Domain > mxrelay.doe.gov

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mxrelay.doe.gov

MD5	A/V
4211b2d7121c11d5f032e6620030a384	[HW32.CDB.Cd7e] [Packed.Win32.Katusha.3!O] [Hlux.ZY] [VirTool:Win32/Obfuscator.WT]
833009a54c295a72ad64ab0941f482fe	[Suspicious.Cloud.5] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [TR/Crypt.EPACK.9220] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/FakeAV-UF] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GIF] [Trojan.Win32.Kryptik.BZOO]
b36385662ebdaf40bc3d28f90b6a4751	[Spyware.Zbot.USBV] [Trojan] [BackDoor.SlymENT.1498] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan/Win32.Foreign]
1be1d71fb76a46afa15fc4ee16ac1d11	[HW32.CDB.39c9] [Backdoor.Hlux.r3] [RDN/q2z-art6.s_318383!a] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnzz] [Backdoor.Hlux!eaxFLDBT/AM] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL]
dde053529fc90359815908c8ee1def65	[FakeSecTool-FCX!DDE053529FC9] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]
56bbeac9d1a70afb8bb8b80ec1387750	[HW32.CDB.39f5] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcewe] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djcw] [Backdoor.Hlux!yo75di6Nrfc] [TrojWare.Win32.Kryptik.BLUU] [BackDoor.Slym.14044] [TR/Kryptik.oeons] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GGV] [Trojan.Win32.Kryptik.BZDO] [Win32/Trojan.fec]

DNS Resolutions

Date	IP Address
2013-12-18	205.254.128.11 (ClassC)
2014-04-25	205.254.128.12 (ClassC)
2014-06-16	205.254.128.13 (ClassC)
2025-05-14	67.231.147.102 (ClassC)
2025-07-11	67.231.155.102 (ClassC)

Subdomains

Date	Domain	IP
email.exch07.doe.gov	2025-05-16	205.254.131.29
www.oha.doe.gov	2025-06-29	205.254.131.65
mail.em-la.doe.gov	2025-07-11	65.144.242.201
mail.gjemtac.doe.gov	2025-07-03	12.54.4.40
mail.emcbc.doe.gov	2025-02-27	167.253.181.10
www.rmotc.doe.gov	2014-08-26	67.132.183.35
or-wifi.science.doe.gov	2025-05-13	192.0.2.1
www.science.doe.gov	2025-05-11	192.107.175.200
www.fe.doe.gov	2014-08-21	96.17.111.57
www.doedigitalarchive.doe.gov	2025-05-03	205.254.131.65
data.jgi.doe.gov	2025-03-05	104.18.9.154
img.jgi.doe.gov	2025-03-29	172.64.149.116
mgm.jgi.doe.gov	2025-04-20	104.18.38.140
email.doe.gov	2025-05-27	205.254.131.29
srnl.doe.gov	2025-06-28	192.33.240.42
netl.doe.gov	2025-06-05	204.154.137.10
arcgis.netl.doe.gov	2023-08-16	44.242.18.77
www.em.doe.gov	2025-07-03	205.254.131.65
fulcrum.doe.gov	2025-05-15	205.254.144.110
hqwss.hr.doe.gov	2024-12-28	205.254.128.11
www.spr.doe.gov	2024-08-28	52.235.253.123
directives.doe.gov	2024-06-10	3.19.42.208
fims.doe.gov	2025-05-16	75.2.52.128
www.regulations.doe.gov	2024-10-30	3.18.162.105
pars.doe.gov	2025-07-11	52.127.50.129
login.pars.doe.gov	2023-08-25	3.15.167.137
json.pars.doe.gov	2025-05-12	20.141.12.34
www.smallbusiness.doe.gov	2025-05-13	205.254.145.43
foxbat.doe.gov	2025-06-25	205.254.143.110
www.doe.gov	2025-06-26	205.254.131.65
mail.lex.doe.gov	2025-07-04	74.143.212.30
mxrelay.doe.gov	2014-06-16	205.254.128.13

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]