Domain > oh.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to oh.com

MD5	A/V
833009a54c295a72ad64ab0941f482fe	[Suspicious.Cloud.5] [Kryptik.CCFN] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [TR/Crypt.EPACK.9220] [Heuristic.BehavesLike.Win32.Suspicious-BAY.K] [Mal/FakeAV-UF] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GIF] [Trojan.Win32.Kryptik.BZOO]
d38a3646d932d062528aea48d2122315
1a809031288d3e1ef3327e87dfefa861	[HW32.CDB.042b] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxahyf] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!jqpo62AJz0o] [TrojWare.Win32.Kryptik.BZOO] [BackDoor.Slym.13852] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [W32/Trojan.HFOT-6937] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.BZMB] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Win32/Trojan.337]

Whois

Property	Value
NameServer	NS2.MARK.COM
Created	1995-07-29 00:00:00
Changed	2014-07-08 00:00:00
Expires	2016-07-28 00:00:00
Registrar	FABULOUS.COM PTY LTD

DNS Resolutions

Date	IP Address
2014-03-15	184.73.213.106 (ClassC)
2014-04-25	23.23.139.104 (ClassC)
2014-07-21	50.17.202.136 (ClassC)
2015-05-24	-
2015-06-01	54.197.248.1 (ClassC)
2019-10-12	52.35.148.14 (ClassC)
2020-03-08	52.11.26.242 (ClassC)
2024-01-15	96.126.123.244 (ClassC)
2024-02-18	45.33.18.44 (ClassC)
2024-03-03	173.255.194.134 (ClassC)
2024-03-18	45.33.2.79 (ClassC)
2024-04-02	45.79.19.196 (ClassC)
2024-05-15	44.238.86.136 (ClassC)
2024-06-11	54.188.137.222 (ClassC)
2024-07-17	34.216.235.134 (ClassC)
2024-07-29	44.239.175.47 (ClassC)
2024-08-01	54.190.110.176 (ClassC)
2024-08-04	52.26.216.69 (ClassC)
2024-08-31	52.37.150.222 (ClassC)
2024-09-13	54.148.233.127 (ClassC)
2024-10-09	44.236.182.152 (ClassC)
2024-10-13	54.200.57.62 (ClassC)
2024-10-19	54.148.25.248 (ClassC)
2024-12-10	54.189.70.68 (ClassC)
2025-01-16	52.42.217.3 (ClassC)
2025-02-14	35.162.130.184 (ClassC)
2025-02-21	44.233.25.242 (ClassC)
2025-03-11	34.211.36.164 (ClassC)
2025-03-26	44.229.200.255 (ClassC)
2025-04-09	34.208.160.138 (ClassC)
2025-04-17	52.88.144.225 (ClassC)
2025-04-21	34.215.19.114 (ClassC)
2025-05-03	54.218.184.28 (ClassC)
2025-05-05	54.148.88.84 (ClassC)
2025-05-10	54.148.183.37 (ClassC)
2025-05-24	52.34.66.176 (ClassC)
2025-06-11	52.25.209.188 (ClassC)
2025-06-16	34.217.184.103 (ClassC)
2025-07-13	52.43.83.193 (ClassC)
2025-07-20	52.10.35.196 (ClassC)
2025-08-01	54.149.227.253 (ClassC)
2025-08-23	52.43.167.133 (ClassC)
2025-09-06	54.189.217.203 (ClassC)
2025-10-30	54.201.40.144 (ClassC)
2026-01-06	35.163.7.224 (ClassC)

Port 80

Subdomains

Date	Domain	IP
lilah.oh.com	2015-04-12	54.225.167.121
rr.oh.com	2014-05-29	23.23.191.238
nullmx.rr.oh.com	2014-05-29	209.181.247.105
nullmx.oh.com	2014-04-25	209.181.247.105

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]