Domain > et.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to et.com

MD5	A/V
1623be5a046aa215162665c5067332e0	[HW32.CDB.Db63] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [Trojan-PSW.Win32.Tepfer.tybm] [Trojan.PWS.Tepfer!sA6n+JUlMF8] [UnclassifiedMalware] [Trojan.Packed.26581] [Backdoor:Win32/Kelihos.F] [W32/Trojan.YSDP-3009] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Trojan.Win32.InfoStealer.aRBP]
0d42b2efd88f95f4d5af60b548d7290a	[FraudTool.Security] [W32/Tepfer.MQ!tr] [Win32/Cryptor]
1929530a1f2d6d48a87aac928220e460	[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]

Whois

Property	Value
NameServer	SELL.INTERNETTRAFFIC.COM
Created	1997-05-20 00:00:00
Changed	2015-06-20 00:00:00
Expires	2019-05-21 00:00:00
Registrar	FABULOUS.COM PTY LTD

DNS Resolutions

Date	IP Address
2013-04-18	75.101.142.70 (ClassC)
2014-05-30	23.23.139.88 (ClassC)
2014-06-04	23.23.139.104 (ClassC)
2014-06-17	23.23.130.80 (ClassC)
2014-07-07	23.23.130.80 (ClassC)
2014-07-09	54.225.221.145 (ClassC)
2014-08-04	23.21.46.212 (ClassC)
2014-08-04	54.243.198.214 (ClassC)
2014-09-01	54.225.87.165 (ClassC)
2014-10-14	23.23.140.162 (ClassC)
2015-01-16	54.243.37.86 (ClassC)
2015-01-16	23.23.116.118 (ClassC)
2015-02-28	54.225.167.121 (ClassC)
2015-02-28	54.243.32.25 (ClassC)
2015-04-23	107.20.201.15 (ClassC)
2015-06-16	54.243.100.199 (ClassC)
2019-04-14	54.69.135.78 (ClassC)
2019-10-05	52.35.148.14 (ClassC)
2019-12-24	54.203.202.29 (ClassC)
2020-05-12	54.191.245.127 (ClassC)
2021-06-02	35.167.157.238 (ClassC)
2023-05-09	52.38.27.211 (ClassC)
2024-01-12	44.227.33.110 (ClassC)
2024-02-14	52.39.188.154 (ClassC)
2024-02-22	52.35.36.75 (ClassC)
2024-02-27	54.189.95.101 (ClassC)
2024-03-20	54.190.145.48 (ClassC)
2024-03-24	44.232.40.223 (ClassC)
2024-05-10	34.214.147.209 (ClassC)
2024-05-15	44.238.86.136 (ClassC)
2024-06-10	54.188.137.222 (ClassC)
2024-07-21	44.239.175.47 (ClassC)
2024-08-04	52.26.216.69 (ClassC)
2024-09-13	54.148.233.127 (ClassC)
2024-09-30	54.203.126.23 (ClassC)
2024-10-16	52.27.150.219 (ClassC)
2024-11-15	44.228.136.39 (ClassC)
2024-12-10	54.189.70.68 (ClassC)
2024-12-15	44.237.42.73 (ClassC)
2025-01-11	52.42.217.3 (ClassC)
2025-01-15	34.209.42.248 (ClassC)
2025-01-19	52.88.2.188 (ClassC)
2025-02-03	44.240.234.85 (ClassC)
2025-02-14	44.232.184.111 (ClassC)
2025-02-20	35.162.130.184 (ClassC)
2025-02-23	44.238.180.223 (ClassC)
2025-03-04	44.233.25.242 (ClassC)
2025-03-25	34.211.36.164 (ClassC)
2025-04-08	34.208.160.138 (ClassC)
2025-04-17	52.88.144.225 (ClassC)
2025-04-21	34.215.19.114 (ClassC)
2025-04-24	54.191.79.244 (ClassC)
2025-04-28	52.32.133.11 (ClassC)

Port 80

Subdomains

Date	Domain	IP
mediassistinda.et.com	2014-11-28	23.23.140.162
nl.et.com	2013-05-22	75.101.142.70
jigsawplan.et.com	2019-04-10	34.215.84.25
in.et.com	2014-05-29	23.23.139.104
nullmx.in.et.com	2014-05-29	209.181.247.105
soccer.et.com	2014-11-12	23.23.140.162
nae.gov.et.com	2014-10-12	23.23.140.162
www.nae.gov.et.com	2014-04-02	54.243.101.101
www.noe.gov.et.com	2014-10-12	23.23.140.162
ert.gov.et.com	2015-04-01	54.225.167.121
www.ert.gov.et.com	2014-03-12	184.73.213.106
www.et.com	2014-04-03	23.21.52.152
nullmx.et.com	2014-06-17	209.181.247.105

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]