Domain > mx5.who.int | Threatcrowd.org Open Source Threat Intelligence

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mx5.who.int

MD5	A/V
924be15014f785cb08ccda07be93344c	[HW32.CDB.954a] [Trojan.Gatak.r3] [Spyware.Password] [TROJ_GATAK.SMZ] [UnclassifiedMalware] [Trojan.Inject1.39822] [Trojan:Win32/Gatak] [W32/Trojan.YPKT-3534] [Trojan.Win32.Dropper.Arz] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Trojan.SuspectCRC] [W32/Kryptik.BWVS!tr] [Crypt3.CQE] [Win32/Trojan.e46]
14b43203abd10b893244fc8ac8d5f531	[HW32.CDB.F55f] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [UnclassifiedMalware] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BD!tr] [Crypt_s.GNC] [Win32/Trojan.0de]
d6a71b4d3098eab4dddab30fddbaef35	[FakeSecTool-FCX!D6A71B4D3098] [Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]

Whois

Property	Value
Organization	World Health Organization (WHO)
Email	hostmaster@who.int
NameServer	WHQDNS1.WHO.INT
Created	1998-06-05 00:00:00

DNS Resolutions

Date	IP Address
2014-12-11	158.232.12.50 (ClassC)
2024-12-26	158.232.12.25 (ClassC)

Subdomains

Date	Domain	IP
mx10.who.int	2014-06-16	158.232.12.47
WHQDNS1.WHO.INT	2024-08-25	158.232.12.5
whqdns2.who.int	2024-11-25	158.232.12.6
mx5.who.int	2014-12-11	158.232.12.50
mx8.who.int	2014-12-11	158.232.12.88
covid19.who.int	2021-07-24	204.246.191.101
fctcdata.who.int	2024-11-24	13.107.253.70
community-godata.who.int	2024-10-30	158.232.12.119
screentb.who.int	2024-11-25	20.61.146.189
iarc.who.int	2024-11-26	193.51.164.6
clic.iarc.who.int	2024-11-28	99.84.66.58
survival.iarc.who.int	2024-12-11	18.65.229.16
monographs.iarc.who.int	2024-07-14	18.161.6.124
training.aws.iarc.who.int	2024-08-28	99.84.66.7
www.iarc.who.int	2024-02-13	204.246.191.79
erc.who.int	2024-11-27	20.105.170.10
fctc.who.int	2024-11-28	192.133.11.1
platform.who.int	2024-12-17	192.133.11.1
cdn.who.int	2023-07-26	104.16.183.69
apo.who.int	2024-11-28	192.133.11.1
www.searo.who.int	2024-12-17	158.232.12.119
afro.who.int	2024-11-28	20.54.132.109
staging.afro.who.int	2024-11-25	20.54.132.109
cpanel.afro.who.int	2024-11-22	20.54.132.109
admin.espen.afro.who.int	2024-02-14	34.201.80.84
dev.afro.who.int	2024-12-26	20.54.132.109
www.afro.who.int	2019-12-13	104.130.17.24
www.emro.who.int	2024-03-08	104.18.155.21
www.wpro.who.int	2024-12-23	158.232.12.119
euro.who.int	2024-12-26	128.76.62.88
tdr.who.int	2024-11-28	192.133.11.1
qualityhealthservices.who.int	2024-12-12	192.133.11.1
iris.who.int	2024-11-25	44.219.91.92
cdn-auth-cms.who.int	2024-09-09	192.133.11.1
apps.who.int	2023-08-16	104.16.183.69
fctcdata-uat.who.int	2024-11-24	13.107.246.70
erc-uat.who.int	2024-12-26	20.67.67.118
screentb-test.who.int	2024-11-25	20.13.71.37
goarn-dev.who.int	2024-11-25	20.50.239.114
www.who.int	2019-10-13	13.224.2.109

View on OTX | View on ThreatMiner