Domain > tripodnet1908.hdfree.in

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to tripodnet1908.hdfree.in

MD5	A/V
46319710b2d7fdafafed91f338ed775e	[TR/Zusy.9881605548] [Win.Trojan.Netmail] [Trojan.DownLoader4.61273] [Win32/Spy.Banker.WGA] [W32/NetMail.A!tr.bdr] [PSW.Banker6.CIJ] [Backdoor.Win32.NetMail.a] [Backdoor.NetMail]
7a62ea4d31ff39f1546b6a661114e83c	[TR/Zusy.9881605548] [PSW.Banker6.CIJ] [Win.Trojan.Netmail]
2e705aef5f6d421870c1ef9dec068053	[TR/Zusy.9881605548] [Backdoor.NetMail.r8] [Win.Trojan.Netmail] [Trojan.DownLoader4.61273] [Win32/Spy.Banker.WGA] [W32/NetMail.A!tr.bdr] [PSW.Banker6.CIJ] [Backdoor.Win32.NetMail.a] [Backdoor.NetMail]
05f35f44dc934651f069ac8fc33eb9c4	[PSW.Banker6.CIJ] [BDS/NetMail.a] [Win.Trojan.Netmail]
666e4936ac20b0d839c0164c0795d485	[TR/Zusy.9881605548] [PSW.Banker6.CIJ] [Win.Trojan.Netmail]
7aaf7970772400ce4c5e9c2259284653	[PSW.Banker6.CIJ] [BDS/NetMail.a.1] [Win.Trojan.Netmail]
7f0ca9e06a71820c52b0de6dbbf3139d	[TR/Zusy.9881605548] [PSW.Banker6.CIJ] [Win.Trojan.Netmail]
a8bee28483c1df131d4eca1ca8dd19e5	[TR/Zusy.9881605548] [Backdoor.NetMail.r8] [Win.Trojan.Netmail] [Trojan.DownLoader4.61273] [Win32/Spy.Banker.WGA] [W32/NetMail.A!tr.bdr] [PSW.Banker6.CIJ] [Backdoor.Win32.NetMail.a] [Trojan*Win32/Dynamer!ac] [Backdoor.NetMail]

Whois

Property	Value
Name	DNS Manager
Organization	Profile Group
Email	admin@profile-group.net
Address	PMB # 365, 2711 Centerville Road, Suite 300
Zip Code	19808-1645
City	Wilmington
State	DE
Country	US
Phone	+1.4252740657
Fax	+1.4252740657
NameServer	dns2.name-services.com
Created	2009-03-26 20:59:01
Changed	2015-03-26 22:30:39
Expires	2016-03-26 20:59:01
Registrar	Enom Inc. (R46-AFIN)

DNS Resolutions

Date	IP Address
2014-11-19	64.74.223.42 (ClassC)
2014-12-03	64.74.223.42 (ClassC)
2020-11-30	103.224.212.219 (ClassC)
2022-05-17	162.210.196.168 (ClassC)
2022-09-26	37.48.65.152 (ClassC)
2022-09-26	81.171.22.6 (ClassC)
2022-12-06	199.115.115.119 (ClassC)
2022-12-08	37.48.65.153 (ClassC)
2022-12-12	207.244.67.215 (ClassC)
2022-12-13	81.171.22.4 (ClassC)
2022-12-14	162.210.196.166 (ClassC)
2022-12-17	37.48.65.151 (ClassC)
2022-12-20	162.210.196.167 (ClassC)
2022-12-31	37.48.65.155 (ClassC)
2023-01-02	81.171.22.7 (ClassC)
2023-01-02	199.115.115.102 (ClassC)
2023-01-07	199.115.115.118 (ClassC)
2023-01-11	37.48.65.149 (ClassC)
2023-01-11	172.93.103.101 (ClassC)
2023-01-13	199.115.116.216 (ClassC)
2023-01-18	172.93.103.102 (ClassC)
2023-01-20	199.115.115.116 (ClassC)
2023-01-22	63.143.32.93 (ClassC)
2023-01-26	37.48.65.150 (ClassC)
2023-01-29	37.48.65.148 (ClassC)
2023-02-08	37.48.65.154 (ClassC)
2023-02-10	81.171.22.5 (ClassC)
2023-05-25	63.143.32.90 (ClassC)
2023-12-04	63.143.32.88 (ClassC)
2024-01-22	63.143.32.83 (ClassC)
2024-02-01	63.143.32.85 (ClassC)
2024-02-03	63.143.32.86 (ClassC)
2024-05-14	207.244.76.129 (ClassC)
2024-07-04	185.107.56.200 (ClassC)
2024-07-24	185.107.56.197 (ClassC)
2025-04-16	185.107.56.198 (ClassC)
2025-04-24	207.244.67.216 (ClassC)
2025-05-18	172.93.103.99 (ClassC)
2025-06-08	185.107.56.199 (ClassC)
2025-06-15	207.244.67.218 (ClassC)
2025-06-23	172.93.103.100 (ClassC)
2025-07-31	207.244.67.214 (ClassC)

Port 443

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]