Domain > sprintmail.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to sprintmail.com

MD5	A/V
2a6e7154c7f62a8109dae1b6a6a204c3	[SHeur4.BNRB] [TrojanDownloader*Win32/Cutwail.BS]
d2f2c9e7b5d32c5114a2f8511d9efcc2
49def1b4084ff03c947f80db3065b01f	[Spyware.Zbot.ED] [W32/Trojan3.ITT] [Trojan.Zbot] [Win32/Tnega.LXRNZJC] [TROJ_FRS.ZMA000FK14] [Backdoor.Win32.Androm.empm] [Win32.Malware!Drop] [Artemis!49DEF1B4084F] [Worm:Win32/Gamarue] [W32/Trojan.BFBZ-7110] [Trj/CI.A] [Win32/TrojanDownloader.Wauchos.AD] [Win32.Backdoor.Androm.Pgdq] [Trojan.Crypt.ZPACK9] [Downloader.Small.KUH] [Win32/Trojan.a81] [Trojan.Zbot.IIC]
b34430b8e494c41f86c5aa47b002a212	[Crypt2.AZDS]
a472f9d1a78fa6cb3eb6896d9c319726	[TrojanDownloader.Cutwail.bs] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btelgd] [WS.Reputation.1] [BKDR_PUSHDO.FC] [Backdoor.Win32.Pushdo.qgz] [Backdoor.Pushdo!+jNmAzmKgNc] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.RMSR-3833] [Trojan.CryptHWZ] [W32/Pushdo.QGZ!tr.bdr] [Crypt.CHWZ] [Trj/Pushdo.L]
e9a5bc168334d1c8371468d3e033ad32
6bd3a60b66efb707e894f2717cccf17b
57be65340d0a4336f525d108862ccf50
37b9070bfbc74ee584b01de29d129911	[HW32.CDB.Ec9a] [Heur.Trojan.Hlux]
2422279645dc3f8f9201bf042122d6d5	[W32.Clod317.Trojan.772f] [Backdoor/W32.Pushdo.36280.C] [Trojan.Cutwail.AQ] [Trojan.Win32.XPACK.bdjuve] [W32.Pilleuz] [Pushdo.B] [TROJ_CUTWAIL.KK] [Trojan.Wigon!3W+DBvqt2Q0] [Backdoor.Win32.A.Pushdo.36280.A] [UnclassifiedMalware] [Trojan.DownLoad3.17030] [Heuristic.BehavesLike.Win32.Suspicious-DTR.K] [Troj/FakeAV-GDI] [Backdoor/Pushdo.dr] [Win32.Hack.Pushdo.(kcloud)] [TrojanDownloader:Win32/Cutwail.BW] [Trojan/Win32.Zbot] [Backdoor.Pushdo] [Backdoor.Win32.Pushdo] [W32/CutMail.EE!tr] [SHeur4.ATIK] [Trojan.Win32.Kryptik.aN]
1be1d71fb76a46afa15fc4ee16ac1d11	[HW32.CDB.39c9] [Backdoor.Hlux.r3] [RDN/q2z-art6.s_318383!a] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnzz] [Backdoor.Hlux!eaxFLDBT/AM] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [VirTool:Win32/Obfuscator.WT] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL]
17c3b162c4f71c7aef83c9e7644b6752
75147b8dd7796762a48bd315293f0817	[FakeSecTool-FCI!75147B8DD779] [Malware.Packer.FFS] [Heuristic.LooksLike.Win32.Suspicious.E] [W32/Kryptik.BDPK!tr] [Crypt_s.EPS]
d3be3c4282a9d5158080d8023e5f2efa	[TrojanRansom.Foreign.cyzc] [Fake-Rena-FNQ!D3BE3C4282A9] [Trojan.Inject.RRE] [Trojan] [WS.Reputation.1] [TROJ_RANSOM.FCN] [Trojan-Ransom.Win32.Foreign.cyzc] [UnclassifiedMalware] [Trojan.PWS.Panda.547] [TR/Ransom.Foreign.cyzc] [Win32.Troj.Undef.(kcloud)] [VirTool:Win32/Injector] [Trojan/Win32.Foreign] [W32/Trojan.CVXL-5426] [Virus.Win32.Cryptor] [W32/Injector.ZVR!tr] [Win32/Cryptor] [Trj/Dtcontx.E]
e3346adfbe598fe8dacfcf07debecc50	[TrojanDownloader*Win32/Cutwail.BS]
981a83b3f0d4a74b0b38becda7c8cb9c	[Artemis!981A83B3F0D4] [Trojan.Win32.Crypt.cxd] [W32/Yakes.FHJN!tr] [Win32/Cryptor]
b7d2d2a8a4d14b8b74cc88009e28ae66	[Trojan/W32.Small.41984.VJ] [Backdoor.Win32.Pushdo!O] [TrojanDownloader.Cutwail.BS5] [Downloader-FKK!B7D2D2A8A4D1] [Suspicious.Cloud.5] [Pushdo.J] [BKDR_PUSHDO.SMP] [Backdoor.Win32.Pushdo.pvu] [Trojan.Win32.Pushdo.cramya] [Backdoor.Win32.Pushdo.41984.B] [Trojan.Inject1.19222] [Backdoor/Pushdo.yv] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Pushdo] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PVU!tr.bdr]
899ae574023b4eb95234c2715e8b0955
9844a1b8a10ed4568240ae7a528bef5d	[HW32.CDB.Bf28] [Backdoor.Kelihos] [Malware.Packer.OCD] [Trojan.PWS.Tepfer!vHSA+Pr89Pk] [Kryptik.CCFN] [Win32/Kelihos.baJHSHD] [Trojan-PSW.Win32.Tepfer.tokd] [Trojan.Win32.Kryptik.cvtteo] [UnclassifiedMalware] [BackDoor.Slym.13304] [TR/Crypt.EPACK.53967] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/FakeAv.BWUN!tr] [Crypt_s.GCT] [Trojan.Win32.InfoStealer.AZ] [Win32/Trojan.65e]
1f41424394903f13a637ae4471917611	[HW32.CDB.F02a] [Trojan.Win32.Yakes.fdqn] [VirTool:Win32/Obfuscator.WT] [SScope.Malware-Cryptor.Hlux] [Win32/Cryptor] [Trojan.Win32.Yakes.AtKd]

