Domain > mail.telkomsa.net

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mail.telkomsa.net

MD5	A/V
8889d486a91b3448e8b429ef99a536d0	[HW32.CDB.1cb9] [Trojan.Win32.Kryptik.cwzoai] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnla] [Backdoor.Hlux!yM05ScK42o0] [Trojan.Packed.26544] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.DNLA!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
11769c481554f793ec20fe2b0189a751	[HW32.CDB.B5f3] [Packed.Win32.Katusha.3!O] [Trojan.Win32.Hlux.cxorid] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dsfl] [TrojWare.Win32.Kryptik.CBCJ] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.MalPacked] [Heur.Trojan.Hlux] [Trojan.Crypt] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBLX]
888cf6888e476ab89daef8385b7ae881	[HW32.CDB.B8e4] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcinh] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfk] [Backdoor.Hlux!Jm3TflIszzA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]
981a83b3f0d4a74b0b38becda7c8cb9c	[Artemis!981A83B3F0D4] [Trojan.Win32.Crypt.cxd] [W32/Yakes.FHJN!tr] [Win32/Cryptor]
61b408e2de1c4996c3708f1f46913d60	[HW32.CDB.C1b5] [Trojan.Kryptik!QyFpAm9uzfY] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djft] [Trojan.Win32.S.PSW-Tepfer.835600.AI] [UnclassifiedMalware] [BackDoor.Slym.14044] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan/Win32.Tepfer] [W32/Trojan.AJYO-7526] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUF] [Trojan.Win32.Kryptik.BZIX]
2bb1e0a0c6f6082824d6fd9d4095bcd0	[Malware.Packer.SCD] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.BDPK!tr]
86122dbf79ec3a983d9ecb120470a00f	[Artemis!86122DBF79EC] [Trojan.Win32.Yakes.fhyw] [TR/Changeling.A.3509] [Win32.Trojan.Yakes.Dyfy] [Trojan.Win32.Spammer] [Win32/Cryptor] [Trojan.Win32.Spammer.bAC] [Win32/Trojan.Multi.daf]
70c82520cbc8bacd1515d7e2650b19a1	[HW32.CDB.43cf] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!SzVtl6MNJ18] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.JRJKMf] [Backdoor.Win32.Hlux.dqja] [Win32.Backdoor.Hlux.Aheu] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.WVTP-0899] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBCJ]
281bba52133b42b0041a72e8baf03600	[HW32.CDB.Eca9] [Backdoor.Hlux.r3] [Backdoor.Hlux!xA6rCWjNVLE] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmfd] [Trojan.Win32.Kryptik.cxbhpv] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [W32/Trojan.KRFJ-3745] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GME] [Trojan.Win32.Kryptik.CASL]

Whois

Property	Value
Email	hostmaster@tsmintl.com
NameServer	NS2.TELKOMSA.NET
Created	1999-05-27 00:00:00
Changed	2014-05-28 00:00:00
Expires	2015-05-27 00:00:00
Registrar	PSI-USA, INC. DBA DO

DNS Resolutions

Date	IP Address
2014-05-30	196.25.211.70 (ClassC)
2024-11-14	197.234.175.113 (ClassC)

Subdomains

Date	Domain	IP
NS2.TELKOMSA.NET	2024-08-31	105.224.1.4
mx2.telkomsa.net	2014-07-23	196.25.211.172
mail.telkomsa.net	2014-05-30	196.25.211.70

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]