Help RSS API Feed Maltego Contact                        

Domain > newss.effers.com

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?
Most users have voted this as MALICIOUS

Reports
https://www.fireeye.com/blog/threat-research/2014/...    

Files that talk to newss.effers.com
MD5A/V
8455bbb9a210ce603a1b646b0d951bce[Backdoor.Tranikpik] [BackDoor-FBSR] [Backdoor.ZXShell] [ZXProxy.AB] [Backdoor.Win32.S.ZxPlug.86016] [UnclassifiedMalware] [BDS/Tranikpik.A] [BKDR_ZXSHELL.V] [Troj/ZxShell-A] [Backdoor:Win32/Tranikpik.A] [Win-Trojan/Backdoor.86016.R] [BScope.Trojan.SvcHorse.01643] [Backdoor.Win32.Tranikpik]
e3eae5ec827bc0e48caa16d7319e37e1[BackDoor-FBSR!E3EAE5EC827B] [Backdoor*Win32/Tranikpik.A]
84536c2157e9b22ac9d17b3a6e032121

Whois
PropertyValue
NameHostmaster Manager
Organization North Loop Networks
Email hostmaster@northloopnetworks.com
Address 1807 3rd st ne
Zip Code 55418
City Minneapolis
State MN
Country US
Phone +1.6123855501
NameServer NS2.DTDNS.COM
Created 2003-04-13 19:34:51
Changed 2014-02-27 16:46:06
Expires 2015-04-13 00:00:00
Registrar DNC Holdings, Inc.

DNS Resolutions
DateIP Address
2014-02-13118.99.60.142 (ClassC)
2014-02-24118.99.60.142 (ClassC)
2014-04-0954.213.146.215 (ClassC)
2014-10-27192.241.211.213 (ClassC)
2024-06-17192.64.151.240 (ClassC)
2024-07-1791.199.82.208 (ClassC)
2024-08-2482.97.206.25 (ClassC)
2026-02-06192.64.151.235 (ClassC)

Port 80

Subdomains
DateDomainIP
avito1111.effers.com2025-08-30192.64.151.235
hostnamessimply1.effers.com2024-06-20192.64.151.240
update3.effers.com2013-12-1858.64.158.224
gespracentsimpsa.effers.com2026-01-25192.64.151.235
4polineta.effers.com2024-06-06192.64.151.240
bbsngacc.effers.com2026-01-18192.64.151.235
splashed.effers.com2024-06-16192.64.151.240
worldwildlife.effers.com2024-08-1582.97.206.25
weronif.effers.com2013-05-05192.168.0.1
df67mg.effers.com2024-06-06192.64.151.240
shopping.effers.com2026-01-19192.64.151.235
adminlog.effers.com2012-07-18108.171.118.176
adobeflash.effers.com2014-12-23198.199.75.95
papperbell.effers.com2024-06-06192.64.151.240
academyawards.effers.com2014-12-1482.141.230.146
bjllgvtms.effers.com2024-06-06192.64.151.240
carcolors.effers.com2016-12-0960.244.52.29
newss.effers.com2014-10-27192.241.211.213
reports.effers.com2014-02-1658.64.158.224
sdroot.effers.com2026-01-13192.64.151.235
decrypt.effers.com2014-05-29103.249.84.90
vtcafv.effers.com2024-07-1791.199.82.208
spotify.effers.com2024-09-0282.97.206.25
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information