Domain > posten.se

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to posten.se

MD5	A/V
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
d2f2c9e7b5d32c5114a2f8511d9efcc2
e617a69e7185cd299d75c87c401e0fda	[SHeur4.BKZA] [TrojanDownloader*Win32/Cutwail.BS]
5e6ffe3abdc1caa35ee40b0a1908bf4c	[Win32/Tnega.XfYFUAD] [BackDoor.Bulknet.967] [Win32/Injector.AIRV] [W32/Injector.AHLB!tr] [Trojan-Downloader.Win32.Karagany] [Trojan.Crypt.NKN] [PWS-Zbot-FAQD!5E6FFE3ABDC1] [TrojanDownloader*Win32/Cutwail.BS] [winpe/Kryptik.CBZD] [TROJ_FIDOBOT.SM0] [Trojan.Buzus]
57be65340d0a4336f525d108862ccf50
2263766e2732eb5e6eb78b5d35423883	[Crypt2.BTUL] [TrojanDownloader*Win32/Cutwail.BS]
8b7c5fe0eaad467bb999a2c1f7dd7486	[TrojanDownloader.Cutwail] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btaipu] [W32.Pilleuz] [TROJ_CUTWAIL.CNA] [Win32.Trojan] [Backdoor.Win32.Pushdo.qhe] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.IQVD-6602] [Trojan.CryptILH] [W32/Pushdo.QHE!tr.bdr] [Crypt.CILH] [Trj/Pushdo.L]
7e265cfaa3a92f9b07c518dcbe577262	[Crypt_s.BOF] [TrojanDownloader*Win32/Cutwail.BS]
b4f310f5cc7b9cd68d919d50a8415974	[HW32.Laneul.zqwg] [Trojan/W32.Jorik.40448.U] [TrojanDownloader.Cutwail] [Trojan] [Trojan.Win32.Jorik.byfbdv] [W32.Pilleuz] [Win32/Cutwail.RfLHODC] [TROJ_SPNR.0BGS13] [Trojan.Win32.Jorik.Cutwail.prm] [Trojan.Cutwail!Vn3uTMMB5CM] [UnclassifiedMalware] [BackDoor.Bulknet.958] [TR/Graftor.103216] [Win32.Troj.Undef.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Client-SMTP.40448.A] [Dropper/Win32.Vidro] [BScope.Trojan.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.YOY!tr] [SHeur4.BNRB] [Trj/CI.A] [TrojanDownloader*Win32/Cutwail.BS]
622bf7ba2317ae03b0682a650bac03d8	[TrojanDownloader.Cutwail] [Cutwail-FBPN!622BF7BA2317] [W32.Pilleuz] [Pushdo.I] [TROJ_SPNR.1ADR13] [Backdoor.Win32.Pushdo.pyz] [Backdoor.Pushdo!kokJ8DxObyw] [Heur.Suspicious] [BackDoor.Bulknet.893] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor.Win32.U.Pushdo.41472] [Backdoor/Win32.Pushdo] [W32/Backdoor.PJEO-2224] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PYZ!tr.bdr] [SHeur4.BGUF] [Trj/OCJ.D]
f14ca0281fdf75a0f52f52b66e6884ea
9377d78f1f97104f41a6b42b195c8e51	[SHeur4.BLZU]
89c64a4ee7b13dd2dbdcf4a05f71312a	[TrojanDownloader*Win32/Cutwail.BS]
e57d3b285148fa02129b9c0044aa8737	[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
f7dd2cdcc0b90b7d7b2ff3cfb540c796	[Cutwail-FBYD!F7DD2CDCC0B9] [Trojan.PPush] [Trojan.Win32.Bulknet.brrije] [TROJ_DLOAD.RC] [Trojan.Kryptik!QNluqFEr0aI] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Troj/Cutwail-AM] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan.CryptDTE] [Crypt.CDTE] [Trj/CI.A]
b50e50a9a6c3d407f4b1fac8759d95f6
98428f0dd3514edeb4f14e4d14cccdb3
63e2d975b940af1a4ae7c80f7f6f7052	[TrojanDownloader*Win32/Cutwail.BS]
e4fac37c735dcccfffd80373bcf31985
b3a2add36f28dad15b6901eca370af87	[W32/Trojan.ROYM-5986] [TrojanDownloader.Cutwail.r4] [BackDoor.Bulknet.958] [Win32/Kryptik.BECW] [W32/KRYPTK.SMO2!tr] [Win32/Heur] [Trojan.Crypt] [Trojan.Win32.Cutwail.epf] [RDN/Downloader.a!th] [TrojanDownloader*Win32/Cutwail.BS] [TROJ_KRYPTK.SMO2] [BScope.Trojan.Pushdo]

