Domain > dns.msftncsi.com

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as MALICIOUS

Files that talk to dns.msftncsi.com

MD5	A/V
56b0c377460ebf0f41170768166f2a26	[W32.Clod8d8.Trojan.69b4] [Trojan/W32.Blocker.273408.C] [Trojan-Ransom.Win32.Blocker!O] [Trojan.Small.BH5] [Downloader-FKD!56B0C377460E] [Worm.Email.FKMS] [Trojan.Rodecap.Win32.1646] [Trojan/Rodecap.bb] [Trojan.Win32.DownLoad3.bfoedn] [WS.Reputation.1] [Malware] [Trojan.Rodecap!hNMXQZds5AI] [Trojan.DownLoad3.19515] [TR/Small.bhooum] [Trojan[Ransom]/Win32.Blocker] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rootkit] [Hoax.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BAF!tr]
486b6de4123190069a8bc58eb13935f0	[W32.Clod9af.Trojan.ff69] [Downloader-FKE!486B6DE41231] [Trojan.Rodecap] [Trojan/Rodecap.bb] [WS.Reputation.1] [Malware.GA] [Trojan.Win32.PEF.crgklq] [Trojan.DownLoader8.15048] [Trojan.Rodecap.Win32.1701] [TR/Small.bhoumb] [TROJ_RODECAP.SMO] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BBC!tr]
5c7400ab1dca3f0303abd52342d0cdd6	[W32.Clod44b.Trojan.5310] [Downloader-FLS!5C7400AB1DCA] [Trojan.FakeMS.ED] [Trojan/Rodecap.ba] [Trojan.Win32.Fakealert.bgharl] [WS.Reputation.1] [Malware.GA] [Trojan.Rodecap!N6MucA/anyk] [PE:Trojan.Small!6.11AE] [Trojan.Fakealert.35494] [Trojan.Rodecap.Win32.1617] [TR/Dldr.Small.445112] [TROJ_RODECAP.SMO] [Trojan[:HEUR]/Win32.Unknown] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Small] [Trojan.Win32.Small] [W32/Rodecap.BA!tr] [Win32/DH{IGYDYQ8}]
0f7c751d43e1224848db7b53f7a23a51	[W32.Cloda8a.Trojan.6259] [Downloader-FKE!0F7C751D43E1] [Trojan.Rodecap] [Trojan/Rodecap.bb] [Trojan.Win32.PEF.crajli] [Downloader] [Malware.GA] [Trojan.Rodecap!e20y+1egIK4] [Trojan.BitAcc.25] [Trojan.Rodecap.Win32.1672] [Worm/Small.BH.2] [TROJ_RODECAP.SMO] [Heuristic.BehavesLike.Win32.Suspicious.H] [Trojan[:HEUR]/Win32.Unknown] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rodecap] [PE:Trojan.Small!6.177B] [Trojan.Win32.Small] [W32/Rodecap.BBC!tr]
00176ddc0b567fa4dfce97e1c0e37ed0	[W32.Clod8d8.Trojan.69b4] [Trojan/W32.Blocker.273408.C] [Trojan-Ransom.Win32.Blocker!O] [Trojan.Small.BH5] [Downloader-FKD!00176DDC0B56] [Worm.Email.FKMS] [Trojan.Rodecap.Win32.1646] [Trojan/Rodecap.bb] [Trojan.Win32.DownLoad3.bfoedn] [WS.Reputation.1] [Malware] [Trojan.Rodecap!hNMXQZds5AI] [Trojan.DownLoad3.19515] [TR/Small.bhooum] [Heuristic.LooksLike.Win32.Suspicious.I] [Trojan[Ransom]/Win32.Blocker] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rootkit] [Hoax.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BAF!tr]
1b9bd9bddb0ed9acd67c06748015a3a6	[Downloader-FLS!1B9BD9BDDB0E] [Trojan.FakeMS.ED] [Trojan/Rodecap.ba] [Trojan.Rodecap!AJbSBPNAdb8] [Downloader] [Smalltroj.ACUSQ] [TROJ_RODECAP.SMO] [Trojan.Win32.StartPage.brmegq] [Trojan.StartPage.48840] [Trojan.Rodecap.Win32.1612] [BehavesLike.Win32.Downloader.gh] [TR/Dldr.Small.445112] [Trojan[:HEUR]/Win32.Unknown] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Small] [PE:Trojan.Small!6.204] [Trojan.Win32.Small] [W32/Rodecap.BA!tr] [Win32/DH{gRKBEyCBDmYDYQ}] [Trojan.Win32.Rodecap.bBA] [Win32/Trojan.098]
