Help RSS API Feed Maltego Contact                        

Domain > fw.dnslink.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

https://raw.githubusercontent.com/citizenlab/malwa...    

Files that talk to fw.dnslink.com

MD5A/V
5c25340616a477c316e4626c65578856[Trojan.Tibs.J] [Trojan.Zlob] [Trojan] [Trojan/Pakes.dgc] [Trojan.Win32.Pakes.sasz] [W32/Trojan2.AZCA] [Tibs.EAUY] [Mal_Nucrp11] [Adware.Xpantivirus-7] [Trojan.Win32.Pakes.dgc] [Trojan.Pakes.DBG] [TrojWare.Win32.TrojanDownloader.Small.AI] [Trojan.Packed.512] [Heuristic.LooksLike.Win32.Suspicious.B] [Mal/TibsPk-D] [Trojan/Pakes.cfl] [Win32.Troj.Unknow.d.35328] [Trojan:Win32/Tibs.GI] [Trojan.Win32.Pakes.109056.U] [Win-Trojan/Fraudpack.109056] [Hoax.Win32.AntiAV.8] [HeurEngine.MaliciousPacker] [Win32/TrojanDownloader.FakeAlert.EU] [Trojan.Tibs!5086] [Trojan.Peed.JOP] [Downloader.FraudLoad.A] [Adware/RogueAntimalware2009]

Whois

PropertyValue
Email jason@domainholdings.com
NameServer NS2.PEER1.NET
Created 1998-10-29 00:00:00
Changed 2014-09-03 00:00:00
Expires 2015-10-28 00:00:00
Registrar GODADDY.COM, LLC

DNS Resolutions

DateIP Address
2013-01-17216.151.212.175 (ClassC)
2013-04-01216.151.213.221 (ClassC)
2013-04-01216.151.213.222 (ClassC)
2013-04-01216.151.212.174 (ClassC)
2013-04-01216.151.213.228 (ClassC)
2013-04-01216.151.212.178 (ClassC)
2013-08-03209.15.13.141 (ClassC)
2014-12-13209.15.13.141 (ClassC)
2019-11-11209.15.13.134 (ClassC)
2024-10-06170.178.183.18 (ClassC)
2025-08-19103.224.182.249 (ClassC)

Port 80

Subdomains

DateDomainIP
ns1.dnslink.com2025-08-14103.224.182.63
NS2.DNSLINK.COM2019-04-05192.132.33.30
cname.dnslink.com2013-10-09209.15.13.134
fw.dnslink.com2014-12-13209.15.13.141
www.fw.dnslink.com2014-02-28209.15.13.138
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information