Help RSS API Feed Maltego Contact                        

Domain > www.km-nyc.com

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

https://otx.alienvault.com/pulse/553e18f9b45ff54b6...    
https://www2.fireeye.com/rs/fireye/images/rpt-apt3...    

Files that talk to www.km-nyc.com

MD5A/V
db7b0317b72b023c0680f221bc61d255
CDFF892F0B9CCCBD3E746145F7E495B2
E944A94C0D42BAE1B5FEB64F5A70127B
e3ae3cbc024e39121c87d73e87bb2210
7F966313CBC16FBD0162497ED31EA810
B6F588DD0DCBC9EE0A1288C69F117B2F
65232A8D555D7C4F7BC0D7C5DA08C593
03B64340257A264D2261F7E6348D6145
bb4e5ec34608d02e2d9b90ca23e19df3[HW32.Packed.78FD] [Backdoor.Lecna.AB] [Backdoor/W32.Lecna.20480] [Backdoor.Win32.Lecna!O] [TrojanAPT.LecnaCBack.MUE.Z3] [BackDoor-CSB] [Trojan.FakeMS.EDIE] [Backdoor.Lecna.Win32.25] [Backdoor/Lecna.ab] [W32/Trojan.AAWD] [W32.Lecna.D] [BKDR_LECNA.SM] [Win.Trojan.Backspace-1] [Backdoor.Win32.Lecna.ab] [Backdoor.Lecna.AB] [Trojan.Win32.Lecna.johs] [Backdoor.Lecna.AB] [Backdoor.Win32.Lecna.AB] [Backdoor.Lecna.AB] [BackDoor.Dizhi] [BKDR_LECNA.SM] [BehavesLike.Win32.Ipamor.mc] [Troj/Lecna-Q] [Backdoor/Lecna.i] [W32/Bdoor.AB!tr.bdr] [Trojan[Backdoor]/Win32.Lecna] [Win32.Hack.Lecna.ab.(kcloud)] [Backdoor.Lecna.AB] [Backdoor:Win32/Lecna!dha] [Downloader/Win32.Small] [Backdoor.Lecna.AB] [Backdoor.Lecna] [Backdoor.Lecna.CH] [Backdoor.Win32.Lecna] [Backdoor.Lecna.AB] [Win32/DH{YQMT?}]

Whois

PropertyValue
Email 185871567@qq.com
NameServer FREEDNS2.REGISTRAR-SERVERS.COM
Created 2014-05-28 00:00:00
Changed 2014-05-29 00:00:00
Expires 2015-05-28 00:00:00
Registrar GODADDY.COM, LLC

DNS Resolutions

DateIP Address
0000-00-0023.105.37.138 (ClassC)
2013-04-0174.200.220.210 (ClassC)
2013-07-25220.165.15.4 (ClassC)
2015-05-2423.105.37.138 (ClassC)
2015-06-2150.63.202.35 (ClassC)
2016-04-1369.195.129.72 (ClassC)
2016-11-0858.158.177.102 (ClassC)
2018-02-0423.236.251.235 (ClassC)
2019-01-24136.0.242.90 (ClassC)
2020-02-2723.110.233.4 (ClassC)
2020-03-2823.110.224.13 (ClassC)
2020-11-092.56.124.76 (ClassC)
2021-01-29208.91.197.46 (ClassC)
2021-05-19156.240.6.27 (ClassC)
2022-06-29160.124.63.155 (ClassC)
2023-07-23204.11.56.37 (ClassC)
2024-07-26154.93.128.5 (ClassC)
2025-02-11156.248.63.247 (ClassC)
2026-01-16154.218.163.57 (ClassC)

Port 80

Subdomains

DateDomainIP
www.km-nyc.com2013-04-0174.200.220.210
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information