5fa272c39dc74f69519c830c8973f0a0	[Trojan/W32.Blocker.273408.C] [Trojan-Ransom.Win32.Blocker!O] [Trojan.Small.BH5] [Downloader-FKD!5FA272C39DC7] [Worm.Email.FKMS] [Trojan/Rodecap.bb] [Trojan.Rodecap!hNMXQZds5AI] [WS.Reputation.1] [Malware] [Trojan.Win32.DownLoad3.bfoedn] [Trojan.DownLoad3.19515] [Trojan.Rodecap.Win32.1646] [TR/Small.bhooum] [Trojan[Ransom]/Win32.Blocker] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rootkit] [Hoax.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BAF!tr]
54223e35febd439bcbdcaad068db2e01	[W32.Cloda8a.Trojan.6259] [Downloader-FKE!54223E35FEBD] [Trojan.Rodecap] [Trojan/Rodecap.bb] [Trojan.Rodecap!e20y+1egIK4] [Downloader] [Malware.GA] [Trojan.Win32.PEF.crajli] [Trojan.BitAcc.25] [Trojan.Rodecap.Win32.1672] [Worm/Small.BH.2] [TROJ_RODECAP.SMO] [Heuristic.BehavesLike.Win32.Suspicious.H] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rodecap] [Trojan.Win32.Small] [W32/Rodecap.BBC!tr] [Win32/Trojan.29d]
cff87a113f20e2f624893bf9400b11fe	[Downloader-FIK!CFF87A113F20] [Trojan.FakeMS] [Trojan/Rodecap.ba] [Trojan] [Trojan-Downloader] [Trojan.Win32.XPACK.bykqba] [WS.Reputation.1] [Smalltroj.ACEVQ] [Trojan-Ransom.Win32.Foreign.fxpn] [Trojan.DownLoader9.43635] [Heuristic.BehavesLike.Win32.Suspicious.H] [Trojan:Win32/Small.BH] [Trojan/Win32.Small] [Trojan.Win32.Small] [W32/Rodecap.BA!tr] [Win32/Cryptor]
4d4b245c343e37c9e37814c2f27a38f1	[PWS-FAJK!4D4B245C343E] [Trojan.Rodecap] [WS.Reputation.1] [Malware.GA] [Trojan.DownLoader11.5672] [TR/Crypt.Xpack.65911] [TROJ_RODECAP.SMO] [Trojan:Win32/Small.BH] [Trojan/Win32.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BBC!tr] [Win32/Cryptor]
3fe4bda9a79737984534f4d76308bfa1	[W32.Clod8d8.Trojan.69b4] [Trojan/W32.Blocker.273408.C] [Trojan-Ransom.Win32.Blocker!O] [Trojan.Small.BH5] [Downloader-FKD!3FE4BDA9A797] [Worm.Email.FKMS] [Trojan.Rodecap.Win32.1646] [Trojan/Rodecap.bb] [Trojan.Win32.DownLoad3.bfoedn] [WS.Reputation.1] [Malware] [Trojan.Rodecap!hNMXQZds5AI] [Trojan.DownLoad3.19515] [TR/Small.bhooum] [Trojan[Ransom]/Win32.Blocker] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rootkit] [Hoax.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BAF!tr]
1f0a37d7a47f2a2884738cc281cc2dd1	[W32.Clod8d8.Trojan.69b4] [Trojan/W32.Blocker.273408.C] [Trojan-Ransom.Win32.Blocker!O] [Trojan.Small.BH5] [Downloader-FKD!1F0A37D7A47F] [Worm.Email.FKMS] [Trojan/Rodecap.bb] [Trojan.Rodecap!hNMXQZds5AI] [WS.Reputation.1] [Malware] [Trojan.Win32.DownLoad3.bfoedn] [Trojan.DownLoad3.19515] [Trojan.Rodecap.Win32.1646] [TR/Small.bhooum] [Trojan[Ransom]/Win32.Blocker] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rootkit] [Hoax.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BAF!tr] [Win32/Trojan.8f2]
1be71eeaad0d5161c6540ab0ceb1d900	[W32.Clod8d8.Trojan.69b4] [Trojan/W32.Blocker.273408.C] [Trojan-Ransom.Win32.Blocker!O] [Trojan.Small.BH5] [Downloader-FKD!1BE71EEAAD0D] [Worm.Email.FKMS] [Trojan/Rodecap.bb] [Trojan.Win32.DownLoad3.bfoedn] [WS.Reputation.1] [Malware] [Trojan.Rodecap!hNMXQZds5AI] [Trojan.DownLoad3.19515] [Trojan.Rodecap.Win32.1646] [TR/Small.bhooum] [Trojan[Ransom]/Win32.Blocker] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rootkit] [Hoax.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BAF!tr]
