Domain > citokec.info

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to citokec.info

MD5	A/V
196e7f6c572a2ea7afcc322530f8f970	[W32.Clod8a4.Trojan.e65c] [Trojan.Injector.WK] [Trojan/W32.Injector.278528.C] [Trojan.Simda.A5] [Backdoor/Shiz.anqz] [Backdoor.Shiz!ImwHTDXVoW8] [WS.Reputation.1] [Shiz.AF] [Trojan.Shiz-177] [Trojan.Win32.Ibank.qeypx] [Backdoor.Win32.A.Shiz.278528.D] [Mal/Simda-C] [TrojWare.Win32.Kryptik.YXJ] [Trojan.PWS.Ibank.456] [Backdoor.Shiz.Win32.1686] [Backdoor/Shiz.bpv] [Trojan[Backdoor]/Win32.Shiz] [Win32.Hack.Shiz.(kcloud)] [Backdoor/Win32.Shiz] [TrojanPSW.IBank.1112] [Trojan.Win32.Weelsof] [W32/Kryptik.SHU!tr] [Win32/Trojan.006]
71ca5168b13f6657f79c9d43ed448372	[Backdoor.Simda] [Trojan.Downloader.BH] [Backdoor/Shiz.amgw] [Riskware] [Trojan.Win32.Ibank.tmlqd] [Backdoor.Trojan] [Shiz.AF] [Win.Trojan.Shiz-1019] [Backdoor.Shiz!5SNzRIAbvzQ] [Backdoor.Win32.A.Shiz.278528.E] [Mal/Simda-B] [TrojWare.Win32.Kryptik.YXJ] [Trojan.PWS.Ibank.456] [Backdoor/Shiz.bod] [Win32.Hack.Shiz.(kcloud)] [Backdoor/Win32.Shiz] [BScope.Trojan-Spy.Zbot] [Win32/Spy.Shiz.NCF] [Trojan.Win32.Weelsof] [W32/Kryptik.SHU!tr] [SHeur4.KGI]
ecbdcf103052f1537798e5b27e1f2538	[Backdoor.Shiz] [Artemis!ECBDCF103052] [Backdoor] [Trojan] [Trojan/Spy.Shiz.ncf] [Trojan.Win32.Ibank.itqau] [WS.Reputation.1] [Win.Trojan.Shiz-924] [Backdoor.Win32.Shiz.afai] [Backdoor.Shiz!U9tzO5GNNXQ] [TrojWare.Win32.Kryptik.WKC] [Trojan.PWS.Ibank.456] [Heuristic.LooksLike.Win32.Suspicious.B] [Backdoor/Shiz.bnf] [Backdoor/Win32.Shiz] [Win32/Spy.Shiz.NCF] [Backdoor.Win32.Shiz] [W32/Shiz.XDB!tr] [SHeur4.JBS]
8893d41a606a3d64a2df1f96d3ff22ee	[Backdoor] [Backdoor/Shiz.akwi] [Backdoor.Shiz!Pbq/9zfaqw8] [Backdoor.Trojan] [Shiz.AF] [Backdoor.Win32.Shiz.aloi] [Backdoor.Win32.Shiz!IK] [UnclassifiedMalware] [Trojan.PWS.Ibank.456] [BDS/Shiz.akkq] [Mal/Simda-C] [Backdoor/Shiz.bpk] [Backdoor/Win32.Shiz] [Backdoor.Shiz.akkq] [Backdoor.Trojan] [Backdoor.Win32.Shiz] [W32/Kryptik.MHG!tr] [SHeur4.KSX]
c2f0664ffe506c36d5368bf5fd04b2ea	[HW32.Packed.486B] [Trojan.Simda.A5] [Trojan.Shiz.Win32.378] [Backdoor/Shiz.akxp] [virus.win32.parite.b] [Win32.Trojan.WisdomEyes.151026.9950.9985] [Heur.AdvML.B] [Win.Trojan.Shiz-209] [Trojan.Win32.Ibank.bcahzs] [Backdoor.Win32.A.Shiz.278528.H[h]] [Mal/Simda-D] [Trojan.PWS.Ibank.456] [BehavesLike.Win32.PWSZbot.dc] [Backdoor/Shiz.bkc] [W32/Kryptik.SHU!tr] [Trojan[Backdoor]/Win32.Shiz] [Trojan.Zusy.D961] [PWS:Win32/Simda] [Backdoor/Win32.Shiz.R19968] [BScope.Trojan-Spy.Zbot] [Win32/Spy.Shiz.NCF] [Backdoor.Shiz!bL4OS+mMc94] [Backdoor.Win32.Shiz] [SHeur4.KXH]

Whois

Property	Value
Name	Registration Private
Organization	Domains By Proxy, LLC
Email	CITOKEC.INFO@domainsbyproxy.com
Zip Code	85260
City	Scottsdale
State	Arizona
Country	US
Phone	+1.4806242599
Fax	+1.4806242598
NameServer	ns2.echo-source.com
Created	2013-07-03 19:21:06
Changed	2015-07-04 11:40:52
Expires	2016-07-03 19:21:06
Registrar	GoDaddy.com, LLC (R1

DNS Resolutions

Date	IP Address
2013-08-23	192.155.89.148 (ClassC)
2018-03-02	204.11.56.48 (ClassC)
2018-06-26	45.33.43.33 (ClassC)
2018-06-26	139.162.148.254 (ClassC)
2018-06-26	96.126.108.195 (ClassC)
2018-06-28	172.105.234.29 (ClassC)
2018-07-14	50.63.202.86 (ClassC)
2018-07-15	50.63.202.93 (ClassC)
2018-07-21	50.63.202.83 (ClassC)
2018-07-29	50.63.202.64 (ClassC)
2018-07-29	50.63.202.67 (ClassC)
2024-05-07	162.249.66.92 (ClassC)
2024-08-30	5.79.71.205 (ClassC)
2024-10-05	85.17.31.122 (ClassC)
2024-10-20	5.79.71.225 (ClassC)
2024-11-05	178.162.203.202 (ClassC)
2024-11-20	85.17.31.82 (ClassC)
2024-12-23	178.162.203.211 (ClassC)
2024-12-26	178.162.217.107 (ClassC)

Subdomains

Date	Domain	IP
www.citokec.info	2024-09-06	178.162.203.211

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]