Help
RSS
API
Feed
Maltego
Contact
Domain > ns1.helpchecks.com
×
More information on this domain is in
AlienVault OTX
Is this malicious?
Yes
No
Files that talk to ns1.helpchecks.com
MD5
A/V
e82792349845732ff863c8efe8ba4837
[
Worm/W32.Vobfus.196608.E
] [
Heur.Win32.Veebee.1!O
] [
Worm.Vobfus.A3
] [
W32/Autorun.worm.aaeh
] [
Trojan.Dropper
] [
Trojan/Pronny.io
] [
Trojan.Win32.WBNA.cetwkt
] [
W32.Changeup
] [
Vobfus.BOEN
] [
WORM_VOBFUS.SMIS
] [
Worm.Win32.WBNA.ipa
] [
Win32.Trojan.Vobfus.Ajbj
] [
Mal/Autorun-AX
] [
Worm.Win32.Pronny.~IO
] [
Win32.HLLW.Autoruner1.30825
] [
Worm.WBNA.Win32.279733
] [
BehavesLike.Win32.Autorun.cm
] [
Worm/WBNA.igzx
] [
TR/swis.A
] [
Worm:Win32/Vobfus
] [
Worm.Win32.U.Vobfus.196608.A
] [
Worm/Win32.Vobfus
] [
Worm.Vobfus
] [
Win32/Pronny.IO
] [
PE:Malware.FakeFolder@CV!1.6AC4
] [
Trojan.VBCrypt
] [
W32/WBNA.IPA!worm
] [
VBCrypt.FCL
] [
Worm.Win32.WBNA.AKn
]
538583264d22f138daf4bedd9bc953a7
[
Trojan.Autorun.VB.X
] [
Worm/W32.Vobfus.225280.I
] [
Worm.Vobfus.A3
] [
W32/Autorun.worm.aaeh
] [
Trojan.Dropper
] [
Trojan
] [
Trojan/VBObfus.hs
] [
W32/Vobfus.X
] [
W32.Changeup
] [
Vobfus.DELX
] [
Worm.Win32.Vobfus.alhp
] [
Worm.Vobfus!oAQ4A7l4kLI
] [
TrojWare.Win32.VBObfus.~HS
] [
Win32.HLLW.Autoruner1.30804
] [
TR/Drop.Vobfus.mel
] [
WORM_VOBFUS.SMIS
] [
Heuristic.LooksLike.Win32.Suspicious.I
] [
Mal/Autorun-AX
] [
Worm/Vobfus.ldl
] [
Worm:Win32/Vobfus.MK
] [
Worm.Vobfus.alhp
] [
Malware.Changeup
] [
Trojan.VB2
] [
W32/SelfDel.DE!tr
] [
VBCrypt.FCF
] [
W32/Vobfus.GEP.worm
]
0e6df4692cf6d7940725d55670679ccc
[
Worm/W32.Vobfus.196608.E
] [
Worm.Vobfus.A3
] [
W32/Autorun.worm.aaeh
] [
Trojan.Dropper
] [
Trojan/VBObfus.hz
] [
Trojan
] [
Trojan.Win32.Autoruner1.bcanxk
] [
W32.Changeup
] [
Vobfus.BOEN
] [
Worm.Win32.WBNA.ipa
] [
Trojan.VBObfus!r/uz4CsVv04
] [
Worm.Win32.A.Vobfus.196608.BT
] [
Worm.Win32.Pronny.~IO
] [
Win32.HLLW.Autoruner1.30825
] [
Worm/Vobfus.6698548
] [
WORM_VOBFUS.SMIS
] [
Heuristic.LooksLike.Win32.Suspicious.I
] [
Mal/Autorun-AX
] [
Worm.Vobfus.al.(kcloud)
] [
Worm:Win32/Vobfus
] [
Worm/Win32.Vobfus
] [
Worm.Vobfus
] [
Malware.Changeup!rem
] [
Trojan.VBCrypt
] [
W32/WBNA.IPA!worm
] [
VBCrypt.FCL
] [
W32/Vobfus.GEP.worm
]
2bc74bfb6cfc1d99b5e3bb259bd1a3ba
[
Worm/W32.Vobfus.352256.B
] [
Worm.Win32.Vobfus!O
] [
Trojan.Beebone.D
] [
Trojan.Downloader.ic
] [
Worm.Vobfus.Win32.176926
] [
Trojan/Pronny.jf
] [
Trojan.Win32.Vobfus.cfissw
] [
W32.Changeup
] [
Vobfus.DPYY
] [
WORM_VOBFUS.SMIS
] [
WIN.Trojan.VB-5774
] [
Worm.Win32.Vobfus.aoze
] [
TrojWare.Win32.Pronny.JGIC
] [
WORM_VOBFUS.SMIS
] [
BehavesLike.Win32.Autorun.fm
] [
Troj/VBNA-W
] [
Worm/Vobfus.nxq
] [
TR/VBCrypt.C
] [
Win32.Troj.Undef.(kcloud)
] [
Worm:Win32/Vobfus.NC
] [
Worm/Win32.Vobfus
] [
W32/Autorun.Worm.aaeh
] [
BScope.Trojan-Dropper.Injector
] [
Win32/Pronny.JF
] [
Worm.Win32.Vobfus
] [
W32/Vobfus.GMGK!worm
] [
Worm/VB.CFKF
] [
Trojan.Win32.Vobfus.af
] [
Win32/Trojan.ac1
]
e53928d5d66a091db13b5f36d3e574f2
[
W32.Clod0b0.Trojan.c615
] [
Worm/W32.Vobfus.225280.I
] [
Worm.Win32.Vobfus!O
] [
Worm.Vobfus.A3
] [
