Domain > katamail.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to katamail.com

MD5	A/V
8889d486a91b3448e8b429ef99a536d0	[HW32.CDB.1cb9] [Trojan.Win32.Kryptik.cwzoai] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnla] [Backdoor.Hlux!yM05ScK42o0] [Trojan.Packed.26544] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.DNLA!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
274256a090dcd9ee3a406cf95cd18d47	[HW32.CDB.398d] [Kryptik.CDQY] [Backdoor.Win32.Hlux.dpru] [Backdoor.Hlux!RvRbcitOmAk] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]
4b93f892d9249b70508ee222e37ee1c6	[HW32.CDB.E823] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxbvtz] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.txbj] [Trojan.PWS.Tepfer!TcJrQOwJyhs] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.CAUP] [Trojan.Crypt_s] [W32/Tepfer.CAUP!tr.pws] [Crypt_s.GMK]
094a900dbd56af63ab53928932773d2f	[W32.Clod074.Trojan.f420] [MemScan:Trojan.Spy.Banker.AABD] [MemScan:Trojan.Spy.Banker.AABD] [TrojanBanker.Banker.iyz] [Artemis!094A900DBD56] [Trojan.Win32.Banker.phip] [W32/Heuristic-PFM!Eldorado] [BC.Heuristic.Trojan.SusPacked.BF-6.B] [Trojan-Banker.Win32.Banker.iyz] [MemScan:Trojan.Spy.Banker.AABD] [Suspicious!SA] [MemScan:Trojan.Spy.Banker.AABD] [MemScan:Trojan.Spy.Banker.AABD] [Trojan.PWS.Banker.29009] [Heuristic.LooksLike.Win32.Suspicious.F] [Trojan/Banker.Banker.aiek] [Win32.HeurC.KVM008.a.(kcloud)] [Worm:Win32/Braban.B] [MemScan:Trojan.Spy.Banker.AABD] [W32/Heuristic-PFM!Eldorado] [Backdoor.Win32.IRCBot] [Win32/Heur] [Trojan.Win32.Banker.Azcg]
9bf7629b9d33fd9b45f29542d58c7dd8	[HW32.Packed.44E1] [PWS-Banker] [Trojan/Spy.Banker.hyu] [Trojan.Win32.Banker.phwg] [W32/Heuristic-PFM!Eldorado] [TSPY_BANCOS.ECH] [Trojan.Bancos-8629] [TrojanSpy.Banker.BDHW] [Trojan.PWS.Banker.54533] [Trojan.Banker.Win32.61877] [TSPY_BANCOS.ECH] [BehavesLike.Win32.Suspect.dc] [W32/Heuristic-PFM!Eldorado] [Trojan/Banker.Banker.aevg] [Trojan[Banker]/Win32.Banker] [Worm:Win32/Braban.B] [Trojan.Win32.Banker.hyu] [Backdoor.Win32.IRCBot] [Malware_fam.gw] [Win32/Heur] [Win32/Trojan.Spy.374]
76b042adfedd6adf02ee92a890f84708	[HW32.Packed.A9BB] [Worm/W32.Kolab.1047290] [Trojan.Win32.Kolab.oruu] [W32/Heuristic-PFM!Eldorado] [Worm.Kolab.KC] [Trojan.DownLoader2.63949] [BehavesLike.Win32.Suspect.fc] [W32/Heuristic-PFM!Eldorado] [Win32.Hack.Poison.ha.(kcloud)] [Trojan:Win32/Comronki!rts] [Trojan.Heur.ED563A] [W32.W.Kolab.akr!c] [Win-Trojan/Privateexeprotector.1047290] [Backdoor.Win32.IRCBot] [W32/Banker.WDW!tr] [PSW.Banker6.BIFM] [Worm.Win32.Kolab.akr]
6e0f54c17bd60554040240b5542872ea	[HW32.Packed.76F7] [Worm.Kolab.Win32.12947] [Trojan.Win32.Kolab.oruc] [W32/Heuristic-PFM!Eldorado] [TSPY_BANKER.AOC] [Trojan.MulDrop.50548] [TSPY_BANKER.AOC] [BehavesLike.Win32.Suspect.fc] [W32/Heuristic-PFM!Eldorado] [Worm[Net]/Win32.Kolab] [Trojan:Win32/Sisproc!gmb] [Trojan.Heur.E30CDA] [W32.W.Kolab.akg!c] [Win-Trojan/Banker.1046021] [Artemis!6E0F54C17BD6] [Virus.Win32.Heur] [PossibleThreat] [Win32/Heur] [Worm.Win32.Kolab.akg]

Whois

Property	Value
NameServer	NS-1811.AWSDNS-34.CO.UK
Created	1999-07-01 00:00:00
Changed	2015-04-21 00:00:00
Expires	2015-07-01 00:00:00
Registrar	TUCOWS DOMAINS INC.

DNS Resolutions

Date	IP Address
2025-10-30	213.92.16.101 (ClassC)

Port 80

Subdomains

Date	Domain	IP
smtp.katamail.com	2015-05-15	62.149.157.155
newmx.katamail.com	2025-11-24	62.149.157.151

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]