Domain > uswest.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to uswest.com

MD5	A/V
5e5f2ba73005a54ea71e591feff2b1d7	[Artemis!5E5F2BA73005] [Trojan.Win32.Jorik.Cutwail.pgy]
e617a69e7185cd299d75c87c401e0fda	[SHeur4.BKZA] [TrojanDownloader*Win32/Cutwail.BS]
180ca5d4cc13a8e8aee4156b2ee389c5
3b54013dbac240d454b929a3745a46e4	[Artemis!3B54013DBAC2] [WS.Reputation.1] [HB_Pushdo-1] [Trojan.Win32.Jorik.Cutwail.ppt] [UnclassifiedMalware] [BackDoor.Bulknet.958] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ]
2ba1c7eb19cc61d8cfb858e81b613787	[Crypt2.BVGD] [RDN/Downloader.a!nu] [TrojanDownloader*Win32/Cutwail.BS]
d3be3c4282a9d5158080d8023e5f2efa	[TrojanRansom.Foreign.cyzc] [Fake-Rena-FNQ!D3BE3C4282A9] [Trojan.Inject.RRE] [Trojan] [WS.Reputation.1] [TROJ_RANSOM.FCN] [Trojan-Ransom.Win32.Foreign.cyzc] [UnclassifiedMalware] [Trojan.PWS.Panda.547] [TR/Ransom.Foreign.cyzc] [Win32.Troj.Undef.(kcloud)] [VirTool:Win32/Injector] [Trojan/Win32.Foreign] [W32/Trojan.CVXL-5426] [Virus.Win32.Cryptor] [W32/Injector.ZVR!tr] [Win32/Cryptor] [Trj/Dtcontx.E]
e5b85688fcbb1c799ee2e233fb531297	[TrojanDownloader.Cutwail] [RDN/Downloader.a!mv] [Trojan.Inject.RRE] [Riskware] [W32.Pilleuz] [Win32/Cutwail.CGbKVWC] [BKDR_PUSHDO.FT] [Backdoor.Win32.Pushdo.qnv] [Backdoor.Pushdo!XnUVfC93BRo] [UnclassifiedMalware] [BackDoor.Bulknet.958] [BDS/Pushdo.qnv] [Backdoor/Pushdo.aew] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [W32/Backdoor.YDLC-0133] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.YOY!tr]
ea21595001334cf75d1f82adadaefb20
8a81337b6ec2ac603454237cba5ae8e4	[Cutwail-FCJX!8A81337B6EC2]
c12a0f14324014f4c4d5d070ddc33d33
e57d3b285148fa02129b9c0044aa8737	[HB_Pushdo-1] [Dropper/Win32.Vidro] [W32/Pushdo.YOY!tr]
ea5a2c72517c76e822324540ec9f1f7a	[TrojanDownloader.Cutwail] [Trojan/Wigon.ph] [Riskware] [Trojan.Win32.XPACK.bgffjt] [W32.Pilleuz] [TROJ_WIGON.AW] [UnclassifiedMalware] [BackDoor.Bulknet.739] [Heuristic.BehavesLike.Win32.Suspicious.D] [Troj/WIGON-A] [TrojanDownloader:Win32/Cutwail.BW] [W32/Trojan.JDWF-4093] [Dropper/Win32.Dorifel] [Malware.Pilleuz!rem] [Win32/Wigon.PH] [Trojan.SuspectCRC] [W32/Wigon.PH] [SHeur4.AZVH]
526d28005ca16009f4c37f6319d6bfa3	[Trojan/W32.Jorik.46592.DO] [Trojan] [Trojan/Kryptik.bfdk] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qme] [Backdoor.Pushdo!ksoXPDwu2Y4] [UnclassifiedMalware] [BackDoor.Bulknet.958] [VirTool:Win32/Obfuscator.AHU] [Backdoor/Win32.Pushdo] [Trojan.Jorik.Cutwail] [Backdoor.Win32.Pushdo] [W32/Pushdo.YOY!tr] [SHeur4.BMTZ] [Trj/CI.A]
e4fac37c735dcccfffd80373bcf31985
b3a2add36f28dad15b6901eca370af87	[W32/Trojan.ROYM-5986] [TrojanDownloader.Cutwail.r4] [BackDoor.Bulknet.958] [Win32/Kryptik.BECW] [W32/KRYPTK.SMO2!tr] [Win32/Heur] [Trojan.Crypt] [Trojan.Win32.Cutwail.epf] [RDN/Downloader.a!th] [TrojanDownloader*Win32/Cutwail.BS] [TROJ_KRYPTK.SMO2] [BScope.Trojan.Pushdo]
134820f2642ecd70da1e252bc6b94d36
e0e8972687ca2f88b36c21bef2781070
b4252cc54a81b00ccdf1d01523d28209	[Artemis!B4252CC54A81] [Trojan.Inject] [Trojan.Dropper] [Backdoor.Win32.Pushdo.qgg] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Win32.Pushdo] [W32/Pushdo.PYD!tr.bdr] [Trj/Dtcontx.E]
a1c6f433289e28861c8876b0c161afee
2f80660b47db546c6907edd95868b901	[Backdoor.Pushdo] [Heuristic.BehavesLike.Win32.Suspicious-BAY.G] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo]

Whois

Property	Value
Name	Qwest Communications International Inc
Organization	Qwest Communications International Inc
Email	domains@centurylink.com
Address	1801 California Street
Zip Code	80202
City	Denver
State	CO
Country	US
Phone	+1.8887780053
Fax	+1.3033836755
NameServer	authns2.qwest.net
Created	1988-11-03 05:00:00
Changed	2015-08-26 14:48:49
Expires	2015-11-02 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2013-06-19	155.70.40.252 (ClassC)
2014-11-21	155.70.41.27 (ClassC)
2015-01-06	155.70.41.27 (ClassC)
2016-07-30	155.70.44.163 (ClassC)
2024-12-30	155.70.44.175 (ClassC)

Port 80

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]