Help RSS API Feed Maltego Contact                        

Domain > mx5.who.int

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mx5.who.int

MD5A/V
924be15014f785cb08ccda07be93344c[HW32.CDB.954a] [Trojan.Gatak.r3] [Spyware.Password] [TROJ_GATAK.SMZ] [UnclassifiedMalware] [Trojan.Inject1.39822] [Trojan:Win32/Gatak] [W32/Trojan.YPKT-3534] [Trojan.Win32.Dropper.Arz] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.SuspectCRC] [W32/Kryptik.BWVS!tr] [Crypt3.CQE] [Win32/Trojan.e46]
14b43203abd10b893244fc8ac8d5f531[HW32.CDB.F55f] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [UnclassifiedMalware] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Win32/Trojan.0de]
d6a71b4d3098eab4dddab30fddbaef35[FakeSecTool-FCX!D6A71B4D3098] [Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]

Whois

PropertyValue
Organization World Health Organization (WHO)
Email hostmaster@who.int
NameServer WHQDNS1.WHO.INT
Created 1998-06-05 00:00:00

DNS Resolutions

DateIP Address
2014-12-11158.232.12.50 (ClassC)
2025-06-26158.232.12.25 (ClassC)

Subdomains

DateDomainIP
mx10.who.int2014-06-16158.232.12.47
WHQDNS1.WHO.INT2025-05-15158.232.12.5
whqdns2.who.int2025-06-10158.232.12.6
mx5.who.int2014-12-11158.232.12.50
mx8.who.int2014-12-11158.232.12.88
covid19.who.int2021-07-24204.246.191.101
fctcdata.who.int2025-04-0513.107.246.70
community-godata.who.int2025-05-12158.232.12.119
screentb.who.int2025-06-0620.61.146.189
iarc.who.int2025-06-25193.51.164.6
clic.iarc.who.int2024-12-2618.238.217.113
survival.iarc.who.int2024-12-1118.65.229.16
monographs.iarc.who.int2024-08-2518.161.6.63
training.aws.iarc.who.int2025-03-223.163.165.74
www.iarc.who.int2024-06-26204.246.191.117
erc.who.int2025-05-0420.105.170.10
fctc.who.int2025-04-16192.133.11.1
platform.who.int2025-06-04192.133.11.1
cdn.who.int2023-07-26104.16.183.69
icdcdn.who.int2025-01-1713.107.246.70
apo.who.int2025-04-24192.133.11.1
www.searo.who.int2019-10-1513.225.62.3
afro.who.int2025-04-0420.54.132.109
staging.afro.who.int2025-04-0620.54.132.109
cpanel.afro.who.int2025-04-1320.54.132.109
admin.espen.afro.who.int2024-02-1434.201.80.84
dev.afro.who.int2025-04-1320.54.132.109
www.afro.who.int2019-12-13104.130.17.24
www.emro.who.int2024-03-08104.18.155.21
www.wpro.who.int2025-06-25158.232.12.119
euro.who.int2025-06-17128.76.62.88
tdr.who.int2025-06-10192.133.11.1
healthcluster.who.int2025-05-10192.133.11.1
qualityhealthservices.who.int2025-06-25192.133.11.1
iris.who.int2024-11-2544.219.91.92
cdn-auth-cms.who.int2025-06-25192.133.11.1
apps.who.int2023-08-16104.16.183.69
fctcdata-uat.who.int2025-01-1313.107.246.70
erc-uat.who.int2025-06-0620.67.67.118
screentb-test.who.int2025-06-2520.13.71.37
goarn-dev.who.int2025-06-2620.50.239.114
www.who.int2019-10-1313.224.2.109
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information