W32/Autorun.worm.aaeh
] [
Trojan.Dropper
] [
Worm.Vobfus.Win32.177075
] [
Trojan/VBObfus.hs
] [
Win32.Worm.Pronny.a
] [
W32/Vobfus.X
] [
W32.Changeup
] [
WORM_VOBFUS.SM14
] [
Worm.Win32.Vobfus.alht
] [
Trojan.Win32.Autoruner1.bdvvky
] [
TrojWare.Win32.VBObfus.hs
] [
Win32.HLLW.Autoruner1.30804
] [
WORM_VOBFUS.SM14
] [
BehavesLike.Win32.Autorun.dm
] [
Mal/Autorun-AX
] [
W32/Vobfus.X
] [
Worm/Vobfus.jgi
] [
TR/Drop.Vobfus.mel
] [
W32/WBNA.IPA!worm
] [
Trojan.Symmi.D1B42
] [
Worm.Win32.U.Vobfus.225280[h]
] [
Worm:Win32/Vobfus.MK
] [
Worm/Win32.Vobfus
] [
Worm.Vobfus
] [
Win32.Worm.Vobfus.Aiht
] [
Trojan.VB2
] [
VBCrypt.FCF
] [
Worm.Win32.Vobfus.ao
] [
Win32/Trojan.157
]
Whois
Property
Value
Email
admin@newvcorp.com
NameServer
NS2626.ZTOMY.COM
Created
2014-01-29 00:00:00
Changed
2015-01-29 00:00:00
Expires
2017-01-29 00:00:00
Registrar
NAMEFINGER.COM LLC
DNS Resolutions
Date
IP Address
2013-04-01
117.41.185.58
(
ClassC
)
2013-04-01
117.41.185.63
(
ClassC
)
2013-04-01
60.173.12.68
(
ClassC
)
2013-04-26
60.173.12.80
(
ClassC
)
2013-05-06
60.173.12.71
(
ClassC
)
2013-05-10
111.73.46.156
(
ClassC
)
2013-05-15
111.73.46.155
(
ClassC
)
2013-05-15
60.173.9.6
(
ClassC
)
2013-05-23
111.73.46.133
(
ClassC
)
2013-05-30
60.173.9.27
(
ClassC
)
2013-06-03
60.172.228.136
(
ClassC
)
2013-06-12
111.73.46.168
(
ClassC
)
2013-06-12
60.172.228.135
(
ClassC
)
2013-06-19
60.172.228.134
(
ClassC
)
2013-06-24
60.173.9.13
(
ClassC
)
2013-06-30
60.172.228.144
(
ClassC
)
2013-07-01
188.190.120.114
(
ClassC
)
2013-07-08
60.172.228.143
(
ClassC
)
2013-07-22
78.47.243.165
(
ClassC
)
2013-07-25
78.46.169.198
(
ClassC
)
2013-07-30
46.165.236.243
(
ClassC
)
2013-08-03
5.9.186.141
(
ClassC
)
2013-08-08
37.59.179.36
(
ClassC
)
2013-08-08
46.165.233.228
(
ClassC
)
2013-08-11
46.254.18.148
(
ClassC
)
2013-08-12
178.63.246.57
(
ClassC
)
2013-08-12
146.255.195.104
(
ClassC
)
2013-08-14
91.230.211.197
(
ClassC
)
2013-08-18
81.177.180.61
(
ClassC
)
2013-08-23
94.142.139.197
(
ClassC
)
2013-09-12
188.65.211.145
(
ClassC
)
2014-07-12
141.8.225.62
(
ClassC
)
2014-11-03
204.11.56.26
(
ClassC
)
2016-07-06
204.11.56.48
(
ClassC
)
2017-03-22
208.91.197.46
(
ClassC
)
2018-07-23
69.172.201.153
(
ClassC
)
2019-01-13
52.58.78.16
(
ClassC
)
2020-07-11
35.169.58.188
(
ClassC
)
2020-10-01
54.208.77.124
(
ClassC
)
2021-02-22
34.206.12.234
(
ClassC
)
2021-02-27
76.223.65.111
(
ClassC
)
2025-09-26
166.117.110.61
(
ClassC
)
2025-09-29
99.83.161.153
(
ClassC
)
2025-12-27
13.248.169.48
(
ClassC
)
2026-01-18
76.223.54.146
(
ClassC
)
Port 80
HTTP/1.1 302 FoundContent-Type: text/html; charsetutf-8Date: Thu, 18 Jun 2020 13:49:44 GMTLocation: http://www.afternic.com/forsale/ns1.helpchecks.com?utm_sourceTDFS_DASLNC&utm_mediumDASLNC&utm_campai a hrefhttp://www.afternic.com/forsale/ns1.helpchecks.com?utm_sourceTDFS_DASLNC&utm_mediumDASLNC&utm_campaignTDFS_DASLNC&traffic_typeTDFS_DASLNC&traffic_iddaslnc&>Found/a>.
View on OTX
|
View on ThreatMiner
Please enable JavaScript to view the
comments powered by Disqus.
Data with thanks to
AlienVault OTX
,
VirusTotal
,
Malwr
and
others
. [
Sitemap
]