Domain > nexus.passport.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to nexus.passport.com

MD5	A/V
f618b057cf78ad3e26b88a30b1a0dc7f	[W32.Clod70a.Trojan.bfc6] [Artemis!F618B057CF78] [WS.Reputation.1]
ab5a9b83ff13640ef224a638b81b2313	[Artemis!AB5A9B83FF13] [Trojan.Kryptik.Win32.879765] [Trojan-Ransom.Win32.Gimemo.cdeu] [Malware.Obscure/Heur!1.9E03] [BehavesLike.Win32.Xiquitir.fh] [Trojan.Gimemo.ml] [W32/Gimemo.CDEU!tr] [Win32.Trojan.Gimemo.Lnoc] [Trojan.Win32.Crypt] [Crypt5.BDWL]
5233cfdde7008d2e5b07c1938c6c9fab

Whois

Property	Value
Name	Domain Administrator
Organization	Microsoft Corporation
Email	domains@microsoft.com
Address	One Microsoft Way
Zip Code	98052-6399
City	Redmond
State	WA
Country	US
Phone	1--4258828080
Fax	1--4259367329
NameServer	ns1.msft.net
Created	1996-10-02 04:00:00
Changed	2015-03-18 10:47:35
Expires	2017-10-01 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2014-01-10	131.253.61.103 (ClassC)
2021-03-16	40.90.23.63 (ClassC)
2022-05-20	40.126.31.73 (ClassC)
2022-07-23	20.190.160.17 (ClassC)
2022-07-25	20.190.152.20 (ClassC)
2022-08-22	20.190.160.22 (ClassC)
2022-09-08	20.190.154.138 (ClassC)
2023-05-15	40.126.31.67 (ClassC)
2023-09-23	20.190.152.21 (ClassC)
2024-05-13	20.190.151.70 (ClassC)
2024-06-15	20.190.151.67 (ClassC)
2024-07-27	40.126.53.17 (ClassC)
2024-10-20	20.190.151.133 (ClassC)
2024-11-22	20.190.190.193 (ClassC)
2024-12-30	40.126.62.131 (ClassC)
2025-02-15	20.190.190.132 (ClassC)
2025-04-25	20.190.190.196 (ClassC)
2025-05-05	20.190.151.69 (ClassC)
2025-06-03	20.190.151.9 (ClassC)
2025-06-14	20.190.151.7 (ClassC)
2025-06-24	40.126.62.129 (ClassC)
2025-06-28	20.190.151.6 (ClassC)
2025-06-28	20.190.151.132 (ClassC)
2025-07-08	20.190.190.129 (ClassC)
2025-08-31	20.190.151.131 (ClassC)
2025-09-07	20.190.190.195 (ClassC)
2025-10-02	40.126.62.130 (ClassC)
2025-10-21	20.190.190.131 (ClassC)
2025-10-29	40.126.62.132 (ClassC)
2025-11-25	20.190.151.68 (ClassC)
2026-02-14	20.190.190.130 (ClassC)

Subdomains

Date	Domain	IP
lc1.bay0.hotmail.passport.com	2013-04-01	65.55.237.73
lc2.bay0.hotmail.passport.com	2014-12-16	65.55.157.144
lc1.law13.hotmail.passport.com	2014-12-21	65.55.157.145
lc3.law13.hotmail.passport.com	2013-11-06	64.4.56.151
lc1.law5.hotmail.passport.com	2025-11-26	204.79.197.208
www.hotmail.passport.com	2014-05-26	65.55.143.17
nexus.passport.com	2014-01-10	131.253.61.103
www.passport.com	2024-06-28	65.54.187.42

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]