Help RSS API Feed Maltego Contact                        

Domain > niudoudou.com

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

http://blogs.cisco.com/security/talos/malicious-pn...    
https://otx.alienvault.com/pulse/54ee63dc13432a12b...    

Files that talk to niudoudou.com

MD5A/V
8d9e26724a4ccd2a42c515e5a62d5489[Trojan*Win32/Danginex] [Trojan.Downloader-110291] [Downloader.gz]
38a9f89feda118813ae0b338674e084d[Artemis!38A9F89FEDA1] [Trojan/Downloader.Adload.nfl] [Trojan-Downloader] [Infostealer.Gampass] [W32/Malware.WJVG] [TROJ_DLOADR.SMOY] [Trojan.Downloader-112631] [Trojan-PWS.SuspectCRC!IK] [UnclassifiedMalware] [Trojan.MulDrop3.8050] [Trojan:Win32/Orsam!rts] [Trojan-PSW.Gampass] [Trojan-PWS.SuspectCRC] [Trj/CI.A]
3cf9d4271c8b285c8a7e58c1e3eade03[Trojan*Win32/Danginex] [Trojan.Downloader-112866]

Whois

PropertyValue
Email Domain@WangGuai.com
NameServer F1G1NS2.DNSPOD.NET
Created 2015-02-24 00:00:00
Changed 2015-03-06 00:00:00
Expires 2016-02-24 00:00:00
Registrar BIZCN.COM, INC.

DNS Resolutions

DateIP Address
2010-02-08117.135.140.162 (ClassC)
2010-11-0461.155.169.24 (ClassC)
2013-05-2065.19.157.194 (ClassC)
2014-06-26107.148.38.83 (ClassC)
2014-10-20108.187.157.104 (ClassC)
2015-02-26103.232.215.137 (ClassC)
2024-04-2343.128.56.249 (ClassC)
2025-01-1647.236.50.192 (ClassC)
2025-08-13140.188.81.16 (ClassC)

Port 80

Subdomains

DateDomainIP
www.niudoudou.com2013-12-1167.212.160.166
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information