Domain > mx1.ambergrissolutions.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mx1.ambergrissolutions.com

MD5	A/V
3ff79e59f23983931c7f8b78ff705df1	[HW32.CDB.6c99] [Kryptik.CCFN] [Win32/Kelihos.SeNdHLB] [Backdoor.Win32.Hlux.dlkp] [Backdoor.Hlux!oUNizOsy5vo] [TrojWare.Win32.Kryptik.CASU] [Trojan.Packed.26544] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Hlux.At] [Trojan-Downloader.Win32.Waledac] [W32/Hlux.AGWI!tr] [Win32/Trojan.337]

Whois

Property	Value
Email	AmbergrisSolutions.com@NameBrightPrivacy.com
NameServer	PNS2.CLOUDNS.NET
Created	2016-10-25 00:00:00
Changed	2016-10-26 00:00:00
Expires	2017-10-25 00:00:00
Registrar	DROPCATCH.COM 638 LL

DNS Resolutions

Date	IP Address
2014-07-08	203.153.12.25 (ClassC)
2024-09-06	172.98.192.35 (ClassC)
2024-09-16	95.211.75.10 (ClassC)
2024-12-01	23.239.3.104 (ClassC)
2025-05-02	103.224.182.218 (ClassC)

Port 80

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]