Domain > www.ietf.org

Welcome! Right click nodes and scroll the mouse to navigate the graph.

More information on this domain is in AlienVault OTX

Files that talk to www.ietf.org

MD5	A/V
84d3511b48d99e6f477209de908301f0	[Suspicious.Cloud] [BehavesLike.Win32.Downloader.gh]
4467d9d31c170334b0e8efd76b83c561
80ce29be055417037832ed21ebbc952f	[BehavesLike.Win32.PWSZbot.gm]
429661435a8d35be084c69eb6874d8bb	[Win32.Trojan.WisdomEyes.151026.9950.9998] [W32/Heuristic-300!Eldorado] [Suspect.DoubleExtension-zippwd-15] [Heur.Dual.Extensions] [HEUR_NAMETRICK.A] [BehavesLike.PWSZbot.dc] [W32/Heuristic-300!Eldorado] [FakeAlert]
9b5900a4c36d30f159f8cb690f4bf710	[Troj.Crypt.Zpack!c] [Win32.Trojan.WisdomEyes.151026.9950.9998] [BehavesLike.Win32.PWSZbot.fm] [Win32/PSW.Papras.EH] [Win32/Trojan.db2]
6bf425c393c5ff9f503e707eb64e3b61
04432b5384da554c4e0b3bc96cf3c8e4	[Spyware.Ursnif] [Trojan.Win32.DownLoader19.eazgoz] [Win32/PSW.Papras.EH] [TROJ_DYER.BME] [Trojan.Win32.Waldek.gof] [Trojan.DownLoader19.53520] [TROJ_DYER.BME] [BehavesLike.Win32.PackedAP.gm] [W32/PWS.VRJL-0756] [TR/AD.UrsnifDropper.Y.155] [Trojan/Win32.Waldek] [Trojan:Win32/Dynamer!ac] [Troj.W32.Waldek!c] [Trojan/Win32.Waldek] [Trj/CI.A] [Win32.Trojan.Inject.Auto] [Trojan.Inject] [W32/Kryptik.EQMA!tr]
a966c13b9a56f54c2794715ceadfbe22
bdd4248e2bb65c9d0237e8793fae5429	[Trojan/W32.Waldek.423527] [Spyware.Ursnif] [Trojan.Papras.Win32.5071] [Win32.Trojan.WisdomEyes.151026.9950.9992] [Heur.AdvML.C] [Win32/PSW.Papras.EH] [TSPY_PAPRAS_FD120162.UVPA] [Trojan.Win32.Papras.eaweaj] [Trojan.Win32.Ransom.423527[h]] [Mal/Ransom-EG] [Trojan.PWS.Papras.1990] [BehavesLike.Win32.Ransom.gh] [Trojan.Waldek.ayf] [TR/Crypt.ZPACK.234290] [Trojan/Win32.Waldek] [TrojanSpy:Win32/Ursnif!rfn] [Trojan.Waldek] [Win32.Trojan.Waldek.Pkgy] [Trojan.PWS.Papras!68HpLmd69vU] [Trojan.Win32.PSW] [W32/Kryptik.EQMA!tr] [Trj/CI.A]
7b157ae5c662b5eb1f9a0a40a254aa5a
8227bd4c63c4bd97ade5a1d7570d1371	[HW32.Packed.533E] [virtool.win32.injector.eg] [Win32.Trojan.WisdomEyes.16070401.9500.9933] [Heur.AdvML.B]
a5815e12574f83daaa1751bf78db0645
ab896148075dce9a596f5249648ee62f
e5a59239179ac486898acbf962b9bd1f
85b579591c02ae12e2412371d04462ec	[Backdoor/W32.Androm.721408] [Backdoor.Androm] [Trojan.MalPack] [Win32.Trojan.WisdomEyes.16070401.9500.9994] [W32/Trojan.MJDA-4866] [Backdoor.Win32.Androm.lhsw] [Trojan.Win32.Androm.eiicip] [Mal/Cerber-K] [Trojan.PWS.Papras.2451] [trojandropper.win32.rovnix.p] [BehavesLike.Win32.PWSZbot.bc] [TR/Crypt.ZPACK.cdzpy] [Trojan[Backdoor]/Win32.Androm] [TrojanSpy:Win32/Ursnif!rfn] [Backdoor.W32.Androm!c] [Backdoor/Win32.Androm.C1659055] [Win32.Backdoor.Androm.Ebqr] [Backdoor.Androm!nFjVdWBhmH0] [Trojan.Win32.Crypt] [W32/Kryptik.FIZG!tr]
b854fda817238f949dc5e4070c06df70
0a5fac5e7053f0b849e207e9dd532192	[Artemis!0A5FAC5E7053] [Spyware.Ursnif] [Troj.Ad.Ursnifdropper!c] [Win32.Trojan.Cerber.i] [Backdoor.Win32.Androm.lvgn] [Trojan.PWS.Papras.2451] [trojan.win32.skeeyah.a!rfn] [BehavesLike.Win32.Ransomware.bc] [TR/AD.UrsnifDropper.ognmr] [Trojan.Razy.D1B392] [W32/Kryptik.FJWV!tr] [Atros4.BDQV]
9681ae70d8bbfb90d7d70e7efde56492	[HW32.Packed.CCB0] [Trojan.MalPack] [Win32.Trojan.WisdomEyes.16070401.9500.9998] [Heur.AdvML.B] [Trojan.PWS.Papras.2451] [trojandropper.win32.rovnix.p] [BehavesLike.Win32.PackedAP.bc] [Trojan[Backdoor]/Win32.Androm]
4d5ac427aeb6af6c2f83c474e63c782c	[HW32.Packed.533E] [Backdoor.Androm] [Trojan.Ursnif] [virus.win32.sality.at] [Win32.Trojan.WisdomEyes.16070401.9500.9973] [Heur.AdvML.B] [Win32/PSW.Papras.EH] [Trojan.PWS.Papras.2451] [W32/Trojan.CNUF-4369] [TR/Crypt.ZPACK.hucqe] [Trojan[Backdoor]/Win32.Androm] [TrojanSpy:Win32/Skeeyah.A!rfn] [Backdoor.Androm!b4cxWiRil7s] [W32/Kryptik.FJFI!tr] [Atros4.APPL]

