Domain > mail.airmail.net

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mail.airmail.net

MD5	A/V
3dd5efcc8a520c807d40c2ef0e82d155	[TR/Pushdo.C.1] [TrojanDownloader*Win32/Cutwail.BS]
5345aff5ce85c0d99c484f2716071b7a	[Win32.Heur.KVMF58.hy.(kcloud)]
901fd56bd89d217effeca7e998d48b8f	[BC.Heuristic.Trojan.SusPacked.BF-6.A] [Mal/EncPk-ZC] [Heuristic.LooksLike.Win32.SuspiciousPE.J!86] [TrojanDownloader.Upatre.A6] [Downloader-FVD!901FD56BD89D] [Trojan.Downloader] [Trojan.DL.Small!WegiOz7B/54] [W32/Trojan3.GJV] [Trojan.Zbot] [Upatre.X] [TROJ_UPATRE.BU] [Trojan.Win32.DownLoad3.cmcabg] [TrojWare.Win32.Spy.Zbot.ADCX] [TR/Yarwi.B.15] [TrojanDownloader:Win32/Upatre.A] [W32/Trojan.SXFM-2396] [Win32/TrojanDownloader.Small.AAB] [PE:Malware.FakePDF@CV!1.9C28] [Trojan.Injector] [Zbot.DFA] [Trojan.DownLoad3.28]
6edad6fbda6f8bb8ea04d1cb7842ccbe	[TrojanDownloader.Cutwail.bs] [PWSZbot-FFC!6EDAD6FBDA6F] [Riskware] [WS.Reputation.1] [Virus.Win32.Heur.c] [UnclassifiedMalware] [Trj/dtcontx.H] [TrojanDownloader:Win32/Cutwail] [Trojan/Win32.Bublik] [BScope.Malware-Cryptor.Bubblik] [Virus.Win32.Zbot] [W32/Kryptik.BKIT] [Zbot.BOV]
f98670433bdaef14b0af3feeb1c02282	[Virus.Win32.Heur.c] [Artemis!F98670433BDA] [Backdoor.Win32.Pushdo.qye] [Spyware/Win32.Zbot] [Trj/dtcontx.G]
4bc172676c0aa9b911f64a0c02cc43e6
ded55f58a5734b05b67d68a2b99b7e61	[Artemis!DED55F58A573] [Kryptik.CCHF] [TROJ_KRYPTIK.SGQ] [UnclassifiedMalware] [Win32.Malware!Drop] [TrojanDownloader:Win32/Cutwail.BS] [SScope.Malware-Cryptor.Fareit.2813] [Trojan.Crypt2] [W32/Kryptik.BIXX] [Crypt2.AXYM]
da53b7983185de17e67579e2de0231be	[Trojan-Dropper.Win32.Dorifel.aguj] [W32/Injector.ALPQ!tr]
58d7917e004d65a1294bc93814a7cee0
262479b9930264adae53610e09e6cf1c
45aac59ed6234c8d0b2246b1d5a62970	[Artemis!45AAC59ED623] [Spyware.Password] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qyq] [Virus.Win32.Heur.c] [UnclassifiedMalware] [W32/Pushdo.QYQ!tr.bdr]
c58d66135101850883bc5bc5da668fd2	[Backdoor.Pushdo.qyz] [BackDoor-FBGL!C58D66135101] [WS.Reputation.1] [Backdoor.Win32.Pushdo.qyz] [Virus.Win32.Heur.c] [UnclassifiedMalware] [Win32.Hack.Pushdo.q.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Bublik] [BScope.Malware-Cryptor.Bubblik] [Backdoor.Win32.Pushdo] [W32/Pushdo.QYZ!tr.bdr] [Trj/dtcontx.G]
11ca33d7f0283dcf7069ea6e80d621ea	[PWSZbot-FFC!11CA33D7F028] [Virus.Win32.Heur.c]
24114494a439863dfc25778f13c61f79	[Cutwail-FCWE!24114494A439] [Trojan.Krypt] [BackDoor.Bulknet]
