Domain > noaa.gov

More information on this domain is in AlienVault OTX

Is this malicious?

Most users have voted this as MALICIOUS

Files that talk to noaa.gov

MD5	A/V
d42c1a59b111316f7481770349e653db	[HW32.CDB.87f3] [Malware.Packer.OCD]
165f5084043893cc35334b568d0f6ec0	[HW32.CDB.73df] [Packed.Win32.Katusha.3!O] [Win32.Malware!Drop] [Backdoor.Hlux!tc7SLh6zR0c] [WS.Reputation.1] [Kryptik.CCFN] [UnclassifiedMalware] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CBNK] [Backdoor.Win32.Kelihos] [W32/Kryptik.BD!tr] [Crypt_s.GPC] [Backdoor.Win32.Hlux.aBgj] [Win32/Trojan.337]
4b93f892d9249b70508ee222e37ee1c6	[HW32.CDB.E823] [TrojanPSW.Tepfer.r3] [Trojan.Win32.Kryptik.cxbvtz] [WS.Reputation.1] [Kryptik.CCFN] [Trojan-PSW.Win32.Tepfer.txbj] [Trojan.PWS.Tepfer!TcJrQOwJyhs] [Mal/FakeAV-UF] [BackDoor.Slym.13348] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[PSW]/Win32.Tepfer] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Win32.Kryptik.CAUP] [Trojan.Crypt_s] [W32/Tepfer.CAUP!tr.pws] [Crypt_s.GMK]
8835f7fb6071ec49aaac1e7a87231c81	[HW32.CDB.56ce] [Backdoor.Hlux.r3] [Backdoor.Hlux!1YBsnlQ+0io] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dllz] [Trojan.Win32.Kryptik.cxcjig] [Trojan.Packed.26544] [Heuristic.LooksLike.Win32.Suspicious.E] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Kryptik.BWUN!tr] [Trojan.Win32.Kryptik.CASU] [Win32/Trojan.337]
86122dbf79ec3a983d9ecb120470a00f	[Artemis!86122DBF79EC] [Trojan.Win32.Yakes.fhyw] [TR/Changeling.A.3509] [Win32.Trojan.Yakes.Dyfy] [Trojan.Win32.Spammer] [Win32/Cryptor] [Trojan.Win32.Spammer.bAC] [Win32/Trojan.Multi.daf]
30faa031b0c6122bc91cff8996474b4a	[HW32.CDB.E594] [Trojan.Inject2]
fe734b28009c7dd5389f64d72722bb21
18e1ec2d3092fa3be2c970ce91ef31a0	[HW32.CDB.4548] [RDN/q2z-art6.s_318383!a] [Trojan.Win32.Slym.cxaqmr] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnxw] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]
D18C6EDB768E000117EEEEA3D5FC89BE
91ec0bd8f97b27339e7ea54409ca8942	[W32.HfsAdware.7463]
3b960fcca8cb1afe1733bdf700c4eb87	[PUP.Optional.StormAlerts.A] [PUA.Downloader] [ADWARE/Verti.144632] [PUA.Win32.Verti.O]
7dcada47db261ccd331554e12dccfd89	[W32.HfsAdware.98B9] [Adware.StormAlerts.B] [Adware.StormAlerts.B] [Adware.StormAlerts.B] [Adware.Stormalerts.170160[h]] [Adware.StormAlerts.B] [Adware.StormAlerts.B] [Adware.Plugin.1059] [Adware.StormAlerts.B] [Adware.StormAlerts.B] [PUA.StormAlerts]
d7ddff6de02b498ecc42542d47d95187
b30c8458df0f2432765f6561d935a2ce
1929530a1f2d6d48a87aac928220e460	[HW32.CDB.4199] [Backdoor.Hlux.r3] [Trojan.Win32.Hlux.cwwgjj] [Kryptik.CCFN] [Backdoor.Win32.Hlux.crc] [Backdoor.Hlux!GJ0f5FTmyog] [UnclassifiedMalware] [BackDoor.Slym.14056] [Heuristic.LooksLike.Win32.Suspicious.E] [Mal/Kelihos-A] [Trojan[Backdoor]/Win32.Hlux] [Trojan:Win32/Sisron] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Win32.SuspectCrc] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GJB] [Trojan.Win32.Kryptik.BZWV] [Win32/Trojan.e55]

DNS Resolutions

Date	IP Address
2012-01-05	216.38.80.81 (ClassC)
2012-06-12	140.172.17.11 (ClassC)
2012-08-13	80.239.148.24 (ClassC)
2013-05-29	140.90.101.29 (ClassC)
2013-08-17	140.172.184.1 (ClassC)
2013-10-15	140.90.33.21 (ClassC)
2013-10-15	140.90.200.11 (ClassC)
2013-11-13	205.156.4.133 (ClassC)
2014-03-24	129.15.96.21 (ClassC)
2014-05-30	140.172.17.21 (ClassC)
2014-06-06	129.15.96.13 (ClassC)
2014-06-06	140.172.17.13 (ClassC)
2014-06-24	140.172.12.74 (ClassC)
2014-06-24	205.156.4.109 (ClassC)
2014-06-24	216.38.80.73 (ClassC)
2014-06-24	140.90.213.166 (ClassC)
2014-06-25	140.90.78.215 (ClassC)
2014-10-29	192.0.78.13 (ClassC)
2014-11-11	140.90.238.27 (ClassC)
2014-11-11	140.90.107.15 (ClassC)
2014-12-09	205.156.57.226 (ClassC)
2019-10-09	140.90.200.21 (ClassC)
2024-12-19	137.75.88.7 (ClassC)
2024-12-26	137.75.88.52 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
www.ssd1.noaa.gov	2024-11-25	140.90.213.166
ns-03.noaa.gov	2024-12-23	137.75.112.58
preserveamerica.noaa.gov	2024-06-30	137.75.88.12
wcda.noaa.gov	2024-12-25	140.172.17.21
teacheratsea.noaa.gov	2024-08-16	3.163.24.51
www.teacheratsea.noaa.gov	2024-01-13	99.84.238.104
www.nesdisia.noaa.gov	2024-07-02	3.163.24.115
americansamoa.noaa.gov	2024-08-02	104.46.101.59
www.nepa.noaa.gov	2024-03-14	204.246.191.126
www.nhcpara.noaa.gov	2024-07-17	99.84.66.124
www.sab.noaa.gov	2024-12-22	3.163.24.43
www.photolib.noaa.gov	2024-05-21	140.90.71.48
www-ndbc-nws.lb.noaa.gov	2024-09-28	140.90.238.27
www.fdtb.noaa.gov	2024-02-10	108.138.246.14
wdtb.noaa.gov	2024-07-11	140.90.254.21
www.wdtb.noaa.gov	2013-07-08	129.15.111.20
ndbc.noaa.gov	2024-02-18	204.246.191.23
hfradar.ndbc.noaa.gov	2024-09-03	140.90.238.64
www.ndbc.noaa.gov	2019-10-15	13.224.2.86
www.hpcc.noaa.gov	2024-06-08	18.161.6.25
www.apec.noaa.gov	2024-09-29	18.161.6.10
www.gc.noaa.gov	2024-09-27	3.163.24.47
www.nhc.noaa.gov	2013-04-01	129.15.96.11

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]