mxs.mail.ru
Classification: Whitelisted
mxs.mail.ru is a whitelisted (trusted) hostname. Reported by 4 threat sources, last seen 2025-05-17. IoC context and downloadable threat intel on Maltiverse.
Current activity
- Offline — no longer resolving. Last online 2025-05-17 17:45:48.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Top 1M Site | Cisco Umbrella | 2022-07-18 22:01:21 | 2025-05-17 17:45:48 | benign | |
| Top Popularity Site | Cisco Umbrella | 2022-07-30 02:29:47 | 2025-04-26 18:59:02 | benign | |
| Malware | Hybrid-Analysis | 2021-10-08 12:45:25 | 2022-01-18 19:01:16 | ||
| Worm.Mydoom | Hybrid-Analysis | 2021-11-16 22:15:20 | 2021-11-16 22:15:20 | ||
| Trojan.Prolaco | Hybrid-Analysis | 2021-11-10 16:17:24 | 2021-11-10 16:17:24 | ||
| Backdoor.Mazben | Hybrid-Analysis | 2021-10-10 09:15:25 | 2021-10-10 09:15:25 | ||
| Generic.Malware | Hybrid-Analysis | 2018-04-09 03:45:07 | 2021-04-19 23:45:34 | ||
| Alexa Top 1 Million | Maltiverse Research Team | 2020-07-08 01:21:40 | 2020-07-08 01:21:40 | ||
| Worm.TSY | Hybrid-Analysis | 2020-05-17 17:45:24 | 2020-05-17 17:45:24 | ||
| DangerousObject.Multi | Hybrid-Analysis | 2018-05-24 11:00:18 | 2018-05-24 11:00:18 | ||
| backdoor ,sinkhole | Maltiverse | 2018-03-14 09:41:58 | 2018-03-14 09:41:58 | ||
| downloader | Maltiverse | 2018-03-11 22:30:20 | 2018-03-11 22:30:20 | ||
| gozi ,isfb ,papras ,ursnif | Maltiverse | 2017-12-19 15:16:01 | 2018-02-28 10:01:17 | ||
| mydoom | Maltiverse | 2017-12-18 07:16:55 | 2017-12-18 07:16:55 | ||
| backdoor | Maltiverse | 2017-12-04 04:09:02 | 2017-12-04 04:09:02 | ||
| backdoor,ransomware,svg | Maltiverse | 2017-12-02 19:24:49 | 2017-12-02 19:24:49 | ||
| gozi,isfb,papras,ursnif | Maltiverse | 2017-10-25 14:01:03 | 2017-10-25 14:01:03 |
Tags
gozi isfb papras ursnif downloader backdoor sinkhole spambotIP addresses resolved by this hostname
- 94.100.180.104 (2018-04-09 03:45:08)
- 217.69.139.150 (2025-04-26 18:59:01)
- 94.100.180.31 (2025-04-26 18:59:01)
Whois information
- AS name
- AS47764 Limited liability company Mail.Ru
- Domain
- mail.ru
- TLD
- ru
- Nameservers
- ns1.mail.ru. 217.69.139.112, ns2.mail.ru. 94.100.180.138, ns3.mail.ru. 185.30.176.202
- Registrant
- RU-CENTER-RU
- Domain created
- 1997-09-27 14:33:26
- Domain expires
- 2025-09-30 21:00:00
- First indexed
- 2017-10-25 14:01:03
- Last updated
- 2025-05-17 17:45:48