Whois

Property	Value
NameServer	dns03.ports.se
Created	2005-04-11 00:00:00
Changed	2015-02-01 00:00:00
Expires	2016-04-11 00:00:00
Registrar	Domaininfo AB

DNS Resolutions

Date	IP Address
2013-10-09	147.14.11.241 (ClassC)
2020-09-07	13.33.17.156 (ClassC)
2020-09-07	13.33.17.7 (ClassC)
2020-09-16	52.85.238.8 (ClassC)
2020-09-20	52.84.90.22 (ClassC)
2020-09-22	52.84.213.76 (ClassC)
2020-10-02	13.224.230.3 (ClassC)
2020-10-13	65.9.57.31 (ClassC)
2020-10-13	65.9.57.87 (ClassC)
2020-10-20	13.33.17.36 (ClassC)
2020-10-24	13.33.17.89 (ClassC)
2020-10-29	13.35.245.59 (ClassC)
2020-11-27	143.204.55.77 (ClassC)
2020-12-04	205.251.219.97 (ClassC)
2020-12-12	65.9.73.124 (ClassC)
2020-12-30	13.224.226.91 (ClassC)
2021-01-24	65.9.50.101 (ClassC)
2021-01-24	65.9.50.121 (ClassC)
2021-01-24	13.225.80.35 (ClassC)
2021-05-04	54.230.99.46 (ClassC)
2021-05-10	54.192.98.123 (ClassC)
2021-05-26	52.222.149.124 (ClassC)
2021-06-07	13.32.25.121 (ClassC)
2021-08-25	143.204.98.59 (ClassC)
2022-05-02	18.66.192.117 (ClassC)
2022-06-20	13.225.78.89 (ClassC)
2022-06-21	13.33.141.17 (ClassC)
2023-08-26	143.204.237.62 (ClassC)
2024-02-07	52.85.242.86 (ClassC)
2024-02-11	52.85.242.28 (ClassC)
2024-02-15	52.85.242.90 (ClassC)
2024-03-13	52.85.243.15 (ClassC)
2024-03-22	52.85.243.95 (ClassC)
2024-04-11	52.85.243.87 (ClassC)
2024-06-17	143.204.237.67 (ClassC)
2024-06-20	3.164.206.122 (ClassC)
2024-07-19	3.164.206.116 (ClassC)
2024-07-25	143.204.237.45 (ClassC)
2024-08-19	3.164.206.20 (ClassC)
2024-09-10	52.222.149.14 (ClassC)
2024-09-19	108.157.229.88 (ClassC)
2024-10-30	108.157.229.40 (ClassC)
2024-11-13	3.164.230.46 (ClassC)
2024-12-02	108.157.229.109 (ClassC)
2024-12-15	108.157.229.62 (ClassC)
2024-12-21	18.244.18.97 (ClassC)
2024-12-26	143.204.237.120 (ClassC)

Port 80

Subdomains

Date	Domain	IP
ssl.edi.posten.se	2024-11-25	147.14.153.228
stats.posten.se	2014-01-03	66.235.138.225
www.posten.se	2024-02-12	3.163.24.45

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]