Domain > mailshell.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mailshell.com

MD5	A/V
b34430b8e494c41f86c5aa47b002a212	[Crypt2.AZDS]
a472f9d1a78fa6cb3eb6896d9c319726	[TrojanDownloader.Cutwail.bs] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btelgd] [WS.Reputation.1] [BKDR_PUSHDO.FC] [Backdoor.Win32.Pushdo.qgz] [Backdoor.Pushdo!+jNmAzmKgNc] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.RMSR-3833] [Trojan.CryptHWZ] [W32/Pushdo.QGZ!tr.bdr] [Crypt.CHWZ] [Trj/Pushdo.L]
ddeca0855c9bb584c270ff6c5f0521c2	[Artemis!DDECA0855C9B] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qij] [UnclassifiedMalware] [TR/Dldr.Cutwail.4] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PH] [W32/Kryptik.AX!tr] [Trj/CI.A]
1de1e523afa41804295a043807d1641e
e9ff7ebc17773c0d705e6b8174608c87
3b54013dbac240d454b929a3745a46e4	[Artemis!3B54013DBAC2] [WS.Reputation.1] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.ppt] [UnclassifiedMalware] [BackDoor.Bulknet.958] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ]
3be8faf7b111dadde0d8e17b428125b0	[Backdoor/W32.Androm.39936.C] [Trojan.Androm.vsg.cw4] [Trojan.Inject] [Trojan/Kryptik.bdbi] [Trojan.Win32.Androm.btkkib] [WS.Reputation.1] [TROJ_CUTWAIL.PQP] [Backdoor.Win32.Androm.vsg] [Backdoor.Androm!mmztmFLZ69E] [UnclassifiedMalware] [BackDoor.Bulknet.958] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail] [Client-SMTP.39936] [W32/Backdoor.DIPS-1259] [Backdoor.Androm] [Virus.Win32.Cryptor] [W32/Androm.VSG!tr.bdr] [Win32/Cryptor] [W32/Palevo.GEZ.worm]
e3346adfbe598fe8dacfcf07debecc50	[TrojanDownloader*Win32/Cutwail.BS]
bf4fa138741ec4af0a0734b28142f7ae	[Crypt2.BLVD] [TrojanDownloader*Win32/Cutwail.BS]
adb2144bf4609f36ac6baf5fd0a661c2	[Downloader.Small.IVW]
357423154cf2deb27cea8219633158ca	[TrojanPWS.Zbot.AZ4] [Cutwail-FBYD!357423154CF2] [Trojan.PPush] [Trojan] [Trojan/Kryptik.bcej] [Trojan.Win32.Bulknet.bsbxmg] [W32.Pilleuz] [Win32/Cutwail.CeCCXcD] [Backdoor.Win32.Pushdo.qfj] [Backdoor.Pushdo!X+87TMMiffo] [Troj/Cutwail-AM] [TrojWare.Win32.Kryptik.BAVK] [BackDoor.Bulknet.893] [BKDR_PUSHDO.NIL] [Backdoor/Pushdo.adm] [TrojanDownloader:Win32/Cutwail.BS] [W32/Backdoor.WNGO-5843] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan.CryptDTE] [W32/Pushdo.PYD!tr.bdr] [Crypt.CDTE] [Trj/CI.A]
c12a0f14324014f4c4d5d070ddc33d33
e57d3b285148fa02129b9c0044aa8737	[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
e4fac37c735dcccfffd80373bcf31985
e0e8972687ca2f88b36c21bef2781070
0b75cdeaeb63b2216d2727393dfbc55f	[Backdoor/W32.Pushdo.38336] [Backdoor.Pushdo.avg] [Trojan/Kryptik.aqqc] [Riskware] [Trojan.Win32.XPACK.bctdtl] [W32.Pilleuz] [Pushdo.B] [TROJ_SPNR.35AA13] [Backdoor.Win32.Pushdo.avg] [Trojan.Kryptik!R9c1iw1k6TE] [Backdoor.Win32.A.Pushdo.38336] [UnclassifiedMalware] [TROJ_SPNR.35AA13] [Backdoor/Pushdo.ng] [Win32.Hack.Pushdo.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Malware.Pilleuz!rem] [Suspicious] [Backdoor.Win32.Pushdo] [W32/Pushdo.AVG!tr.bdr] [Trj/OCJ.A]
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
210b6e761b4cb7d71e862606c0f28846	[Artemis!210B6E761B4C] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.prs] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr] [SHeur4.BNRB]
e617a69e7185cd299d75c87c401e0fda	[SHeur4.BKZA] [TrojanDownloader*Win32/Cutwail.BS]

Whois

Property	Value
Email	HOSTMASTER@GOZOOM.COM
NameServer	C.NS.MAILSHELL.COM
Created	1999-09-16 00:00:00
Changed	2014-08-18 00:00:00
Expires	2015-09-16 00:00:00
Registrar	ENOM, INC.

DNS Resolutions

Date	IP Address
2011-06-12	74.208.46.176 (ClassC)
2013-10-12	209.157.66.253 (ClassC)
2025-08-11	192.81.131.31 (ClassC)

Subdomains

Date	Domain	IP
apdata.mailshell.com	2025-05-29	45.33.52.56
C.NS.MAILSHELL.COM	2025-04-20	23.92.26.7
grayfoot.mailshell.com	2013-06-19	127.0.0.1
www.mailshell.com	2025-05-05	192.81.131.31
c.mx.mailshell.com	2014-04-25	209.157.66.248

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]