Domain > webmail.alsultantravel.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to webmail.alsultantravel.com

MD5	A/V
41fb4ab55ec0257e7af7459e48d58687	[PWS-Zbot] [Suspicious.Cloud.5] [Artemis!41FB4AB55EC0] [Trojan/Win32.Zbot] [W32/Trojan.UFOI-1551] [Virus.Win32.Heur.e] [W32/Kryptik.BDPK!tr]
c960035c42e5e6097bd828dad777aad6	[RTF:CVE-2012-0158-BI] [Trojan.Packed.196] [HEUR_RTFMALFORME] [Win32/Exploit.CVE-2012-0158.CR] [Exploit.Win32.CVE-2012-0158.ao] [UnclassifiedMalware] [Troj/RTFExp-BA] [RTF.CVE] [Exploit.CVE-2012-0158.M] [Exploit-CVE2012-0158] [TROJ_MDROP.ZZXX] [Exploit.CVE2012-0158.36] [EXP/CVE-2012-0158.F] [Exploit:Win32/CVE-2012-0158.CJ] [Exploit/Cve-2012-0158] [MSOffice/CVE20120158!exploit] [Exploit/CVE-2012-0158] [TROJ_MDROPPR.KW]
c0b54534e188e1392f28d17faff3d454	[WS.Reputation.1] [W32/Trojan.TAWB-2780] [Artemis!C0B54534E188]
81129764c62417d5b06c73e6fad838a5	[PWS-Zbot] [W32/Trojan3.FQT] [Trojan.Zbot] [Kryptik.CCDD] [TSPY_TEPFER.CEC] [Trojan-PSW.Win32.Tepfer.ongv] [Heur.Packed.Unknown] [Trojan.PWS.Stealer.3128] [Win32.Malware!Drop] [TR/Kryptik.avp.2] [Artemis!81129764C624] [Trojan/Win32.Zbot] [W32/Trojan.IQNG-2725] [W32/Tepfer.ODTU!tr] [PWS-Zbot-FBDT!81129764C624] [Trojan.Packed.196]
4e25ead16a23b4c74646762656ec5306	[PWS-Zbot-FBAS!4E25EAD16A23] [Suspicious.Cloud.5] [Heur.Packed.Unknown] [Trojan.Packed.196] [BackDoor-FBAS!4E25EAD16A23] [Trojan/Win32.Zbot] [W32/Trojan.EHKO-7757] [Trojan-PWS.Win32.Tepfer] [W32/Tepfer.ODTU!tr] [PWS-Zbot] [W32/Trojan3.FQS] [Kryptik.CCDD] [Trojan-PSW.Win32.Tepfer.onhz] [Trojan.PWS.Stealer.3128]
310d24a52db2d8fef082ea405b3a49f9	[PWS-Zbot] [W32/Trojan3.FQZ] [Kryptik.CCDD] [Heur.Packed.Unknown] [Artemis!310D24A52DB2] [Trojan/Win32.Zbot] [W32/Trojan.JRYD-0348] [SScope.Trojan.FakePDF.25707] [W32/Tepfer.ODTU!tr]
f1f97c64869bdf35a815d11701915a39
792b4aa014dc31d5bf179f22be4fb0ab	[PWS-Zbot] [W32/Trojan3.FRD] [Suspicious.Cloud.5] [Artemis!792B4AA014DC] [Win32.HeurC.KVMH004.a.(kcloud)] [Trojan/Win32.Zbot] [W32/Trojan.CSUG-3184] [Virus.Win32.Heur.e] [Trojan-Spy.Zbot] [W32/Kryptik.BDPK!tr] [W32/Trojan3.FRE] [Trojan.Zbot] [Hlux.ZY] [TROJ_MOSERAN.BMC] [Trojan-PSW.Win32.Tepfer.onru] [UnclassifiedMalware] [Trojan.PWS.Stealer.3128] [TR/Kryptik.avp.4] [PWS-Zbot-FBDT!792B4AA014DC] [Troj/Zbot-FVQ] [Trj/CI.A]
e1dbb4be2a7ae2180100a02c5e3e2d95	[Artemis!E1DBB4BE2A7A] [Suspicious.Cloud.5] [Heur.Packed.Unknown] [Trojan.Packed.196] [Trojan/Win32.Zbot] [W32/Tepfer.ODTU!tr] [Win32.HeurC.KVMH004.a.(kcloud)] [W32/Trojan.TKWW-6956]
57725875eec3da73f6211bbb2c9888d0
b8b96c45005a0e57875e354f0a0d3f7a	[PWS-Zbot] [W32/Trojan3.FRA] [Suspicious.Cloud.5] [Kryptik.CCDD] [TSPY_FAREIT.CEE] [Heur.Packed.Unknown] [BackDoor-FBAS!B8B96C45005A] [Trojan/Win32.Zbot] [W32/Trojan.PQOH-6662] [Win32/PSW.Fareit.A] [Trojan-PWS.Win32.Tepfer] [W32/Tepfer.ODTU!tr]
4b76270c6a730ce5f4d1156b4628b831
047dc41b2ee70ff1b70941165310e5da
b023f707c2f9a6f360de948f1a1cb211

Whois

Property	Value
NameServer	NS2.ALSULTANTRAVEL.COM
Created	2013-01-14 00:00:00
Changed	2014-12-20 00:00:00
Expires	2016-01-14 00:00:00
Registrar	NAME.COM, INC.

DNS Resolutions

Date	IP Address
2013-07-30	198.57.130.34 (ClassC)
2025-01-27	62.109.2.172 (ClassC)

Port 80

Subdomains

Date	Domain	IP
ns2.alsultantravel.com	2024-11-07	62.109.2.172
webmail.alsultantravel.com	2013-09-27	198.57.130.34
www.alsultantravel.com	2024-12-03	62.109.2.172

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]