Domain > kettering.edu

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to kettering.edu

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
1de1e523afa41804295a043807d1641e
5e6ffe3abdc1caa35ee40b0a1908bf4c	[Win32/Tnega.XfYFUAD] [BackDoor.Bulknet.967] [Win32/Injector.AIRV] [W32/Injector.AHLB!tr] [Trojan-Downloader.Win32.Karagany] [Trojan.Crypt.NKN] [PWS-Zbot-FAQD!5E6FFE3ABDC1] [TrojanDownloader*Win32/Cutwail.BS] [winpe/Kryptik.CBZD] [TROJ_FIDOBOT.SM0] [Trojan.Buzus]
34961ffc0f75d89da0b9464a4c7a02b1	[Backdoor.Win32.Pushdo.qag] [BackDoor.Bulknet.893] [Win32.Heur.KVMF58.hy.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Trojan-Downloader.Win32.Cutwail]
3b54013dbac240d454b929a3745a46e4	[Artemis!3B54013DBAC2] [WS.Reputation.1] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.ppt] [UnclassifiedMalware] [BackDoor.Bulknet.958] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ]
8b7c5fe0eaad467bb999a2c1f7dd7486	[TrojanDownloader.Cutwail] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btaipu] [W32.Pilleuz] [TROJ_CUTWAIL.CNA] [Win32.Trojan] [Backdoor.Win32.Pushdo.qhe] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.IQVD-6602] [Trojan.CryptILH] [W32/Pushdo.QHE!tr.bdr] [Crypt.CILH] [Trj/Pushdo.L]
7e265cfaa3a92f9b07c518dcbe577262	[Crypt_s.BOF] [TrojanDownloader*Win32/Cutwail.BS]
e3346adfbe598fe8dacfcf07debecc50	[TrojanDownloader*Win32/Cutwail.BS]
ee18d4dfd97d32e98cd76c330f023e12
bf4fa138741ec4af0a0734b28142f7ae	[Crypt2.BLVD] [TrojanDownloader*Win32/Cutwail.BS]
89c64a4ee7b13dd2dbdcf4a05f71312a	[TrojanDownloader*Win32/Cutwail.BS]
e57d3b285148fa02129b9c0044aa8737	[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
43415b6d9537a142cec2c22c31f8bfae	[Cutwail-FBYD!43415B6D9537] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo.qev] [Trojan.Kryptik!NPQTFtfoX4A] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Artemis!43415B6D9537] [TrojanDownloader:Win32/Cutwail] [Trojan.CryptCQK] [W32/Pushdo.QEV!tr.bdr] [Crypt.CCQK] [Trj/Dtcontx.E]
f7dd2cdcc0b90b7d7b2ff3cfb540c796	[Cutwail-FBYD!F7DD2CDCC0B9] [Trojan.PPush] [Trojan.Win32.Bulknet.brrije] [TROJ_DLOAD.RC] [Trojan.Kryptik!QNluqFEr0aI] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Troj/Cutwail-AM] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan.CryptDTE] [Crypt.CDTE] [Trj/CI.A]
63e2d975b940af1a4ae7c80f7f6f7052	[TrojanDownloader*Win32/Cutwail.BS]
37855cde21892acf5680660ae9b8668d	[Artemis!37855CDE2189] [W32.Pilleuz] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail] [Cryptic.YD]
b4252cc54a81b00ccdf1d01523d28209	[Artemis!B4252CC54A81] [Trojan.Inject] [Trojan.Dropper] [Backdoor.Win32.Pushdo.qgg] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Win32.Pushdo] [W32/Pushdo.PYD!tr.bdr] [Trj/Dtcontx.E]
0b75cdeaeb63b2216d2727393dfbc55f	[Backdoor/W32.Pushdo.38336] [Backdoor.Pushdo.avg] [Trojan/Kryptik.aqqc] [Riskware] [Trojan.Win32.XPACK.bctdtl] [W32.Pilleuz] [Pushdo.B] [TROJ_SPNR.35AA13] [Backdoor.Win32.Pushdo.avg] [Trojan.Kryptik!R9c1iw1k6TE] [Backdoor.Win32.A.Pushdo.38336] [UnclassifiedMalware] [TROJ_SPNR.35AA13] [Backdoor/Pushdo.ng] [Win32.Hack.Pushdo.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Malware.Pilleuz!rem] [Suspicious] [Backdoor.Win32.Pushdo] [W32/Pushdo.AVG!tr.bdr] [Trj/OCJ.A]

Whois

Property	Value
Email	wharrels@kettering.edu
Address	Kettering University 1700 University Ave. Flint, MI 48504-4898 UNITED S
NameServer	NS2.KETTERING.EDU
Created	1997-10-27 00:00:00
Changed	2011-07-06 00:00:00
Expires	2015-07-31 00:00:00

DNS Resolutions

Date	IP Address
2013-06-19	192.138.137.44 (ClassC)
2013-12-14	192.138.137.222 (ClassC)
2014-07-02	192.237.224.120 (ClassC)
2014-07-02	192.237.224.120 (ClassC)
2015-02-10	198.110.0.71 (ClassC)
2025-01-03	23.185.0.2 (ClassC)
2026-02-09	23.185.0.4 (ClassC)

Subdomains

Date	Domain	IP
NS2.KETTERING.EDU	2025-05-22	192.138.137.4
image.i.online.kettering.edu	2024-08-16	23.54.19.121
eonline.kettering.edu	2025-06-19	192.122.184.147
www.kettering.edu	2024-11-06	23.185.0.2

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]