0e6bf5757275bc3e9536d591a1f34990	[W32.Clod4bf.Trojan.7468] [Trojan/W32.Blocker.273408.C] [Trojan.Small.BH5] [Downloader-FKD!0E6BF5757275] [Worm.Email.FKMS] [Trojan.Rodecap.Win32.1646] [Trojan/Rodecap.bb] [Trojan.Win32.DownLoad3.bfoedn] [WS.Reputation.1] [Malware] [Trojan.Rodecap!hNMXQZds5AI] [Trojan.DownLoad3.19515] [TR/Small.bhooum] [Heuristic.LooksLike.Win32.Suspicious.I] [Trojan[Ransom]/Win32.Blocker] [Win32.Troj.Undef.(kcloud)] [Trojan:Win32/Small.BH] [Trojan/Win32.Rootkit] [Hoax.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BAF!tr] [Win32/Trojan.5a8]
a1ae35eadf7599d2f661a9ca7f0f2150	[Trojan/W32.Blocker.375808] [Downloader-FKE!A1AE35EADF75] [Trojan.Rodecap] [Trojan-Downloader] [Trojan/Rodecap.bb] [Trojan.Win32.Small.bxmiyg] [Downloader] [Malware.AINVX] [TROJ_RODECAP.SMO] [Trojan-Ransom.Win32.Blocker.bvxm] [Trojan.Rodecap!5w7YcBnLy20] [Trojan.DownLoader9.44777] [TR/Small.bhoumb] [Heuristic.BehavesLike.Win32.Suspicious.H] [Trojan:Win32/Small.BH] [Trojan/Win32.Blocker] [Trojan.Win32.Small] [W32/Rodecap.BBC!tr]
803eea87771080e03975c2df83e5ec81	[Backdoor.Win32.Mutopy!O] [Trojan.Mutopy.A] [Trojan/Jorik.Mutopy.au] [Win32.Trojan.WisdomEyes.151026.9950.9991] [TROJ_MUTOPY.SMYN] [Trojan.Win32.Jorik.reixf] [Troj.Dropper.W32.Dapato.lCcB] [Troj/Dapato-A] [TrojWare.Win32.Kazy.TFT] [Trojan.DownLoader6.8357] [Trojan.Jorik.Win32.79167] [TROJ_MUTOPY.SMYN] [BehavesLike.Win32.Worm.gm] [Trojan/Jorik.cmtx] [Win32.Troj.Jorik.au.(kcloud)] [Trojan:Win32/Mutopy.A] [Trojan.Naffy.1] [Trojan/Win32.HDC] [Artemis!803EEA877710] [Trojan.Mutator.01632] [Trojan.Rodecap!dzEWTzDwD44] [Trojan.Win32.Jorik] [W32/Dapato.AA!tr] [Win32/Cryptor]
39a170f3c46d555c9f836a15d5de743e	[W32.Clod816.Trojan.215e] [Backdoor.Win32.Mutopy!O] [Trojan.Mutopy.A] [Trojan.Jorik.Win32.79167] [Trojan/Jorik.Mutopy.au] [Trojan.Naffy.1] [Win32.Trojan.WisdomEyes.151026.9950.9991] [TROJ_MUTOPY.SMYN] [Troj.Dropper.W32.Dapato.lCcB] [TrojWare.Win32.Kazy.TFT] [Trojan.DownLoader6.8357] [TROJ_MUTOPY.SMYN] [Troj/Dapato-A] [Trojan/Jorik.cmtx] [Trojan:Win32/Mutopy.A] [Trojan.Win32.Bucbi.435712[h]] [Trojan/Win32.HDC] [Trojan.Mutator.01632] [Trojan.Rodecap!dzEWTzDwD44] [Trojan.Win32.Jorik] [W32/Dapato.AA!tr] [Win32/Cryptor]

Whois

Property	Value
Name	Domain Administrator
Organization	Microsoft Corporation
Email	domains@microsoft.com
Address	One Microsoft Way
Zip Code	98052
City	Redmond
State	WA
Country	US
Phone	1--4258828080
Fax	1--4259367329
NameServer	ns3.msft.net
Created	2005-11-10 22:06:51
Changed	2014-11-07 06:31:01
Expires	2015-11-10 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2014-05-30	131.107.255.255 (ClassC)
2025-08-06	131.107.255.255 (ClassC)

Subdomains

Date	Domain	IP
dns.msftncsi.com	2014-05-30	131.107.255.255
www.msftncsi.com	2014-11-16	107.14.32.98

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]