Help RSS API Feed Maltego Contact                        

Domain > his.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.
More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to his.com
MD5A/V
281bba52133b42b0041a72e8baf03600[HW32.CDB.Eca9] [Backdoor.Hlux.r3] [Backdoor.Hlux!xA6rCWjNVLE] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dmfd] [Trojan.Win32.Kryptik.cxbhpv] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [W32/Trojan.KRFJ-3745] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Crypt_s.GME] [Trojan.Win32.Kryptik.CASL]
2c2371e95bb5d87ccd5d19a114492f70[HW32.CDB.18af] [Packed.Win32.Katusha.3!O] [WS.Reputation.1] [Kryptik.CDQY] [TrojWare.Win32.Kryptik.CBCJ] [BackDoor.Slym.13873] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Backdoor.Win32.Kelihos] [Crypt_s.GNC] [Trojan.Win32.Kryptik.CBCJ] [Win32/Trojan.0de]
888cf6888e476ab89daef8385b7ae881[HW32.CDB.B8e4] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cxcinh] [Kryptik.CCFN] [Backdoor.Win32.Hlux.djfk] [Backdoor.Hlux!Jm3TflIszzA] [Mal/Kelihos-A] [TrojWare.Win32.Kryptik.BZOO] [Trojan.DownLoad3.28912] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GHF] [Trojan.Win32.Kryptik.BZIX]
80c5d90b8b923af635628a08738e84d5[Trojan.Inject] [PE:Malware.Obscure!1.9C59]

Whois
PropertyValue
NameServer NS1.HIS.COM
Created 1993-03-08 00:00:00
Changed 2016-02-09 00:00:00
Expires 2017-03-09 00:00:00
Registrar TUCOWS DOMAINS INC.

DNS Resolutions
DateIP Address
2013-04-29216.194.249.118 (ClassC)
2014-05-29216.194.248.195 (ClassC)
2014-10-20216.194.248.233 (ClassC)
2024-12-27108.56.65.29 (ClassC)

Port 80

Port 443

Subdomains
DateDomainIP
NS1.HIS.COM2024-12-09192.241.238.228
time2.his.com2024-06-1545.84.199.136
ns2.his.com2024-12-06134.122.36.158
NS3.HIS.COM2024-12-0695.85.48.55
ns5.his.com2024-12-06192.241.187.110
ns3a.his.com2024-12-0695.85.48.55
smtp-in-ashva.his.com2014-06-18216.194.248.200
studentsabroad.his.com2023-11-2418.220.190.158
time.his.com2024-08-0973.204.221.11
smtp-in-sterling.his.com2014-05-30216.194.248.13
travel.his.com2024-09-1013.58.170.124
childabduction.travel.his.com2023-11-2418.220.190.158
usvisas.travel.his.com2024-05-1418.217.38.127
childrensissues.travel.his.com2024-06-1118.219.36.149
passports.travel.his.com2024-11-2235.165.98.90
adoption.his.com2024-04-1954.202.56.10
NS.HIS.COM2024-12-06104.236.68.216
www.his.com2024-12-06216.194.253.30
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information