Help RSS API Feed Maltego Contact                        

Domain > mx.vgs.untd.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mx.vgs.untd.com

MD5A/V
970a7ea91d4845a5c13d26b6fa4664a0[HW32.CDB.95aa] [PWSZbot-FBOS!970A7EA91D48] [Trojan.Crypt.NKN] [TROJ_FORUCON.BMC] [Trojan.Win32.Inject.nnuq] [TR/Dropper.VB.7310] [Virus.Win32.Heur.p] [SHeur4.BWOZ]
3fb83eaf2a665f71ac2065f5f6956d50[HW32.CDB.5da2] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cynagk] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.GeEUUIB] [Backdoor.Win32.Hlux.dqkq] [Backdoor.Hlux!m6CCC6SKjdo] [Win32.Backdoor.Hlux.Lose] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aDM]
8e0c45d714cfb9ec425923a8167305d6
0f5f90b03b49b276d148f7e6be7c30f1[HW32.CDB.27e0] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cxxldj] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.OWUMMQC] [Backdoor.Win32.Hlux.dqeh] [Backdoor.Hlux!9TTR+wn2IWc] [Backdoor.Win32.Hlux.DUHE] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Hpn] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.ArxZ]
db5b440f6419090cd9567f3b33fd3ced[Malware.Packer.HGX1] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.AXUE!tr]
3a44da011fc699a6afc6cc7d07131dd6[HW32.CDB.14e7] [Trojan.Win32.Kryptik.cxajdj] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CAHC] [Trojan.Packed.26527] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKZ]
924be15014f785cb08ccda07be93344c[HW32.CDB.954a] [Trojan.Gatak.r3] [Spyware.Password] [TROJ_GATAK.SMZ] [UnclassifiedMalware] [Trojan.Inject1.39822] [Trojan:Win32/Gatak] [W32/Trojan.YPKT-3534] [Trojan.Win32.Dropper.Arz] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.SuspectCRC] [W32/Kryptik.BWVS!tr] [Crypt3.CQE] [Win32/Trojan.e46]
a84c15fb551aa1de0ff9af31f4cad0f6[Worm.Gamarue.B] [Trojan-Downloader] [TROJ_SPNR.0BDA13] [Trojan-Downloader.Win32.Andromeda.ubd] [Trojan.DL.Andromeda!gQAduHfFSvg] [Trojan.Win32.A.Downloader.137216.WB] [Troj/Dloadr-DSB] [UnclassifiedMalware] [BackDoor.Andromeda.22] [TR/Dldr.Andromeda.ubd] [Win32.Troj.Undef.(kcloud)] [Worm:Win32/Gamarue.F] [W32/Backdoor.JHEQ-4682] [TrojanDownloader.Andromeda] [Worm.Win32.Gamarue] [W32/Andromeda.UBD!tr.dldr]
27213d33434bf796a9f535ec98e8a918[HW32.CDB.03b6]
709622547c3e4b44144047282940995b[HW32.CDB.9120] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!iLXsQOxcJ2A] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dprt] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.AP]
fa44ef3fd68b8e9c4a9405b9a279a4d2[Artemis!FA44EF3FD68B] [Trojan.Ransom] [Trojan/Corrido.gang] [Trojan-PSW.Win32.Tepfer.lrnd] [TR/PSW.Tepfer.lrnd] [Trojan:Win32/Nedsym.G] [Trojan/Win32.Zbot] [Win32/Injector.AHSF] [Win32.Asim.a] [W32/Injector.AHLB!tr] [SHeur4.BJZN]
d23e1b1c21087cfab86abe73c285956f[RDN/Spybot.bfr!l] [Trojan.Crypt.NKN] [Backdoor.Androm!s+mLSVBpBBw] [Backdoor.Win32.Androm.dqjv] [Trojan.PWS.Stealer.12751] [TR/Dropper.VB.13202] [Spyware/Win32.Zbot] [Virus.Win32.Heur.p] [Backdoor.Win32.Androm.at] [W32/Injector.BAEN!tr] [Trj/dtcontx.L]
df902d85a5aebee35007be327e9f54d2[HW32.CDB.7c9b] [Malware.Packer.FFS] [Mal/FakeAV-UF] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Symmi]
2a4f1eb6ef150c4807532c4e03671ff6[HW32.CDB.741c] [W32/Worm-AAEH.pq!2A4F1EB6EF15] [WS.Reputation.1] [Injector.GJTG] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12544] [Worm/Vobfus.agcpv] [Mal/VB-ALW] [Worm:Win32/Vobfus.ZR] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABEP] [Trojan.Win32.Injector.BCCY]
7abb1e7e80e0f342f0452ae91375fce3
e6d960bf587f5cb1497520fe716f1fb4[Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [Backdoor:Win32/Kelihos.F] [PE:Malware.XPACK/RDM!5.1]
8889d486a91b3448e8b429ef99a536d0[HW32.CDB.1cb9] [Trojan.Win32.Kryptik.cwzoai] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnla] [Backdoor.Hlux!yM05ScK42o0] [Trojan.Packed.26544] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.DNLA!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
8db2ac15d6e8e86023d86a061f034d60[HW32.CDB.741c] [W32/Worm-AAEH.pq!8DB2AC15D6E8] [WS.Reputation.1] [Trojan.Injector!VwPEXH1adK4] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12544] [Worm/Vobfus.agcpv] [Mal/VB-ALW] [Worm:Win32/Vobfus.ZR] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABEP] [Trojan.Win32.Injector.BCCY]
11769c481554f793ec20fe2b0189a751[HW32.CDB.B5f3] [Packed.Win32.Katusha.3!O] [Trojan.Win32.Hlux.cxorid] [WS.Reputation.1] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dsfl] [TrojWare.Win32.Kryptik.CBCJ] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.MalPacked] [Heur.Trojan.Hlux] [Trojan.Crypt] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBLX]
2855d896ffb37c2fd165ff7e54b55220[HW32.CDB.89ca] [Trojan.Win32.Tepfer.cxaqha] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.twka] [Trojan.PWS.Tepfer!4r2LvpOQWF0] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]

Whois

PropertyValue
NameUnited Online, Inc.
Organization United Online, Inc.
Email domains@noc.untd.com
Address 21301 Burbank Boulevard
Zip Code 91367-6677
City Woodland Hills
State CA
Country US
Phone +1.2063015700
Fax +1.2063015795
NameServer authns2.untd.com
Created 1999-12-16 21:33:17
Changed 2013-12-17 20:48:49
Expires 2023-12-16 00:00:00
Registrar CSC CORPORATE DOMAIN

DNS Resolutions

DateIP Address
2014-06-0564.136.52.37 (ClassC)
2026-02-0564.136.52.37 (ClassC)

Subdomains

DateDomainIP
authns1.untd.com2025-11-2464.136.52.115
authns2.untd.com2026-02-0264.136.44.115
authns3.untd.com2026-01-15162.219.154.107
www.dca.untd.com2026-01-2264.136.45.220
phoenix.dca.untd.com2026-01-0964.136.44.25
mx.dca.untd.com2014-03-2464.136.44.37
forsale.untd.com2025-10-2464.136.53.220
track.untd.com2014-06-2864.136.45.30
mail.hyd.corp.untd.com2025-11-2564.136.3.218
investor.untd.com2025-10-0864.136.45.220
mxcorp.vgs.untd.com2026-01-1964.136.52.38
mx.vgs.untd.com2014-06-0564.136.52.37
cyclops.untd.com2014-07-2364.136.44.18
www.untd.com2025-11-1364.136.45.220
phoenix.untd.com2025-11-2364.136.52.25
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information