Domain > denlair.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to denlair.com

MD5	A/V
709622547c3e4b44144047282940995b	[HW32.CDB.9120] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!iLXsQOxcJ2A] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dprt] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.AP]

Whois

Property	Value
Email	3c3b5c6da04635770760f3774473c06bd28238ab@privatedomain.gkg.net
NameServer	NS-1951.AWSDNS-51.CO.UK
Created	2007-11-11 00:00:00
Changed	2014-11-12 00:00:00
Expires	2015-11-11 00:00:00
Registrar	GKG.NET, INC.

DNS Resolutions

Date	IP Address
2014-05-24	216.239.34.21 (ClassC)
2015-05-27	216.239.36.21 (ClassC)
2019-08-12	13.249.122.121 (ClassC)
2019-08-12	13.249.122.124 (ClassC)
2019-08-13	13.249.109.92 (ClassC)
2019-08-22	13.249.22.65 (ClassC)
2019-08-22	13.249.22.93 (ClassC)
2019-08-22	13.249.55.57 (ClassC)
2019-08-23	13.249.44.79 (ClassC)
2019-08-23	99.86.66.48 (ClassC)
2019-08-23	99.86.66.99 (ClassC)
2019-08-28	99.86.230.103 (ClassC)
2019-08-28	13.249.55.6 (ClassC)
2019-08-29	99.86.77.44 (ClassC)
2019-08-29	99.86.77.8 (ClassC)
2019-08-31	99.84.216.72 (ClassC)
2019-09-13	99.84.216.28 (ClassC)
2019-09-14	13.249.109.69 (ClassC)
2019-09-17	99.86.77.115 (ClassC)
2019-09-18	13.249.22.98 (ClassC)
2019-09-19	54.230.195.191 (ClassC)
2019-10-19	13.226.42.105 (ClassC)
2019-10-19	13.226.42.33 (ClassC)
2019-10-22	13.35.115.21 (ClassC)
2019-10-22	13.35.115.51 (ClassC)
2019-10-25	52.85.34.173 (ClassC)
2019-11-05	54.230.193.186 (ClassC)
2019-11-09	52.85.135.162 (ClassC)
2019-11-09	52.85.135.208 (ClassC)
2019-11-09	52.85.135.4 (ClassC)
2019-11-17	99.84.101.109 (ClassC)
2019-11-17	99.84.101.89 (ClassC)
2019-11-21	54.239.152.218 (ClassC)
2019-11-21	54.239.152.219 (ClassC)
2020-04-14	13.249.127.19 (ClassC)
2020-05-16	54.230.29.126 (ClassC)
2020-06-17	13.249.120.83 (ClassC)
2020-06-17	13.249.120.85 (ClassC)
2020-06-17	13.249.120.92 (ClassC)
2020-07-25	13.249.39.10 (ClassC)
2020-07-25	13.249.39.100 (ClassC)
2020-07-25	13.249.39.64 (ClassC)
2020-07-25	13.249.39.89 (ClassC)
2020-08-01	13.249.40.124 (ClassC)
2020-08-01	13.249.40.125 (ClassC)
2020-08-01	13.249.40.106 (ClassC)
2020-08-17	143.204.151.97 (ClassC)
2020-08-17	143.204.151.19 (ClassC)
2020-08-17	143.204.151.32 (ClassC)
2020-08-23	143.204.150.76 (ClassC)
2020-08-23	143.204.150.86 (ClassC)
2020-08-23	143.204.150.30 (ClassC)
2020-08-28	13.33.163.98 (ClassC)
2020-08-29	13.226.52.56 (ClassC)
2020-08-29	13.226.52.81 (ClassC)
2020-08-29	13.226.52.33 (ClassC)
2020-09-03	13.226.45.71 (ClassC)
2020-09-03	13.226.45.53 (ClassC)
2020-09-10	13.225.207.97 (ClassC)
2020-09-25	13.226.25.11 (ClassC)
2020-09-25	13.226.25.95 (ClassC)
2020-10-04	99.86.81.52 (ClassC)
2020-10-04	99.86.81.118 (ClassC)
2020-10-04	99.86.81.32 (ClassC)
2020-10-15	13.226.49.106 (ClassC)
2020-10-15	13.226.49.18 (ClassC)
2020-10-15	13.226.49.60 (ClassC)
2020-11-07	99.84.110.13 (ClassC)
2020-11-07	99.84.110.14 (ClassC)
2020-11-07	99.84.110.76 (ClassC)
2020-11-09	13.249.43.77 (ClassC)
2020-11-09	13.249.43.84 (ClassC)
2020-11-09	13.249.43.10 (ClassC)
2020-11-09	13.249.43.128 (ClassC)
2021-01-16	13.225.25.2 (ClassC)
2021-01-18	52.85.86.115 (ClassC)
2021-01-18	52.85.86.18 (ClassC)
2021-01-19	99.84.105.87 (ClassC)
2021-01-19	99.84.105.112 (ClassC)
2021-01-23	54.239.152.71 (ClassC)
2021-04-25	13.249.64.24 (ClassC)
2021-06-16	13.226.188.66 (ClassC)
2021-06-24	54.230.15.120 (ClassC)
2022-04-18	54.230.31.25 (ClassC)
2024-06-06	204.246.191.66 (ClassC)
2024-10-19	18.161.6.42 (ClassC)
2024-11-30	18.65.229.34 (ClassC)
2024-12-23	18.161.6.46 (ClassC)
2025-02-27	18.65.229.21 (ClassC)
2025-03-27	18.161.6.25 (ClassC)
2025-04-04	18.161.6.104 (ClassC)
2025-06-05	3.175.34.9 (ClassC)
2025-06-26	3.175.34.122 (ClassC)
2025-07-04	3.175.34.11 (ClassC)
2025-07-12	3.175.34.121 (ClassC)
2025-08-28	104.21.67.64 (ClassC)
2026-01-08	172.67.215.114 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
www.denlair.com	2024-06-08	18.161.6.42

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]