Help RSS API Feed Maltego Contact                        

Domain > mod.uk

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mod.uk
MD5A/V
e21b3469b4fc1efddf76d8c89f1ebb2a[Malware.Packer.HGX1] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
971d6821a96e8f41da919db02ebc60da[Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Yakes] [W32/Kelihos.BCEB!tr]
61b408e2de1c4996c3708f1f46913d60[HW32.CDB.C1b5] [Trojan.Kryptik!QyFpAm9uzfY] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djft] [Trojan.Win32.S.PSW-Tepfer.835600.AI] [UnclassifiedMalware] [BackDoor.Slym.14044] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan/Win32.Tepfer] [W32/Trojan.AJYO-7526] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUF] [Trojan.Win32.Kryptik.BZIX]
fe734b28009c7dd5389f64d72722bb21
274256a090dcd9ee3a406cf95cd18d47[HW32.CDB.398d] [Kryptik.CDQY] [Backdoor.Win32.Hlux.dpru] [Backdoor.Hlux!RvRbcitOmAk] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]
462b7c4b2b5db7dbd9c6531eed3bcea1[HW32.CDB.13b2] [Backdoor.Hlux.r3] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djae] [Backdoor.Hlux!S3hIEdaLTpA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.HBIJ-4969] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZDO] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV]
0d42b2efd88f95f4d5af60b548d7290a[FraudTool.Security] [W32/Tepfer.MQ!tr] [Win32/Cryptor]

Whois
PropertyValue
Organization Nominet UK
Email td@nominet.org.uk
NameServer DNS2.NIC.UK
Created 1985-07-24 00:00:00
Changed 2015-09-01 00:00:00

DNS Resolutions
DateIP Address
2013-02-1291.215.181.178 (ClassC)
2013-05-1646.137.92.159 (ClassC)
2013-11-1394.236.30.100 (ClassC)
2014-06-23217.140.44.130 (ClassC)
2014-06-2494.236.30.99 (ClassC)
2014-06-2494.236.30.21 (ClassC)
2014-06-2494.236.30.0 (ClassC)
2014-06-2494.236.30.92 (ClassC)
2014-09-0394.236.30.178 (ClassC)
2014-11-05163.164.64.59 (ClassC)
2014-11-0594.236.30.207 (ClassC)
2025-04-22151.101.64.204 (ClassC)
2025-06-09151.101.192.204 (ClassC)
2025-07-12151.101.0.204 (ClassC)
2025-08-11151.101.128.204 (ClassC)

Subdomains
DateDomainIP
da.mod.uk2025-03-01103.15.170.48
atga.mod.uk2025-05-07172.64.150.105
www.atga.mod.uk2025-06-10172.64.150.105
dasa.mod.uk2025-01-06151.101.0.204
www.ncb.mod.uk2025-07-12217.204.64.131
dcdc.mod.uk2025-05-24104.18.37.151
www.dcdc.mod.uk2025-04-02104.18.37.151
mx1.public.mod.uk2013-12-0282.109.66.135
mx2.public.mod.uk2013-12-0282.110.109.199
www.kid.mod.uk2025-03-13104.18.37.151
autodiscover.sasd.mod.uk2025-07-1652.96.113.184
rnreference.mod.uk2025-05-07104.18.37.151
doctrine.mod.uk2025-05-04104.18.37.151
www.doctrine.mod.uk2025-05-16172.64.150.105
surveys-pre.mod.uk2025-05-05104.18.37.151
www.surveys-pre.mod.uk2025-05-09104.18.37.151
raf.mod.uk2025-07-16104.18.33.23
alumni.raf.mod.uk2024-01-0618.161.6.44
www.aof.mod.uk2025-04-29104.18.37.151
dpki.mod.uk2025-04-02172.64.150.105
www.dpki.mod.uk2025-04-29172.64.150.105
defencebrandportal.mod.uk2025-04-0335.179.68.132
rafmail.mod.uk2025-05-12104.18.37.151
mta-sts.rafmail.mod.uk2024-09-11172.64.150.105
mta-sts.csmail.mod.uk2025-05-30104.18.37.151
cadetmail.mod.uk2025-01-15104.18.37.151
mta-sts.cadetmail.mod.uk2025-04-28104.18.37.151
mta-sts-enforcing.dgwmail.mod.uk2025-01-15172.64.150.105
mta-sts-testing.dgwmail.mod.uk2025-05-04104.18.37.151
armymail.mod.uk2024-09-02104.18.37.151
mta-sts.armymail.mod.uk2024-12-29104.18.37.151
royalnavymail.mod.uk2025-05-15104.18.37.151
mta-sts.royalnavymail.mod.uk2025-05-06172.64.150.105
rncom.mod.uk2025-03-22172.64.150.105
www.rncom.mod.uk2025-05-21172.64.150.105
www.dstan.mod.uk2025-01-15172.64.150.105
rn.mod.uk2025-05-08172.64.150.105
mrep.mod.uk2025-05-08172.64.150.105
www.mrep.mod.uk2025-05-07172.64.150.105
boardingschoolfinder.mod.uk2025-05-09104.18.37.151
des.mod.uk2025-05-0518.133.24.75
royal-marines.mod.uk2025-01-15172.64.150.105
www.royal-marines.mod.uk2025-01-28104.18.37.151
royalmarines.mod.uk2025-01-21172.64.150.105
www.royalmarines.mod.uk2025-06-09172.64.150.105
tools.mod.uk2025-05-02172.64.150.105
m.recruitment-campaigns.mod.uk2024-09-1954.77.75.94
res.recruitment-campaigns.mod.uk2024-09-20204.246.191.82
rncareers.mod.uk2025-01-27172.64.150.105
contracts.mod.uk2024-04-1235.178.34.200
bdsus.mod.uk2025-03-01151.101.64.204
surveys.mod.uk2025-05-07104.18.37.151
royalmarinesregiment.mod.uk2025-04-30172.64.150.105
intassess.recruitment.mod.uk2025-05-0220.90.220.126
myfitness-dev.dgw-dev.mod.uk2023-08-2520.49.157.82
www.mod.uk2025-07-15151.101.20.144
defencegateway.mod.uk2024-07-20172.64.144.247
jive.defencegateway.mod.uk2025-05-3113.43.32.121
myfitness.defencegateway.mod.uk2025-05-094.158.105.67
defenceacademy.mod.uk2024-09-02103.15.170.48
army.mod.uk2025-03-01172.64.146.84
mobile.army.mod.uk2025-05-0920.90.220.219
metrics.army.mod.uk2024-03-0863.140.37.206
www.army.mod.uk2025-05-04104.18.41.172
apply.army.mod.uk2025-06-0851.142.208.94
www.apply.army.mod.uk2025-05-3051.142.208.94
defenceimagery.mod.uk2025-05-035.187.26.88
royalnavy.mod.uk2025-04-02104.18.32.131
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information