649657cadcaa364649e9b6c4069ff490	[W32.MyDoom.M.Worm] [Worm/W32.Mydoom.28864] [Email-Worm.Win32.Mydoom!O] [W32.Mydoom.M] [W32/Mydoom.o@MM] [Worm.Mydoom] [W32/Mydoom.m] [I-Worm.Mydoom!qBn5HU3v+Lw] [W32/Mydoom.O@mm] [W32.Mydoom.M@mm] [MyDoom.PI] [Win32/Mydoom.O] [Worm.Mydoom-27] [Email-Worm.Win32.Mydoom.m] [Trojan.Win32.Mydoom.dfadqm] [PE:Worm.Mail.Mydoom.dh!1074753035] [Worm.Win32.Mydoom.R] [Win32.HLLM.MyDoom.54464] [Worm.Mydoom.Win32.1032] [BehavesLike.Win32.Mydoom.mc] [W32/MyDoom-O] [W32/Mydoom.LVDB-0128] [Worm/Sramota.bef] [Worm/Mydoom.O.1] [Worm[Email]/Win32.Mydoom] [Worm.Mydoom.m.(kcloud)] [Worm:Win32/Mydoom.O@mm] [I-Worm.Win32.Mydoom.28864.A[h]] [Win32/Mydoom.worm.49344.B] [W32/Mydoom.N.worm] [I-Worm.Mydoom.AX] [Win32/Mydoom.R] [Trojan.Win32.Mydoom.m] [Email-Worm.Win32.Mydoom] [W32/Mydoom.M!dam] [I-Worm/Mydoom.O] [Worm.W]
bbce5846c2f15579e1c2ee6bcb4f5685
1780c783d064f3b38db4fb0de13bf7b7	[Backdoor.Pushdo] [BKDR_PUSHDO.GB] [Backdoor/Win32.Pushdo]
b55f8d847b5952603308c0df5772f7c9	[BScope.Malware-Cryptor.Fareit.3083]
a0396ae6061c4cf62ca7c86de40e16d0	[Dropper/Win32.Vidro]
1d7d4ea30576e405f052d06d7d6e36b6	[W32.MyDoom.M.Worm] [Worm/W32.Mydoom.28864] [Email-Worm.Win32.Mydoom!O] [W32.Mydoom.M] [Worm.Mydoom] [W32/Mydoom.m] [I-Worm.Mydoom!qBn5HU3v+Lw] [W32/Mydoom.O@mm] [W32.Mydoom.M@mm] [MyDoom.PI] [Win32/Mydoom.O] [Worm.Mydoom-27] [Email-Worm.Win32.Mydoom.m] [Trojan.Win32.Mydoom.dfadqm] [I-Worm.Win32.Mydoom.28864.A[h]] [Trojan.Win32.Mydoom.m] [Worm.Win32.Mydoom.R] [Win32.HLLM.MyDoom.54464] [Worm.Mydoom.Win32.1032] [BehavesLike.Win32.Mydoom.mc] [W32/MyDoom-O] [W32/Mydoom.LVDB-0128] [Worm/Sramota.bef] [Worm/Mydoom.O.1] [Worm[Email]/Win32.Mydoom] [Worm.Mydoom.m.(kcloud)] [Worm:Win32/Mydoom.O@mm] [Win32/Mydoom.worm.49344.B] [W32/Mydoom.o@MM] [W32/Mydoom.N.worm] [I-Worm.Mydoom.AX] [Win32/Mydoom.R] [PE:Worm.Mail.Mydoom.dh!1074753035] [Email-Worm.Win32.Mydoom] [W32/Mydoom.M!dam] [I-Worm/Mydoom.O] [Worm.W]

Whois

Property	Value
NameServer	NS-1.AIRMAIL.NET
Created	1995-03-02 00:00:00
Changed	2015-04-19 00:00:00
Expires	2018-03-03 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2019-08-27	209.249.171.158 (ClassC)
2025-08-02	66.226.70.66 (ClassC)

Port 80

Subdomains

Date	Domain	IP
NS-1.AIRMAIL.NET	2025-06-28	199.26.61.9
mail.airmail.net	2019-08-27	209.249.171.158
mx.airmail.net	2014-05-24	209.249.171.237

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]