Domain > cluster.relay.agava.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to cluster.relay.agava.net

MD5	A/V
14a2291e48bd02b528d0c018fee03e86	[HW32.CDB.A3eb] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [Trojan.Packed.26581] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.XULT-7356] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.CBCJ!tr] [Crypt_s.GNC]

Whois

Property	Value
Email	domains@agava.com
NameServer	NS2.AGAVA.NET.RU
Created	2000-12-23 00:00:00
Changed	2014-12-03 00:00:00
Expires	2015-12-23 00:00:00
Registrar	REGIONAL NETWORK INF

DNS Resolutions

Date	IP Address
2014-06-18	89.108.67.9 (ClassC)
2025-10-01	31.31.194.241 (ClassC)
2026-02-07	31.31.194.240 (ClassC)

Subdomains

Date	Domain	IP
cp400.agava.net	2025-12-22	80.78.250.5
cp410.agava.net	2025-12-12	80.78.250.17
cp411.agava.net	2025-12-24	80.78.250.18
cp431.agava.net	2025-12-12	80.78.250.138
cp422.agava.net	2025-12-24	80.78.250.64
ns2.agava.net	2024-12-29	194.58.117.12
cp423.agava.net	2025-12-24	80.78.250.67
cp415.agava.net	2026-02-07	80.78.250.23
cp116.agava.net	2013-08-06	89.108.67.139
cp416.agava.net	2025-12-12	80.78.250.24
cp437.agava.net	2025-12-12	80.78.250.175
cp408.agava.net	2025-12-12	80.78.250.15
cp418.agava.net	2026-02-07	80.78.250.26
cp409.agava.net	2025-12-12	80.78.250.16
cp419.agava.net	2025-12-12	80.78.250.28
isp002.vh.agava.net	2025-12-23	80.78.250.21
ns2.d9139.col.agava.net	2025-06-13	89.108.74.136
u10299.col.agava.net	2025-08-09	89.108.124.24
vm10060.vps.agava.net	2025-08-27	89.108.71.148
vm10834.vps.agava.net	2025-10-12	89.108.79.25
606.vps.agava.net	2025-12-24	89.108.70.121
ns2.606.vps.agava.net	2025-12-24	89.108.70.121
vm606.vps.agava.net	2026-02-04	89.108.70.121
cluster.relay.agava.net	2014-06-18	89.108.67.9

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]