Domain > penn.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to penn.com

MD5	A/V
49def1b4084ff03c947f80db3065b01f	[Spyware.Zbot.ED] [W32/Trojan3.ITT] [Trojan.Zbot] [Win32/Tnega.LXRNZJC] [TROJ_FRS.ZMA000FK14] [Backdoor.Win32.Androm.empm] [Win32.Malware!Drop] [Artemis!49DEF1B4084F] [Worm:Win32/Gamarue] [W32/Trojan.BFBZ-7110] [Trj/CI.A] [Win32/TrojanDownloader.Wauchos.AD] [Win32.Backdoor.Androm.Pgdq] [Trojan.Crypt.ZPACK9] [Downloader.Small.KUH] [Win32/Trojan.a81] [Trojan.Zbot.IIC]
ddeca0855c9bb584c270ff6c5f0521c2	[Artemis!DDECA0855C9B] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qij] [UnclassifiedMalware] [TR/Dldr.Cutwail.4] [TrojanDownloader:Win32/Cutwail] [Win32/Wigon.PH] [W32/Kryptik.AX!tr] [Trj/CI.A]
e617a69e7185cd299d75c87c401e0fda	[SHeur4.BKZA] [TrojanDownloader*Win32/Cutwail.BS]
6bd3a60b66efb707e894f2717cccf17b
3372fc39d1af6916fa776c7965920a20	[HW32.CDB.741c] [W32/Worm-AAEH.pq!3372FC39D1AF] [WS.Reputation.1] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12544] [Worm/Vobfus.agcpv] [Mal/VB-ALW] [Worm:Win32/Vobfus.ZR] [Trojan.Win32.Injector.BCCY] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABEP]
2422279645dc3f8f9201bf042122d6d5	[W32.Clod317.Trojan.772f] [Backdoor/W32.Pushdo.36280.C] [Trojan.Cutwail.AQ] [Trojan.Win32.XPACK.bdjuve] [W32.Pilleuz] [Pushdo.B] [TROJ_CUTWAIL.KK] [Trojan.Wigon!3W+DBvqt2Q0] [Backdoor.Win32.A.Pushdo.36280.A] [UnclassifiedMalware] [Trojan.DownLoad3.17030] [Heuristic.BehavesLike.Win32.Suspicious-DTR.K] [Troj/FakeAV-GDI] [Backdoor/Pushdo.dr] [Win32.Hack.Pushdo.(kcloud)] [TrojanDownloader:Win32/Cutwail.BW] [Trojan/Win32.Zbot] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo] [W32/CutMail.EE!tr] [SHeur4.ATIK] [Trojan.Win32.Kryptik.aN]
34961ffc0f75d89da0b9464a4c7a02b1	[Backdoor.Win32.Pushdo.qag] [BackDoor.Bulknet.893] [Win32.Heur.KVMF58.hy.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Trojan-Downloader.Win32.Cutwail]
3b54013dbac240d454b929a3745a46e4	[Artemis!3B54013DBAC2] [WS.Reputation.1] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.ppt] [UnclassifiedMalware] [BackDoor.Bulknet.958] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ]
3be8faf7b111dadde0d8e17b428125b0	[Backdoor/W32.Androm.39936.C] [Trojan.Androm.vsg.cw4] [Trojan.Inject] [Trojan/Kryptik.bdbi] [Trojan.Win32.Androm.btkkib] [WS.Reputation.1] [TROJ_CUTWAIL.PQP] [Backdoor.Win32.Androm.vsg] [Backdoor.Androm!mmztmFLZ69E] [UnclassifiedMalware] [BackDoor.Bulknet.958] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail] [Client-SMTP.39936] [W32/Backdoor.DIPS-1259] [Backdoor.Androm] [Virus.Win32.Cryptor] [W32/Androm.VSG!tr.bdr] [Win32/Cryptor] [W32/Palevo.GEZ.worm]
e5b85688fcbb1c799ee2e233fb531297	[TrojanDownloader.Cutwail] [RDN/Downloader.a!mv] [Trojan.Inject.RRE] [Riskware] [W32.Pilleuz] [Win32/Cutwail.CGbKVWC] [BKDR_PUSHDO.FT] [Backdoor.Win32.Pushdo.qnv] [Backdoor.Pushdo!XnUVfC93BRo] [UnclassifiedMalware] [BackDoor.Bulknet.958] [BDS/Pushdo.qnv] [Backdoor/Pushdo.aew] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [W32/Backdoor.YDLC-0133] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.YOY!tr]
