Domain > mx04.peoplepc.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to mx04.peoplepc.com

MD5	A/V
27213d33434bf796a9f535ec98e8a918	[HW32.CDB.03b6]
8db2ac15d6e8e86023d86a061f034d60	[HW32.CDB.741c] [W32/Worm-AAEH.pq!8DB2AC15D6E8] [WS.Reputation.1] [Trojan.Injector!VwPEXH1adK4] [Worm.Win32.VB.NG] [Win32.HLLW.Autoruner2.12544] [Worm/Vobfus.agcpv] [Mal/VB-ALW] [Worm:Win32/Vobfus.ZR] [TScope.Trojan.VB] [PE:Malware.XPACK-HIE/Heur!1.9C48] [Worm.Win32.Vobfus] [Inject2.ABEP] [Trojan.Win32.Injector.BCCY]
0106db8b1a382937be9d9e99155dc546	[Trojan-PSW.Win32.Tepfer!O] [Backdoor.Kelihos.F5] [Kelihos.BKDR] [Trojan.Win32.Hlux.dimrpg] [Win32.Backdoor.Hlux.Kc] [BackDoor.Slym.14056] [Backdoor:Win32/Kelihos.F] [Backdoor/Win32.Kelihos] [SScope.Malware-Cryptor.Hlux] [Backdoor.Win32.Hlux.AHwG] [Backdoor.Win32.Kelihos] [W32/Kryptik.BJWM!tr]
1a809031288d3e1ef3327e87dfefa861	[HW32.CDB.042b] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxahyf] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!jqpo62AJz0o] [TrojWare.Win32.Kryptik.BZOO] [BackDoor.Slym.13852] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [W32/Trojan.HFOT-6937] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZMB] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Win32/Trojan.337]
17124a0c3ffde1fd0de7168990278c06	[HW32.CDB.439f] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.DNNY-5917] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ]
1d309b266dbe76d86b01314a65c97cce	[HW32.CDB.8c27] [Trojan.Kryptik!/yxP5762iCg] [Kryptik.CCFN] [Trojan.Win32.Kryptik.cxmihh] [UnclassifiedMalware] [Trojan.Packed.26527] [Win32.Troj.Undef.(kcloud)] [Backdoor:Win32/Kelihos] [W32/Trojan.LLHB-6858] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GKU] [Trojan.Win32.Kryptik.CAHC]
70c82520cbc8bacd1515d7e2650b19a1	[HW32.CDB.43cf] [Packed.Win32.Katusha.1!O] [Backdoor.Hlux!SzVtl6MNJ18] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.JRJKMf] [Backdoor.Win32.Hlux.dqja] [Win32.Backdoor.Hlux.Aheu] [TrojWare.Win32.Kryptik.CAUP] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [W32/Trojan.WVTP-0899] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Trojan.Win32.Kryptik.bCBCJ]
0d4fa9360c4139d1a33a6203f510f886	[HW32.CDB.07a1] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cymqun] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.cri] [Backdoor.Hlux!tlFvhPzYgZ0] [Win32.Backdoor.Hlux.Glz] [Backdoor.Win32.Hlux.DUHE] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Trojan.Crypt] [W32/Hlux.CCCY!tr.bdr] [Crypt_s.GRA] [Backdoor.Win32.Hlux.aNkU]

Whois

Property	Value
Name	Hostmaster -
Organization	Earthlink Inc
Email	hostmaster@earthlink.net
Address	1375 Peachtree St,
Zip Code	30309
City	Atlanta
State	GA
Country	US
Phone	+1.4048150770
NameServer	itchy.earthlink.net
Created	1999-02-26 05:00:00
Changed	2014-11-11 06:20:40
Expires	2015-11-15 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2014-04-07	207.69.189.44 (ClassC)
2026-01-15	207.69.189.44 (ClassC)

Subdomains

Date	Domain	IP
mx00.peoplepc.com	2014-05-29	207.69.189.40
mx01.peoplepc.com	2014-05-24	207.69.189.41
mx02.peoplepc.com	2026-01-11	207.69.189.42
mx03.peoplepc.com	2014-05-24	207.69.189.43
mx04.peoplepc.com	2014-04-07	207.69.189.44
mx05.peoplepc.com	2014-04-07	207.69.189.45
csupdate.peoplepc.com	2015-03-10	165.254.206.89
mail.peoplepc.com	2019-07-24	207.69.189.58
pop.peoplepc.com	2025-12-31	24.41.66.181
smtp.peoplepc.com	2025-09-17	207.69.189.59
www.peoplepc.com	2015-05-17	209.86.62.59

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]