Help RSS API Feed Maltego Contact                        

Domain > 1642076374.mail.exchangelabs.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to 1642076374.mail.exchangelabs.com
MD5A/V
8889d486a91b3448e8b429ef99a536d0[HW32.CDB.1cb9] [Trojan.Win32.Kryptik.cwzoai] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnla] [Backdoor.Hlux!yM05ScK42o0] [Trojan.Packed.26544] [Mal/FakeAV-UF] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Backdoor.Win32.Kelihos] [W32/Hlux.DNLA!tr.bdr] [Crypt_s.GMK] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]

Whois
PropertyValue
Email domains@microsoft.com
NameServer NS1A.O365FILTERING.COM
Created 2005-10-09 00:00:00
Changed 2015-03-24 00:00:00
Expires 2015-10-09 00:00:00
Registrar MARKMONITOR INC.

DNS Resolutions
DateIP Address
2014-05-30207.46.163.138 (ClassC)
2015-01-29207.46.163.170 (ClassC)
2024-08-2452.101.41.21 (ClassC)
2024-09-1052.101.41.6 (ClassC)
2024-12-2952.101.194.0 (ClassC)
2025-01-1652.101.9.12 (ClassC)
2025-05-0252.101.41.28 (ClassC)
2025-05-2252.101.9.26 (ClassC)
2025-06-1952.101.194.19 (ClassC)
2025-06-3052.101.8.32 (ClassC)
2025-07-0552.101.40.6 (ClassC)
2025-07-1052.101.8.42 (ClassC)
2025-07-1352.101.194.4 (ClassC)
2025-07-1952.101.41.4 (ClassC)
2025-07-2252.101.41.26 (ClassC)

Subdomains
DateDomainIP
provisioning.exchangelabs.com2024-11-2952.96.229.242
615834450.mail.exchangelabs.com2014-07-13207.46.163.247
1093147560.mail.exchangelabs.com2024-08-0652.101.194.0
1637324190.mail.exchangelabs.com2014-06-18213.199.154.23
52253601.mail.exchangelabs.com2015-01-29207.46.163.170
1737923552.mail.exchangelabs.com2024-05-1852.101.68.0
1089914972.mail.exchangelabs.com2015-01-29207.46.163.170
1851571482.mail.exchangelabs.com2014-08-01207.46.163.170
539873592.mail.exchangelabs.com2025-02-2852.101.42.10
1642076374.mail.exchangelabs.com2014-05-30207.46.163.138
211619107.mail.exchangelabs.com2013-05-1665.55.88.22
2089224977.mail.exchangelabs.com2024-09-1152.101.41.4
640425009.mail.exchangelabs.com2015-01-29207.46.163.170
1092176239.mail.exchangelabs.com2014-07-13207.46.163.215
793737669.mail.exchangelabs.com2025-01-1352.101.11.3
imap.mail.exchangelabs.com2024-10-1152.101.8.46
m.exchangelabs.com2024-10-1152.96.165.18
imap-ap.exchangelabs.com2023-08-3152.98.38.82
pop-ap.exchangelabs.com2024-10-1152.98.94.194
smtp-ap.exchangelabs.com2024-05-1452.98.38.82
pod51000ip.exchangelabs.com2025-01-0340.97.220.34
pod51002ip.exchangelabs.com2024-10-1152.98.229.194
smtp.exchangelabs.com2024-11-1552.96.8.130
autodiscover.exchangelabs.com2024-08-0952.96.166.40
imap-eu.exchangelabs.com2023-09-2952.98.230.34
pop-eu.exchangelabs.com2024-10-11157.56.250.38
smtp-eu.exchangelabs.com2024-08-0952.98.229.242
www.exchangelabs.com2025-05-2265.55.94.89
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information