Help RSS API Feed Maltego Contact                        

Domain > sandhills.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to sandhills.com
MD5A/V
e6d960bf587f5cb1497520fe716f1fb4[Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [Backdoor:Win32/Kelihos.F] [PE:Malware.XPACK/RDM!5.1]

Whois
PropertyValue
NameServer GTM2.SANDHILLS.COM
Created 1997-02-19 00:00:00
Changed 2013-12-12 00:00:00
Expires 2016-02-20 00:00:00
Registrar NETWORK SOLUTIONS, L

DNS Resolutions
DateIP Address
2024-12-06104.17.57.108 (ClassC)
2024-12-20104.17.58.108 (ClassC)
2025-01-01172.64.145.242 (ClassC)

Port 443

Subdomains
DateDomainIP
GTM2.SANDHILLS.COM2024-12-2938.101.15.101
DNS2.SANDHILLS.COM2024-10-2738.101.15.100
media.sandhills.com2024-09-28104.17.50.108
extapiweb.sandhills.com2024-12-06104.17.46.108
dataexchange.sandhills.com2024-11-25172.64.145.242
analyticstracking.sandhills.com2024-05-04104.18.231.41
shipping.sandhills.com2024-11-25104.18.42.14
dsmail.sandhills.com2024-11-2538.101.15.36
swwebvpn.sandhills.com2025-01-0138.101.15.4
spamq.sandhills.com2024-11-2538.101.15.175
extapids.sandhills.com2024-12-06104.17.48.108
wemailds.sandhills.com2013-12-1938.101.15.32
services.sandhills.com2024-12-06104.16.56.119
files.sandhills.com2024-11-25104.18.42.14
dealers.sandhills.com2024-11-25172.64.145.242
www.sandhills.com2024-11-15104.17.58.108
dx.sandhills.com2024-11-25104.18.42.14
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information