Whois

Property	Value
Name	Domains Administrator
Organization	Sprint Communications Company L.P.
Email	domain_management@sprint.com
Address	6130 Sprint Parkway
Zip Code	66251
City	Overland Park
State	KS
Country	US
Phone	+1.8665052385
Fax	+1.8773880408
NameServer	sprintmailns2.earthlink.net
Created	1996-04-04 05:00:00
Changed	2015-04-01 06:12:28
Expires	2016-04-05 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2013-03-16	209.86.93.134 (ClassC)
2013-05-05	209.86.93.131 (ClassC)
2013-07-06	209.86.60.21 (ClassC)
2013-07-21	209.86.93.126 (ClassC)
2013-07-25	209.86.60.20 (ClassC)
2013-08-27	209.86.93.136 (ClassC)
2013-10-09	209.86.93.126 (ClassC)
2013-10-09	209.86.93.136 (ClassC)
2013-10-09	209.86.93.131 (ClassC)
2013-10-09	209.86.93.134 (ClassC)
2013-10-09	209.86.93.129 (ClassC)
2013-10-09	209.86.93.127 (ClassC)
2013-10-09	209.86.93.129 (ClassC)
2013-10-09	209.86.93.132 (ClassC)
2013-10-09	209.86.93.135 (ClassC)
2013-10-09	209.86.93.130 (ClassC)
2013-10-09	209.86.93.133 (ClassC)
2013-10-09	209.86.93.128 (ClassC)
2013-10-12	209.86.93.133 (ClassC)
2013-10-15	209.86.93.127 (ClassC)
2013-11-02	209.86.93.130 (ClassC)
2014-09-15	209.86.93.128 (ClassC)
2014-09-20	209.86.93.135 (ClassC)
2024-05-18	52.147.208.244 (ClassC)
2025-09-01	104.18.34.195 (ClassC)
2026-01-04	172.64.153.61 (ClassC)

Port 80

Subdomains

Date	Domain	IP
pop.a001.sprintmail.com	2025-11-25	52.142.28.127
smtp.a001.sprintmail.com	2025-11-12	52.142.28.127
mail.sprintmail.com	2025-11-25	24.41.66.181

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]