Domain > smtp.web.de

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to smtp.web.de

MD5	A/V
49def1b4084ff03c947f80db3065b01f	[Spyware.Zbot.ED] [W32/Trojan3.ITT] [Trojan.Zbot] [Win32/Tnega.LXRNZJC] [TROJ_FRS.ZMA000FK14] [Backdoor.Win32.Androm.empm] [Win32.Malware!Drop] [Artemis!49DEF1B4084F] [Worm:Win32/Gamarue] [W32/Trojan.BFBZ-7110] [Trj/CI.A] [Win32/TrojanDownloader.Wauchos.AD] [Win32.Backdoor.Androm.Pgdq] [Trojan.Crypt.ZPACK9] [Downloader.Small.KUH] [Win32/Trojan.a81] [Trojan.Zbot.IIC]
d425f80140b2fbc1e1641bbffc2607c1
414f356c91a64e1ea6279cbe9fa09bd9
d0c0b43ad0896ab0df77906afa2cbb63
84b96b96f60284a21addb1b2873d6aaa	[HW32.Packed.2DF6] [PWSZbot-FAKN!84B96B96F602] [Trojan.VBKrypt!BmfU93nmWQo] [Trojan.Win32.VBKrypt.jbj] [Trojan.Win32.VBKrypt.drcjlh] [Trojan.Emotet.78] [BehavesLike.Win32.Autorun.tc] [W32/PWS.MUCP-6526] [Trojan/VBKrypt.jhft] [Trojan/Win32.VBKrypt] [Trojan:Win32/Dynamer!ac] [Trojan/Win32.ZBot] [Trj/Chgt.O] [Trojan.Win32.Injector] [W32/Tinba.BJ!tr] [Crypt_vb.GSI]
1f41424394903f13a637ae4471917611	[HW32.CDB.F02a] [Trojan.Win32.Yakes.fdqn] [VirTool:Win32/Obfuscator.WT] [SScope.Malware-Cryptor.Hlux] [Win32/Cryptor] [Trojan.Win32.Yakes.AtKd]
9350ec1fdd4aa8beb92337341ae12aa6	[VCS/Instruction.PEEPOCheck]
cec2c8d439f75740055609cabe6bcdb6	[HW32.Packed.2D5F] [Backdoor.Bot] [Trojan.Zbot] [Win32/Emotet.AL] [Trojan.Win32.Yakes.kuoo] [PE:Malware.Obscure!1.9C59] [Trj/Chgt.O]
7c1f000df977b92e484117421a9bd228	[W32.MyDoomLB.Worm] [W32.Mydoom.L] [Artemis!7C1F000DF977] [Trojan.Spammer] [Worm.Mydoom.Win32.3] [Worm.MyDoom] [W32/Mydoom(2).N@MM] [I-Worm.Mydoom.CR] [W32/Mydoom.M@mm] [W32.Mydoom.L@mm] [Win32/Mydoom.Q] [Worm.Mydoom.I] [Email-Worm.Win32.Mydoom.l] [Trojan.Win32.Mydoom.cuyllc] [Worm.Win32.Mydoom.l] [W32/MyDoom-N] [Worm.Win32.Mydoom.Q] [Win32.HLLM.MyDoom.33808] [BehavesLike.Win32.Mydoom.mc] [W32/Mydoom.CJDZ-5239] [I-Worm/Zhelatin.abt] [WORM/Mydoom.L.1] [Worm[Email]/Win32.Mydoom] [Worm.Mydoom.l.(kcloud)] [Worm:Win32/Mydoom.L@mm] [I-Worm.Win32.Mydoom.22020[h]] [Win32/Mydoom.worm.22020.H] [Win32/Mydoom.N] [Worm.Mydoom] [Trojan.Win32.Mydoom.Q] [I-Worm.Mydoom.Q] [Email-Worm.Win32.Mydoom] [W32/MyDoom.M@mm] [I-Worm/Mydoom.N] [W32/Mydoom.DN.worm]
5b06981df60a6b5a704ea7864ea7cc2f
f861d53eccc24d35c2cff25d2b451f53	[HW32.Packed.E595] [Trojan.Zbot] [Trj/Chgt.O]
30a12b0a6d3222582e23eaea16b3be4f	[Win32/Cryptor]
ad7220bfbb295c3f8bd3eb3f769fc2c3
0ba47ab70e3a598b31f19e8a3a4bbd60
8523d3a3689040902953d6f4b9327558
55227aba14eb2b4e334f12a163af4b8b
cf786f9b02f29f759cffb4b351571f20	[0x590b48a2] [Trojan.PWS.Lineage.4319] [BC.Heuristic.Trojan.SusPacked.BF-6.A] [Dropper.Win32.BUZUS.V] [TrojanPSW.Steam] [Win32.Backdoor.Bifrose.kt.3] [Trojan-PSW.Win32.Staem.an] [MalwareScope.Worm.Viking] [Packed.NSPack] [Suspicious.BredoLab] [Injector.AR] [Win32/PSW.Steam.NA] [TR/PSW.Steam.an] [PWS-Steam]
5988f5eea2e0f6275a0f4232b4386bf9
ad9ea226e7518973d7026522546fc02a	[W32/Xirtem@MM] [Worm.Prolaco] [Trojan] [Trojan/Buzus.gdef] [Trojan.Win32.Buzus.brwfq] [W32/Trojan3.CIH] [W32.Ackantta.H@mm] [Bredolab.ACX] [Win32/Merond.O] [WORM_PROLACO.EK] [Trojan.Buzus-8525] [Trojan.Buzus.IE] [Trojan.Buzus!9qk1RC0+LV4] [TrojWare.Win32.GameThief.Magania.~KLC] [Win32.HLLW.Prolaco.1] [TR/Buzus.gdef] [W32/AutoRun-BHX] [Trojan/Buzus.slb] [Worm:Win32/Rebhip] [Trojan.Win32.Buzus.640512.A] [W32/Trojan.YBMP-7992] [Win32/Fruspam.GD] [Trojan.Buzus] [W32/Buzus.011E!tr] [W32/VobfusLNK.A] [Worm.Mailer] [Riskware] [Trojan/Win32.Buzus]
344a0c7a97e616e0ca0d0fece8671500

Whois

Property	Value
Email	hostmaster@1und1.de
NameServer	ns-webde.ui-dns.com
Changed	2011-12-28 08:56:53

DNS Resolutions

Date	IP Address
2014-06-20	213.165.67.124 (ClassC)
2025-10-22	213.165.67.108 (ClassC)
2026-01-08	213.165.67.124 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]