9844a1b8a10ed4568240ae7a528bef5d	[HW32.CDB.Bf28] [Backdoor.Kelihos] [Malware.Packer.OCD] [Trojan.PWS.Tepfer!vHSA+Pr89Pk] [Kryptik.CCFN] [Win32/Kelihos.baJHSHD] [Trojan-PSW.Win32.Tepfer.tokd] [Trojan.Win32.Kryptik.cvtteo] [UnclassifiedMalware] [BackDoor.Slym.13304] [TR/Crypt.EPACK.53967] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/FakeAv.BWUN!tr] [Crypt_s.GCT] [Trojan.Win32.InfoStealer.AZ] [Win32/Trojan.65e]
357423154cf2deb27cea8219633158ca	[TrojanPWS.Zbot.AZ4] [Cutwail-FBYD!357423154CF2] [Trojan.PPush] [Trojan] [Trojan/Kryptik.bcej] [Trojan.Win32.Bulknet.bsbxmg] [W32.Pilleuz] [Win32/Cutwail.CeCCXcD] [Backdoor.Win32.Pushdo.qfj] [Backdoor.Pushdo!X+87TMMiffo] [Troj/Cutwail-AM] [TrojWare.Win32.Kryptik.BAVK] [BackDoor.Bulknet.893] [BKDR_PUSHDO.NIL] [Backdoor/Pushdo.adm] [TrojanDownloader:Win32/Cutwail.BS] [W32/Backdoor.WNGO-5843] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan.CryptDTE] [W32/Pushdo.PYD!tr.bdr] [Crypt.CDTE] [Trj/CI.A]
9377d78f1f97104f41a6b42b195c8e51	[SHeur4.BLZU]
c12a0f14324014f4c4d5d070ddc33d33
43415b6d9537a142cec2c22c31f8bfae	[Cutwail-FBYD!43415B6D9537] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo.qev] [Trojan.Kryptik!NPQTFtfoX4A] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Artemis!43415B6D9537] [TrojanDownloader:Win32/Cutwail] [Trojan.CryptCQK] [W32/Pushdo.QEV!tr.bdr] [Crypt.CCQK] [Trj/Dtcontx.E]
ed3e876d7a262ce652521ec12ed5cd5d	[PWS-Zbot-FAOE!ED3E876D7A26] [Backdoor.Bot] [W32.Pilleuz] [TROJ_SPNR.14C513] [Backdoor.Win32.Ruskill.rgr] [Heur.Suspicious] [BackDoor.Bulknet.846] [TR/Dldr.Cutwail.BS.76] [Mal/EncPk-AFN] [Win32.Hack.Ruskill.r.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Inject] [W32/Backdoor.GGHQ-3653] [Malware.Pilleuz!rem] [Suspicious] [Trojan.Win32.Inject] [W32/EncPk.AFN!tr] [Trj/OCJ.D]
e4fac37c735dcccfffd80373bcf31985
f0eec37a33ad2efee7080820ec596e83	[Win.Trojan.Ransom-2439]
0c699bf8815137404fc43f6e56761ac8	[Trojan.Dropper.VQH] [TrojanDownloader.Cutwail] [Trojan-FBGJ!0C699BF88151] [Trojan] [Trojan/Wigon.ph] [Malware] [Mal_DLDER] [Trojan.Downloader.Small-3221] [UnclassifiedMalware] [BackDoor.Bulknet.893] [TrojanDownloader:Win32/Cutwail.BS] [Virus.Win32.Heur.c] [BScope.Trojan.Cutwail.4512] [Win32/Wigon.PH] [W32/Pushdo.B!tr.bdr]
b3a2add36f28dad15b6901eca370af87	[W32/Trojan.ROYM-5986] [TrojanDownloader.Cutwail.r4] [BackDoor.Bulknet.958] [Win32/Kryptik.BECW] [W32/KRYPTK.SMO2!tr] [Win32/Heur] [Trojan.Crypt] [Trojan.Win32.Cutwail.epf] [RDN/Downloader.a!th] [TrojanDownloader*Win32/Cutwail.BS] [TROJ_KRYPTK.SMO2] [BScope.Trojan.Pushdo]

Whois

Property	Value
Name	Hostmaster -
Organization	Earthlink Inc
Email	hostmaster@earthlink.net
Address	1375 Peachtree St,
Zip Code	30309
City	Atlanta
State	GA
Country	US
Phone	+1.4048150770
NameServer	scratchy.earthlink.net
Created	1995-05-31 04:00:00
Changed	2015-05-26 05:31:32
Expires	2016-05-30 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2013-11-03	207.69.200.191 (ClassC)
2014-06-20	207.69.200.190 (ClassC)
2025-07-04	207.69.200.191 (ClassC)
2025-08-07	207.69.200.190 (ClassC)

Subdomains

Date	Domain	IP
pop.penn.com	2025-07-18	24.41.66.181
smtp.penn.com	2025-06-19	24.41.66.193

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]