Domain > safe-mail.net

More information on this domain is in AlienVault OTX

Reports

http://blog.trendmicro.com/trendlabs-security-inte...

http://www.cyintanalysis.com/a-quick-look-at-a-lik...

https://otx.alienvault.com/pulse/562e5e2f4637f2189...

https://otx.alienvault.com/pulse/5674426c4637f2563...

Files that talk to safe-mail.net

MD5	A/V
0f5f90b03b49b276d148f7e6be7c30f1	[HW32.CDB.27e0] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cxxldj] [Trojan.FakeAV] [Kryptik.CCFN] [Win32/Kelihos.OWUMMQC] [Backdoor.Win32.Hlux.dqeh] [Backdoor.Hlux!9TTR+wn2IWc] [Backdoor.Win32.Hlux.DUHE] [BackDoor.Slym.12819] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CAXO] [Win32.Backdoor.Hlux.Hpn] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.ArxZ]
c7bf064346fafe4fc55b43abcfe96b00	[HW32.CDB.E6f3] [Backdoor.Kelihos.r3] [Backdoor.Hlux!zUFIktBYK3s] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfw] [Trojan.Win32.S.PSW-Tepfer.835600.AM] [UnclassifiedMalware] [BackDoor.Slym.14049] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [W32/Trojan.QQUO-1304] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt3.HUC] [Trojan.Win32.Kryptik.BZIX]
315325f544912a68464bf38e3edf6371	[HW32.CDB.9e5e] [Backdoor/W32.Hlux.829456.H] [Packed.Win32.Katusha.3!O] [Backdoor.Hlux.r3] [Backdoor.Hlux!aauIqdu764w] [Trojan.FakeAV] [Kryptik.CDQY] [Backdoor.Win32.Hlux.dqyy] [Win32.Backdoor.Hlux.Lhdb] [UnclassifiedMalware] [Trojan.Packed.26581] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Backdoor.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aZvR] [Win32/Trojan.337]
2748ea7375275e992ebde4575fe7c1a6	[HW32.CDB.90bf] [Backdoor.Hlux.r3] [Backdoor.Hlux!wF4QLfqeA5I] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Trojan.Win32.Hlux.cwzkvh] [TrojWare.Win32.Kryptik.BZOO] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GID] [Trojan.Win32.Kryptik.BZOO]
30faa031b0c6122bc91cff8996474b4a	[HW32.CDB.E594] [Trojan.Inject2]
fe734b28009c7dd5389f64d72722bb21
281bba52133b42b0041a72e8baf03600	[HW32.CDB.Eca9] [Backdoor.Hlux.r3] [Backdoor.Hlux!xA6rCWjNVLE] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmfd] [Trojan.Win32.Kryptik.cxbhpv] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [W32/Trojan.KRFJ-3745] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GME] [Trojan.Win32.Kryptik.CASL]
0d4fa9360c4139d1a33a6203f510f886	[HW32.CDB.07a1] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cymqun] [Trojan.FakeAV] [Kryptik.CCQY] [Backdoor.Win32.Hlux.cri] [Backdoor.Hlux!tlFvhPzYgZ0] [Win32.Backdoor.Hlux.Glz] [Backdoor.Win32.Hlux.DUHE] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Trojan.Crypt] [W32/Hlux.CCCY!tr.bdr] [Crypt_s.GRA] [Backdoor.Win32.Hlux.aNkU]
0f85c93f59bf57bcc7573e7f8e373c21	[HW32.CDB.47eb] [Backdoor.Hlux.r3] [Backdoor.Hlux!kSgAszTjhZg] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmru] [Trojan.Win32.Hlux.cwzljo] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [W32/Trojan.VZXF-1556] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL]

Whois

Property	Value
Name	almond systerms international Ltd.
Organization	almond systerms international Ltd.
Email	amiram@GALIAD.CO.IL
Address	2-26-23-701 Minami-Otsuka,Toshima-ku
Zip Code	170-0005
City	Tokyo
Country	JP
Phone	+81.9999999999
Fax	+81.9999999999
NameServer	EGOZ.GALIAD.CO.IL
Created	1998-10-10 04:00:00
Changed	2015-01-28 23:30:32
Expires	2017-10-09 00:00:00
Registrar	NETWORK SOLUTIONS, L

DNS Resolutions

Date	IP Address
2013-09-13	213.8.161.230 (ClassC)
2014-05-25	212.29.227.230 (ClassC)
2014-06-18	212.29.227.230 (ClassC)
2023-08-27	212.29.227.81 (ClassC)
2025-05-22	212.235.89.107 (ClassC)
2025-11-17	62.0.12.164 (ClassC)

HTTP/1.1 200 OKDate: Wed, 15 May 2019 13:33:30 GMTServer: Apache/2.4.6 (CentOS) OpenSSL/1.0.1e-fipsAccept-Ranges: bytesLast-Modified: Sat, 20 Oct 2018 09:05:31 GMTETag: d444e-42c9-5bcaefdbContent-Leng

html>head>META namekeywords contentemail, e-mail, free, secure, security,Message Board, authentication, privacy,web based, safe, safe mail, safe email,Address Book, Personal Information,groups, chat, live chat, password, communication, trust, protection,SSL, encryption, conferencing, attachment, defense>META Namedescription contentSafe-mail is a FREE high securityweb-based e-mail system which extends considerably the emailsystem to much more than currently exists.Safe-mail uses an SSL secure site to ensure total securityfor all e-mail communications including file attachmentsand real time chat facility.Safe-mail is FREE to individuals and there is no SPAM.There is no installation process and no software to downloador configure on your computer.No cookies are sent down the line to pollute your machine.Use any computer equipped with a web browserto register and then access your Safe-mail facility anywherein the world where you can gain access to a web browser.Safe-mail is much more than a secure e-mail system, offeringstart your own Message Board, an individual authenticationfacility and live chat in real time.>title>Safe-mail.net/title>style>.skin0{position:absolute;text-align:left;width:130px;border:1px solid #ACA899;background-color:menu;font-family:Verdana;line-height:20px;cursor:default;visibility:hidden;}.menuitems{padding-left:5px;padding-right:10px;height: 20px;font-size: 10pt;}.menuitemsOver{padding-left:5px;padding-right:10px;height: 20px;background-color: #316AC5;color: #FFFFFF;font-size: 10pt;}.menuitemsGrey{padding-left:5px;padding-right:10px;height: 20px;font-size: 10pt;color: #ACA899;}.menuitemsOverGrey{padding-left:5px;padding-right:10px;height: 20px;background-color: #316AC5;color: #ACA899;font-size: 10pt;}/style>script LANGUAGEJavaScript>!--isIE4  (document.all && !document.getElementById) ? true : false;isIE5  (document.all && document.getElementById) ? true : false;isNS4  (document.layers) ? true : false;isNS6  (!document.all && document.getElementById) ? true : false;var point_1new Image();var

Port 443

Subdomains

Date	Domain	IP
mx1.safe-mail.net	2014-05-24	213.8.192.75
nsa.safe-mail.net	2025-07-06	62.0.12.164
nsb.safe-mail.net	2025-08-22	62.0.12.164
tamar.safe-mail.net	2024-02-13	62.0.12.163
tapuz.safe-mail.net	2025-05-13	212.235.89.107

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]