DNS Resolutions

Date	IP Address
2013-04-01	64.170.98.30 (ClassC)
2013-10-17	12.22.58.30 (ClassC)
2013-11-19	4.31.198.44 (ClassC)
2014-06-24	108.162.197.49 (ClassC)
2019-09-07	104.20.1.85 (ClassC)
2020-05-12	104.20.0.85 (ClassC)
2020-07-13	172.67.33.249 (ClassC)
2020-07-13	104.20.110.6 (ClassC)
2020-07-13	104.20.111.6 (ClassC)
2025-03-26	104.16.44.99 (ClassC)
2025-04-03	104.16.45.99 (ClassC)

Port 443

HTTP/1.1 200 OKDate: Fri, 07 Jun 2019 19:02:44 GMTContent-Type: text/html; charsetutf-8Transfer-Encoding: chunkedConnection: keep-aliveSet-Cookie: __cfduidd0a4ae885de0d4fca7e3b4002d8c146951559934164;

!DOCTYPE html>!--if lt IE 7>      html langen classno-js lt-ie9 lt-ie8 lt-ie7> !endif-->!--if IE 7>         html langen classno-js lt-ie9 lt-ie8> !endif-->!--if IE 8>         html langen classno-js lt-ie9> !endif-->!--if gt IE 8>!--> html langen classno-js> !--!endif-->    head>        meta charsetutf-8 />        meta http-equivX-UA-Compatible contentIEedge />        title>IETF  | Internet Engineering Task Force/title>                meta nameviewport contentwidthdevice-width, initial-scale1 />        !-- Twitter summary card - see https://dev.twitter.com/cards/types/summary -->        !--  and https://dev.twitter.com/cards/getting-started -->        meta nametwitter:card contentsummary />        meta nametwitter:site content@ietf />        meta nametwitter:title contentHome />        meta nametwitter:description content>        meta nametwitter:image contenthttp://www7.ietf.org/media/images/ietflogotrans.original.png>        !--facebook opengraph tags-->        meta propertyfb:app_id content159756941186350 />        meta propertyog:type contentwebsite />        meta propertyog:url content/ />        meta propertyog:title contentHome />        meta propertyog:image contenthttp://www7.ietf.org/media/images/ietflogotrans.original.png />        meta propertyog:description content />        meta propertyog:site_name contentIETF />                link relstylesheet href/static/CACHE/css/40726c5cae5e.css typetext/css />                script>            document.write(link relstylesheet href/static/CACHE/css/88c25d56d4bd.css typetext/css />);        /script>                script src/static/js/vendor/modernizr-2.6.2.min.42306a279a9e.js>/script>    /head>    body classtemplate-home-page>                header idshow-search>    div classnav-search-top>        form action/search/ methodget namesearch>            label fornav-search styledisplay: none;>Search/label>            input idnav-search aria-labelSearch namequery typetext placeholderSearch required>            button class typesubmit>Go/button>        /form>    /d

Subdomains

Date	Domain	IP
mailarchive.ietf.org	2025-03-17	104.16.45.99
ftp.ietf.org	2024-05-14	50.223.129.194
datatracker.ietf.org	2013-07-01	12.22.58.31
www.ietf.org	2014-06-24	108.162.197.49

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > www.ietf.org

Is this malicious?

Files that talk to www.ietf.org

DNS Resolutions

Port 80

Port 443

Subdomains