Domain > mx.oit.duke.edu

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mx.oit.duke.edu

MD5	A/V
69105950b2bb95843dea5937bea0e8f0	[HW32.CDB.5919] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
b36385662ebdaf40bc3d28f90b6a4751	[Spyware.Zbot.USBV] [Trojan] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Foreign]
3220ab9b63a767c299000ea9d9e3a056	[HW32.CDB.1b0b] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!u8SUOkHyYnA] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.RbUfAWB] [Backdoor.Win32.Hlux.dpoo] [Trojan.Win32.Hlux.cxxuzn] [TrojWare.Win32.Kryptik.CAUP] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Backdoor.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Lgjg] [Trojan.Crypt_s] [W32/Kryptik.CAXO!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CAXO]
27213d33434bf796a9f535ec98e8a918	[HW32.CDB.03b6]
2cea2302f3f5c4280a6990e4e1965a60	[Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxceyl] [Kryptik.CCFN] [TROJ_SPNR.36DM14] [Backdoor.Win32.Hlux.djbj] [Backdoor.Hlux!4usFCOdA3iI] [Trojan.Win32.S.PSW-Tepfer.835600.DB] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BLUU] [Trojan.PWS.Stealer.12891] [TR/Kryptik.oeons] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZDO] [Trojan.Crypt_s] [W32/Hlux.BZDO!tr.bdr] [Crypt_s.GGV] [Win32/Trojan.fec]
8889d486a91b3448e8b429ef99a536d0	[HW32.CDB.1cb9] [Trojan.Win32.Kryptik.cwzoai] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnla] [Backdoor.Hlux!yM05ScK42o0] [Trojan.Packed.26544] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.DNLA!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
9178327bacccfcfecea87948acbfe510	[HW32.CDB.7c44] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxaoho] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twuw] [Trojan.PWS.Tepfer!pez0E7sggU8] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/FakeAV-UF] [Trojan[PSW]/Win32.Tepfer] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Tepfer.CASU!tr.pws] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASU] [Win32/Trojan.e76]
4b93f892d9249b70508ee222e37ee1c6	[HW32.CDB.E823] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxbvtz] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.txbj] [Trojan.PWS.Tepfer!TcJrQOwJyhs] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.CAUP] [Trojan.Crypt_s] [W32/Tepfer.CAUP!tr.pws] [Crypt_s.GMK]
2c05ffe297116df3062faac792c44c91	[HW32.CDB.B4b9] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [UnclassifiedMalware] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Win32/Trojan.0de]
981a83b3f0d4a74b0b38becda7c8cb9c	[Artemis!981A83B3F0D4] [Trojan.Win32.Crypt.cxd] [W32/Yakes.FHJN!tr] [Win32/Cryptor]
30faa031b0c6122bc91cff8996474b4a	[HW32.CDB.E594] [Trojan.Inject2]
d2146bca3681a7a8f3a93946bdee1a4f	[Riskware] [Posible_Worm32] [WS.Reputation.1] [TROJ_SPNR.1AE313] [Backdoor.Win32.Androm.ptv] [Backdoor.Androm!NM4iXFfRb7U] [UnclassifiedMalware] [Trojan.Inject2.23] [BDS/Androm.ptv] [Heuristic.LooksLike.Win32.Suspicious.F!81] [Mal/ZboCheMan-N] [Worm:Win32/Gamarue.I] [Trojan/Win32.Tepfer] [W32/Backdoor.PRDM-5289] [Win32/TrojanDownloader.Wauchos.I] [Worm.Win32.Gamarue] [W32/Kryptik.AX!tr] [Trj/OCJ.E]
0d4fa9360c4139d1a33a6203f510f886	[HW32.CDB.07a1] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cymqun] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.cri] [Backdoor.Hlux!tlFvhPzYgZ0] [Win32.Backdoor.Hlux.Glz] [Backdoor.Win32.Hlux.DUHE] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Trojan.Crypt] [W32/Hlux.CCCY!tr.bdr] [Crypt_s.GRA] [Backdoor.Win32.Hlux.aNkU]

Whois

Property	Value
Name	334 Blackwell St.
Email	help-oit@win.duke.edu
Address	Suite 2111
City	Durham, NC 27701
Country	UNITED STATES
NameServer	DNS-AUTH-02.OIT.DUKE.EDU
Created	1986-06-02 00:00:00
Changed	2014-09-05 00:00:00
Expires	2015-07-31 00:00:00

DNS Resolutions

Date	IP Address
2014-05-30	152.3.70.25 (ClassC)
2024-10-30	152.3.72.25 (ClassC)

Subdomains

Date	Domain	IP
nameserver2.mc.duke.edu	2024-09-13	152.16.1.12
www.ace.duke.edu	2024-08-27	152.3.103.21
online.duke.edu	2024-03-23	34.75.230.160
nicholasinstitute.duke.edu	2024-03-22	152.3.101.102
cps.nursing.duke.edu	2024-06-09	34.236.135.105
www.spiritualityandhealth.duke.edu	2024-04-07	152.3.72.140
wiki.duke.edu	2024-03-25	152.3.100.223
congregation.chapel.duke.edu	2024-09-13	162.159.128.45
dm.duke.edu	2014-06-03	152.16.195.46
shop.duke.edu	2024-05-23	23.192.230.145
rsvp.duke.edu	2023-12-27	99.84.66.64
lemur.duke.edu	2024-08-31	70.32.91.97
cs.duke.edu	2014-07-19	152.3.140.1
hermes.cs.duke.edu	2014-07-19	152.3.140.47
dukeperformances.duke.edu	2024-10-04	34.75.230.160
notes.duke.edu	2013-04-18	152.16.18.51
isoazapp2.duhs.duke.edu	2024-03-24	13.107.213.70
test-devguide.duhs.duke.edu	2024-09-13	20.75.69.175
airwds.duhs.duke.edu	2024-09-13	152.16.0.82
test.iris.duke.edu	2024-05-13	52.72.28.150
careerhub.students.duke.edu	2024-09-29	44.196.168.43
cdn.careerhub.students.duke.edu	2024-03-22	99.84.66.68
fuquaconnect.duke.edu	2024-10-23	13.68.101.62
ipyn-az-20.oit.duke.edu	2024-01-31	172.174.82.35
dns-auth-01.oit.duke.edu	2024-10-04	152.3.103.93
dns-auth-02.oit.duke.edu	2024-10-30	152.3.105.232
ipyn-az-13.oit.duke.edu	2024-01-31	40.76.233.178
labs-az-15.oit.duke.edu	2024-01-31	52.146.16.105
ipyn-az-19.oit.duke.edu	2024-01-31	40.114.11.145
beacon.oit.duke.edu	2024-08-14	152.3.100.124
brandbar.oit.duke.edu	2024-03-25	152.3.70.21
alertbar.oit.duke.edu	2023-08-15	152.3.70.21
status.oit.duke.edu	2024-02-13	204.246.191.74
speedtest.oit.duke.edu	2024-10-30	152.3.101.108
mx.oit.duke.edu	2014-05-30	152.3.70.25
www.duke.edu	2024-09-19	152.3.72.197
archive.linux.duke.edu	2024-03-24	152.3.72.12
staging.today.duke.edu	2024-09-13	152.3.100.181
anesthesiology.duke.edu	2024-10-30	152.16.0.235

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]