Domain > nfp.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to nfp.com

MD5	A/V
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
210b6e761b4cb7d71e862606c0f28846	[Artemis!210B6E761B4C] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.prs] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr] [SHeur4.BNRB]
6bd3a60b66efb707e894f2717cccf17b
2263766e2732eb5e6eb78b5d35423883	[Crypt2.BTUL] [TrojanDownloader*Win32/Cutwail.BS]
2ba1c7eb19cc61d8cfb858e81b613787	[Crypt2.BVGD] [RDN/Downloader.a!nu] [TrojanDownloader*Win32/Cutwail.BS]
06d40abb65ee157ff2574df8d24743f1
c12a0f14324014f4c4d5d070ddc33d33
ea5a2c72517c76e822324540ec9f1f7a	[TrojanDownloader.Cutwail] [Trojan/Wigon.ph] [Riskware] [Trojan.Win32.XPACK.bgffjt] [W32.Pilleuz] [TROJ_WIGON.AW] [UnclassifiedMalware] [BackDoor.Bulknet.739] [Heuristic.BehavesLike.Win32.Suspicious.D] [Troj/WIGON-A] [TrojanDownloader:Win32/Cutwail.BW] [W32/Trojan.JDWF-4093] [Dropper/Win32.Dorifel] [Malware.Pilleuz!rem] [Win32/Wigon.PH] [Trojan.SuspectCRC] [W32/Wigon.PH] [SHeur4.AZVH]
e4fac37c735dcccfffd80373bcf31985
f0eec37a33ad2efee7080820ec596e83	[Win.Trojan.Ransom-2439]
bfe3b90327f6547b2be586610623d798
28450f092671f0a9243e0810ed8bf536	[W32.UsernameBiomoefC.Trojan] [Trojan/W32.Inject.37376.AD] [Backdoor.Win32.Pushdo!O] [TrojanDownloader.Cutwail.BS4] [Spyware.Password] [Backdoor.Pushdo.Win32.8] [Backdoor/Pushdo.b] [Trojan.Wigon!2ViUZd+YYyE] [New] [Win32/Wigon.PB] [Mal_DLDER] [WIN.Trojan.Pushdo-16] [Backdoor.Win32.Pushdo.b] [Trojan.Win32.Pushdo.bgkqij] [Backdoor.Win32.A.Pushdo.37376[h]] [Trojan.DownLoader6.62576] [Mal_DLDER] [Downloader-FKQ!28450F092671] [Backdoor/Pushdo.a] [W32/Pushdo.B!tr.bdr] [Trojan[Backdoor]/Win32.Pushdo] [Win32.Hack.Pushdo.(kcloud)] [Backdoor/Win32.Pushdo] [TrojanDownloader:Win32/Cutwail.BS] [Downloader-FKQ!28450F092671] [Backdoor.Pushdo] [Trj/OCJ.A] [Win32.Backdoor.Pushdo.Hqlp] [Backdoor.Win32.Pushdo.b]
af4b04164d37352490ff297a719b575e	[Win32/Cutwail.BXH] [Backdoor/W32.Pushdo.41472.B] [TrojanDownloader.Cutwail.BS5] [Trojan/Kryptik.axmu] [Trojan.Win32.Bulknet.bqoczp] [W32/Backdoor2.HRTG] [W32.Pilleuz] [Win32/Wigon.PH] [TROJ_CUTWAIL.LM] [Backdoor.Win32.Pushdo.pvb] [Trojan.Kryptik!aoUJfE0IuXs] [Backdoor.Win32.Pushdo.41472[h]] [Troj/Bckdr-RPP] [UnclassifiedMalware] [BackDoor.Bulknet.847] [Backdoor.Pushdo.Win32.320] [TROJ_CUTWAIL.LM] [BehavesLike.Win32.Downloader.pc] [W32/Backdoor.WDQO-6126] [Backdoor/Pushdo.zh] [TR/Dldr.Cutwail.BS.101] [Trojan[Backdoor]/Win32.Pushdo] [Win32.Troj.Dorifel.ac.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Pushdo.pvb] [Trj/OCJ.E] [Trojan.Wigon.PH] [Backdoor.Win32.Pushdo] [W32/Pushdo.PVB!tr.bdr] [SHeur4.BEJF] [Backdoor.Win32.Pushdo.pvb]
f593d4eaba8dc72a22309a69475e9729	[Win32/Cutwail.ZAAG!suspicious] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.Cutwail] [Trojan.Inject.IA] [Trojan.Win32.Bulknet.cssuqh] [New] [WS.Reputation.1] [Trojan.Downloader.Small-3221] [Trojan.Inject.IA] [Trojan.Inject!MMFDfR2fHM0] [Win32.Trojan.Spy.Ednf] [Trojan.Inject.IA] [UnclassifiedMalware] [Trojan.Inject.IA] [Trojan.MulDrop3.14959] [Mal_DRPR-3] [BehavesLike.Win32.Dreform.qh] [Patched] [Trojan[:HEUR]/Win32.Unknown] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Bagle] [Trojan.Inject.IA] [Cutwail-FBWN!F593D4EABA8D] [BScope.Trojan.Cutwail.4512] [Trojan.Win32.Wigon.PH] [W32/Scar.TMP!tr] [Win32/DH{AyAkIiUP}] [Trj/CI.A] [Win32/Trojan.c7d]

Whois

Property	Value
NameServer	PDNS75.ULTRADNS.COM
Created	1995-07-05 00:00:00
Changed	2014-10-08 00:00:00
Expires	2017-11-02 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2013-07-19	12.70.47.167 (ClassC)
2013-10-09	66.193.217.167 (ClassC)
2024-01-27	23.101.124.54 (ClassC)
2024-10-20	104.19.208.28 (ClassC)
2024-10-29	104.19.191.28 (ClassC)

Subdomains

Date	Domain	IP
marketing.nfp.com	2014-06-23	108.168.254.38
thorbahnblog.nfp.com	2014-07-16	165.254.24.158
thorbahn.nfp.com	2014-07-16	165.254.24.152
www.nfp.com	2023-08-29	104.17.17.9

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]