Domain > s5w.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to s5w.com

MD5	A/V
29bc940ee9a3eac0149ed07dd5753710	[W32.AndromPlwbahC.Trojan] [TrojanDownloader.Cutwail.r3] [Trojan.Injector!WWqNbSPGUtU] [Backdoor.Trojan] [Cutwail.DCN] [TROJ_SPNV.01KP14] [Trojan.Win32.Cutwail.fal] [Win32.Trojan.Cutwail.Htmq] [UnclassifiedMalware] [BackDoor.Andromeda.559] [BehavesLike.Win32.Dropper.nh] [Troj/MSIL-AZF] [W32/Backdoor.DYFX-3160] [Trojan/Win32.Cutwail] [TrojanDownloader:Win32/Cutwail] [RDN/Spybot.bfr!o] [TScope.Trojan.MSIL] [Trj/Chgt.N] [Trojan.Win32.Cutwail] [MSIL/GLQ!tr] [MSIL5.BVOW] [Trojan.Win32.Cutwail.ATJx]
548ed1c75d8e9419f3cecc0f5dcfa218	[Trojan.Inject.IA] [Patched] [Trojan.DownLoad.64914] [Win32/Wigon.PI] [W32/Cutwail.DPV!tr] [Trojan.Win32.Cutwail.dpv] [Trojan.Cutwail]
9ab0a68d8ad9e102ccd7fd0a067ecd9d	[W32.HfsAutoA.BDEF] [Trojan.Crypt.NKN] [W32/Trojan3.MQR] [Backdoor.Win32.Androm.fptk] [Trojan.Win32.Andromeda.djycfa] [Virus.Win32.Heur.c] [PE:Malware.XPACK-HIE/Heur!1.9C48] [BackDoor.Andromeda.404] [BehavesLike.Win32.PWSZbot.cc] [Mal/VB-AOE] [W32/Trojan.MZKU-6435] [Trojan/Win32.Androm] [Trojan.Win32.Injector.bBQXM] [Backdoor.Win32.Androm] [VBCrypt.IOJ]
90ba8b4cd89a5fd23bb0c3f17a759ba5	[Trojan.Inject.r3] [Trojan.Injector!xSxmY/oTY4I] [Trojan.Win32.Inject.tfmg] [Trojan.Win32.Inject.dhtgak] [Win32.Trojan.Inject.Hssg] [UnclassifiedMalware] [Trojan.DownLoad.64914] [Trojan.Inject.Win32.108354] [BehavesLike.Win32.Dropper.nh] [Troj/Msil-ANY] [W32/Trojan.GRSK-5893] [Trojan/Win32.Inject] [TrojanDownloader:Win32/Cutwail] [Win-Trojan/MDA.630F094C] [RDN/Spybot.bfr!o] [Trojan.Inject] [Trj/Chgt.J] [Evilware.Outbreak] [W32/Inject.TFMG!tr] [MSIL5.APAS] [Trojan.Win32.Inject.aJp] [Win32/Trojan.9d7]
54c65013e0c6395f49c1bee35327f8fe	[Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan/Wigon.pi] [Trojan.Inject.IA] [Trojan.Win32.DownLoad.dnpdpk] [New] [Suspicious.Cloud.5] [Trojan.Win32.Cutwail.dpv] [Trojan.Wigon!ntSxypTAolk] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.DownLoad.64914] [Patched] [Trojan/Cutwail.if] [W32/Cutwail.NLQ!tr] [Win32.Troj.Cutwail.d.(kcloud)] [Trojan.Inject.IA] [Backdoor/Win32.Pushdo] [Trojan.Cutwail] [Trojan.Inject.IA]
87209bcb0e0f2f07ebb713c73591a293	[Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan/Wigon.pi] [Trojan.Inject.IA] [Trojan.Win32.DownLoad.dnpdpk] [New] [Suspicious.Cloud.5] [Trojan.Win32.Cutwail.dpv] [Trojan.Wigon!ntSxypTAolk] [Trojan.Inject.IA] [Trojan.Inject.IA] [Trojan.DownLoad.64914] [Trojan.PornDialer.Win32.2002] [Patched] [Trojan/Cutwail.if] [W32/Cutwail.NLQ!tr] [Win32.Troj.Cutwail.d.(kcloud)] [Trojan.Inject.IA] [Backdoor/Win32.Pushdo] [Trojan.Inject.IA] [Trojan.Cutwail] [Trojan.Inject.IA]

Whois

Property	Value
Email	contact@privacyprotect.org
NameServer	NS2.DOMAINDIVE.COM
Created	2003-04-24 00:00:00
Changed	2015-04-25 00:00:00
Expires	2016-04-24 00:00:00
Registrar	PDR LTD. D/B/A PUBLI

DNS Resolutions

Date	IP Address
2013-05-01	184.172.174.22 (ClassC)
2014-12-03	168.144.9.48 (ClassC)
2015-02-04	168.144.9.48 (ClassC)
2015-09-11	167.114.211.25 (ClassC)
2019-04-26	209.99.40.223 (ClassC)
2020-04-29	209.99.40.222 (ClassC)
2021-05-02	192.99.226.190 (ClassC)
2022-02-24	162.240.56.129 (ClassC)
2023-12-20	192.99.226.184 (ClassC)
2024-12-27	158.69.35.145 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
webdisk.s5w.com	2024-09-15	158.69.35.145
cpanel.s5w.com	2024-12-19	158.69.35.145
mail.s5w.com	2024-12-22	158.69.35.145
webmail.s5w.com	2024-12-16	158.69.35.145
whm.s5w.com	2024-12-12	158.69.35.145
www.s5w.com	2024-10-30	158.69.35.145

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]