Domain > leaseweb.us

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to leaseweb.us

MD5	A/V
709622547c3e4b44144047282940995b	[HW32.CDB.9120] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!iLXsQOxcJ2A] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dprt] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.AP]

Whois

Property	Value
Name	Organization
Organization	Ocom IP B.V.
Email	domains@ip.ocom.com
Address	Luttenbergweg 8
Zip Code	1101EC
City	Amsterdam
Country	NL
Phone	+31.0203162899
Fax	+31.0203162898
NameServer	DNS02.LSWCDN.COM
Created	2002-07-29 17:46:50
Changed	2016-09-12 01:31:06
Expires	2017-07-28 23:59:59
Registrar	KEY-SYSTEMS GMBH

DNS Resolutions

Date	IP Address
2013-05-25	85.17.134.129 (ClassC)
2015-03-14	85.17.96.111 (ClassC)
2015-06-12	185.28.70.36 (ClassC)
2015-06-18	185.28.70.34 (ClassC)
2015-06-23	185.28.70.32 (ClassC)
2015-06-30	185.28.70.35 (ClassC)
2015-06-30	185.28.70.38 (ClassC)
2015-07-10	185.28.70.33 (ClassC)
2015-07-22	185.28.70.37 (ClassC)
2016-08-07	89.255.248.37 (ClassC)
2016-08-07	89.255.248.34 (ClassC)
2016-08-07	89.255.248.35 (ClassC)
2016-08-07	89.255.248.36 (ClassC)
2019-06-07	185.28.71.37 (ClassC)
2019-06-07	185.28.71.33 (ClassC)
2019-06-07	185.28.71.38 (ClassC)
2019-06-07	185.28.71.34 (ClassC)
2019-06-07	185.28.71.35 (ClassC)
2019-06-07	185.28.71.36 (ClassC)
2019-06-07	185.28.71.32 (ClassC)
2019-08-18	89.255.249.36 (ClassC)
2019-08-18	89.255.249.37 (ClassC)
2019-08-21	89.255.249.38 (ClassC)
2019-08-22	89.255.249.32 (ClassC)
2019-08-22	89.255.249.33 (ClassC)
2019-08-22	89.255.249.34 (ClassC)
2019-08-22	89.255.249.35 (ClassC)
2020-07-01	23.19.41.130 (ClassC)
2023-08-26	185.28.70.130 (ClassC)
2024-03-28	93.123.17.254 (ClassC)
2024-09-03	87.248.202.99 (ClassC)
2024-09-20	41.63.96.2 (ClassC)
2024-11-06	178.79.208.44 (ClassC)
2025-01-06	208.111.152.2 (ClassC)
2025-01-15	151.101.203.52 (ClassC)
2025-01-15	151.101.43.52 (ClassC)
2025-01-22	92.38.145.145 (ClassC)
2025-02-17	157.185.156.141 (ClassC)
2025-02-17	140.150.36.50 (ClassC)
2025-02-20	157.185.145.11 (ClassC)
2025-02-23	157.185.175.105 (ClassC)
2025-05-05	138.113.102.15 (ClassC)
2025-05-05	38.109.251.135 (ClassC)
2025-05-23	163.171.140.99 (ClassC)
2025-06-10	199.232.35.52 (ClassC)
2025-06-16	151.101.135.52 (ClassC)
2025-06-21	138.113.24.59 (ClassC)
2025-10-18	163.171.160.192 (ClassC)
2025-11-07	205.234.175.175 (ClassC)
2025-12-31	146.75.95.52 (ClassC)
2026-02-07	151.101.39.52 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
mailfilter01.leaseweb.us	2014-05-24	192.96.204.113

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]