Domain > pomf.se

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://blog.dynamoo.com/2015

https://otx.alienvault.com/pulse/55dd8ac94637f21c5...

Files that talk to pomf.se

MD5	A/V
96d9f0831fe14ad35f524bd7ef4daa03	[W32.Msbzmu.Trojan] [Backdoor/W32.Androm.13824.I] [Backdoor.Win32.Androm!O] [W32/Worm-FFE!96D9F0831FE1] [Backdoor/Androm.a] [Trojan.Win32.Androm.ciylnt] [Downloader.Dromedan] [Kryptik.BMV] [TSPY_GAMARUE_BL132AB8.TOMC] [Backdoor.Win32.Androm.a] [Backdoor.Androm!/BwDeJSmWWg] [Backdoor.Win32.A.Androm.13824.X] [TrojWare.Win32.Kryptik.AFJS] [BackDoor.Andromeda.22] [Worm/Gamarue.itza] [Troj/Gamarue-AG] [Backdoor/Androm.al] [Trojan[Backdoor]/Win32.Androm] [Win32.Hack.Androm.(kcloud)] [Worm:Win32/Gamarue.I] [Backdoor/Win32.Androm] [Virus.Win32.Heur.d] [Trj/CI.A] [Win32/TrojanDownloader.Wauchos.A] [PE:Worm.Win32.Gamarue.b!1075351473] [Trojan.Defiler] [W32/Kryptik.AFJS!tr] [Defiler.G] [Backdoor.Win32.Androm.arg]
b5855e5a05427831993c1eb78526a8b1	[W32/S-0b92b060!Eldorado] [Kryptik.CEYC] [Trojan-Ransom.Win32.Foreign.lnof] [Trojan.Win32.Foreign.dnsqyk] [TrojWare.Win32.TrojanDropper.Ropest.AFN] [Trojan.Betabot.3] [BehavesLike.Win32.Downloader.ch] [Mal/Wonton-AN] [Trojan/Foreign.arcg] [TR/Crypt.Xpack.88729] [Trojan[Ransom]/Win32.Foreign] [Worm:Win32/Gamarue.AR] [Trojan/Win32.MDA] [Hoax.Foreign] [Trojan.Win32.Ransom.lnof] [Trojan.Win32.Crypt] [W32/Foreign.LNOF!tr] [Crypt3.CBGQ] [Win32/Trojan.d87]
e5c18d06fa08d2487314704746300e34	[Worm/W32.Nuwar.116224.C] [Backdoor.Nucleroot.ks] [Artemis!E5C18D06FA08] [Trojan.Delf] [Riskware] [Trojan/Delf.ogj] [Trojan.Win32.Umbra.vlgaj] [Win32/Tnega.ANRR] [TROJ_SPNR.14H013] [WIN.Trojan.Nucleroot-1] [Backdoor.Win32.Nucleroot.ks] [Backdoor.Nucleroot!Z7BZZhSJ1vc] [Backdoor.Nucleroot] [TrojWare.Win32.TrojanDownloader.Delf.dsgt] [BackDoor.Umbra.17] [Backdoor/Win32.Nucleroot] [TrojanDownloader:Win32/Umbald.A] [Backdoor.Win32.A.Nucleroot.92160] [Dropper/Win32.Dapato] [W32/Backdoor.NNNI-7231] [W32/Delf.OGJ!tr] [Delf.AGLM]
3a398b221df294fa6f05de0301af2695	[W32/Downloader-Sml!Eldorado] [Downloader] [Win32/DH{AyAlV2FOTQ}]
0a345b3518bbb4be3d34463b17007d30
41c33fdb9a95353a3b109393543f90dd
122b83647eededceea380cf73d94aef2	[W97M/Downloader.act] [Trojan.Script.MLW.dslepv] [W97M/Downloader.act] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan]
9302ba66b63a335b94bf2a02664c845d
c722cd653d4a1910181a34e6c2c199f6	[O97M.Dropper.GP] [W97M/Downloader.act] [Trojan.Script.MLW.dslepv] [Troj/DocDl-PU] [W97M/Downloader.act] [HEUR/Macro.Downloader] [HEUR.VBA.Trojan]
3833db94decea57160ad381525142877
9b87b86ec6c51024a18a615a581aefa8

Whois

Property	Value
NameServer	pns14.cloudns.net
Created	2013-01-21 00:00:00
Changed	2015-06-09 00:00:00
Expires	2016-01-21 00:00:00
Registrar	SE Direkt

DNS Resolutions

Date	IP Address
2013-08-15	108.162.197.76 (ClassC)
2013-08-19	108.162.196.76 (ClassC)
2014-04-27	108.162.195.110 (ClassC)
2014-04-28	108.162.194.110 (ClassC)
2014-05-03	188.138.9.50 (ClassC)
2014-07-19	104.28.3.56 (ClassC)
2014-08-12	173.245.61.182 (ClassC)
2014-08-13	173.245.60.182 (ClassC)
2014-08-23	62.210.142.29 (ClassC)
2014-09-30	104.28.2.56 (ClassC)
2014-10-10	108.162.194.38 (ClassC)
2014-10-10	108.162.195.38 (ClassC)
2014-11-23	95.85.40.114 (ClassC)
2014-12-14	66.6.43.22 (ClassC)
2014-12-24	5.79.86.194 (ClassC)
2015-04-01	198.245.63.50 (ClassC)
2015-04-16	188.166.111.112 (ClassC)
2015-04-23	173.245.60.162 (ClassC)
2015-04-23	173.245.61.162 (ClassC)
2015-06-09	188.126.81.150 (ClassC)
2015-06-22	108.61.164.83 (ClassC)
2015-11-21	31.7.184.119 (ClassC)
2016-03-09	104.243.35.197 (ClassC)
2018-12-12	127.0.0.1 (ClassC)
2019-09-19	45.76.12.27 (ClassC)
2019-11-09	216.155.158.161 (ClassC)
2024-10-04	93.186.197.159 (ClassC)
2024-12-21	163.172.210.122 (ClassC)
2025-03-14	37.143.131.171 (ClassC)
2025-10-15	138.199.235.201 (ClassC)
2025-12-26	167.235.106.19 (ClassC)

Port 80

Subdomains

Date	Domain	IP
a.pomf.se	2014-04-28	108.162.195.110
www.a.pomf.se	2015-03-24	104.28.2.56
i.pomf.se	2014-10-11	108.162.195.38
p.pomf.se	2014-11-06	104.28.2.56
www.pomf.se	2024-12-21	163.172.210.122

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]