClassC)
2024-04-11	52.101.11.13 (ClassC)
2024-04-11	52.101.9.12 (ClassC)
2024-04-11	52.101.11.3 (ClassC)
2024-04-11	52.101.9.17 (ClassC)
2024-04-11	52.101.194.12 (ClassC)
2024-04-11	52.101.42.10 (ClassC)
2025-07-30	172.200.144.121 (ClassC)
2025-08-05	172.200.231.239 (ClassC)

HTTP/1.1 200 OKCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheContent-Type: text/html; charsetutf-8Expires: -1Server: Microsoft-IIS/10.0Set-Cookie: CMSPreferredCultureen-US; expires

!DOCTYPE html>html  >head idhead>title>	Fidelity National Financial - Home/title>meta namedescription contentFidelity National Financial, Inc (FNF®) is the leading provider of title insurance and settlement services to the real estate and mortgage industries.  /> meta charsetUTF-8 /> meta namekeywords contentFNF, NYSE: FNF, Fidelity National Financial, Title Insurance, mortgage, real estate, real estate technology, annuities, life insurance /> meta http-equivX-UA-Compatible contentIEedge />meta nameviewport contentwidthdevice-width, heightdevice-height,  initial-scale1.0, user-scalableyes, user-scalable5/>link href/CMSPages/GetResource.ashx?stylesheetnamebootstrap.min typetext/css relstylesheet/>  link href/CMSPages/GetResource.ashx?stylesheetnamefont-awesome.min typetext/css relstylesheet/>link relstylesheet hrefhttps://use.typekit.net/ddy6kus.css>link href/CMSPages/GetResource.ashx?stylesheetnameFNF typetext/css relstylesheet/>link href/CMSPages/GetResource.ashx?stylesheetnameFNF_MegaMenu typetext/css relstylesheet/> link href/FNF/media/media/favicon.ico typeimage/x-icon relshortcut icon/>link href/FNF/media/media/favicon.ico typeimage/x-icon relicon/>!-- Global site tag (gtag.js) - Google Analytics -->script async srchttps://www.googletagmanager.com/gtag/js?idG-LRPTFYN0HD>/script>script>  window.dataLayer  window.dataLayer || ;  function gtag(){dataLayer.push(arguments);}  gtag(js, new Date());  gtag(config, G-LRPTFYN0HD);/script>script typetext/javascript>(function() { var didInit  false; function initMunchkin(){ if(didInit  false) { didInit  true; Munchkin.init(393-REY-847, {wsInfo:iVRW}); } } var s  document.createElement(script); s.type  text/javascript; s.async  true; s.src  //munchkin.marketo.net/munchkin.js; s.onreadystatechange  function() { if (this.readyState  complete || this.readyState  loaded) { initMunchkin(); } }; s.onload  initMunchkin; document.getElementsByTagName(head)0.appendChild(s);})();/script>/head>body classLTR Unknown ENUS ContentBody >        form methodpost action/ idform>input typ

Subdomains

Date	Domain	IP
ns1-e1.fnf.com	2025-06-25	170.88.179.14
smsg02.fnf.com	2025-08-03	52.226.205.117
ofac.fnf.com	2024-05-01	20.85.64.178
publicrecords-nonprod.fnf.com	2025-05-16	40.79.21.242
lakehouse.fnf.com	2025-08-01	4.152.219.158
authtrportal.fnf.com	2025-04-27	172.200.144.121
www.investor.fnf.com	2024-07-22	23.46.17.18
authtr.fnf.com	2025-06-28	172.200.144.121
titlepayplus.fnf.com	2025-07-21	172.200.144.121
account.fnf.com	2024-11-28	52.223.56.218
contrast.fnf.com	2024-10-20	151.101.194.246
apextest.fnf.com	2025-05-13	206.19.21.226
www.fnf.com	2024-01-31	20.85.64.178
apex.fnf.com	2025-08-01	206.19.17.226

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > fnf.com

Is this malicious?

Files that talk to fnf.com

Whois

DNS Resolutions

Port 80

Port 443

Subdomains