Domain > parsons.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports

http://blog.malwaremustdie.org/2016/02/mmd-0052-20...

https://otx.alienvault.com/pulse/56b855ea4637f20e8...

Files that talk to parsons.com

MD5	A/V
3fb83eaf2a665f71ac2065f5f6956d50	[HW32.CDB.5da2] [Packed.Win32.Katusha.1!O] [Trojan.Win32.Hlux.cynagk] [Trojan.FakeAV] [Kryptik.CDQY] [Win32/Kelihos.GeEUUIB] [Backdoor.Win32.Hlux.dqkq] [Backdoor.Hlux!m6CCC6SKjdo] [Win32.Backdoor.Hlux.Lose] [Backdoor.Win32.Hlux.DUHE] [Trojan.Packed.26581] [Trojan[Backdoor]/Win32.Hlux] [Win32.Hack.Hlux.dq.(kcloud)] [Backdoor:Win32/Kelihos.F] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/Hlux.BWUN!tr.bdr] [Crypt_s.GNC] [Backdoor.Win32.Hlux.aDM]
9844a1b8a10ed4568240ae7a528bef5d	[HW32.CDB.Bf28] [Backdoor.Kelihos] [Malware.Packer.OCD] [Trojan.PWS.Tepfer!vHSA+Pr89Pk] [Kryptik.CCFN] [Win32/Kelihos.baJHSHD] [Trojan-PSW.Win32.Tepfer.tokd] [Trojan.Win32.Kryptik.cvtteo] [UnclassifiedMalware] [BackDoor.Slym.13304] [TR/Crypt.EPACK.53967] [Mal/Kelihos-A] [Backdoor:Win32/Kelihos] [Trojan/Win32.Tepfer] [Heur.Trojan.Hlux] [Trojan.Crypt_s] [W32/FakeAv.BWUN!tr] [Crypt_s.GCT] [Trojan.Win32.InfoStealer.AZ] [Win32/Trojan.65e]
d6a71b4d3098eab4dddab30fddbaef35	[FakeSecTool-FCX!D6A71B4D3098] [Malware.Packer.FFS] [BackDoor.SlymENT.2075] [Heuristic.LooksLike.Win32.Suspicious.E] [PE:Malware.XPACK/RDM!5.1]
18e1ec2d3092fa3be2c970ce91ef31a0	[HW32.CDB.4548] [RDN/q2z-art6.s_318383!a] [Trojan.Win32.Slym.cxaqmr] [Kryptik.CCFN] [Backdoor.Win32.Hlux.dnxw] [BackDoor.Slym.13348] [Mal/FakeAV-UF] [Trojan[Backdoor]/Win32.Hlux] [Backdoor:Win32/Kelihos] [Heur.Trojan.Hlux] [Win32/Kryptik.CASL] [W32/Hlux.BWUN!tr.bdr] [Trojan.Win32.Kryptik.CASL] [Win32/Trojan.337]

Whois

Property	Value
Name	- Hostmaster
Organization	Parsons
Email	hostmaster@parsons.com
Address	100 West Walnut St
Zip Code	91124
City	Pasadena
State	CA
Country	US
Phone	+1.6264402000
NameServer	NS2.P18.DYNECT.NET
Created	1994-12-22 05:00:00
Changed	2014-12-29 16:44:49
Expires	2023-12-21 00:00:00
Registrar	DYNAMIC NETWORK SERV

DNS Resolutions

Date	IP Address
2014-07-08	206.219.196.72 (ClassC)
2014-11-27	206.219.196.160 (ClassC)
2025-07-16	76.223.77.191 (ClassC)
2025-07-30	13.248.212.3 (ClassC)

Port 80

Port 443

Subdomains

Date	Domain	IP
bahrainremotegw1.parsons.com	2025-07-24	15.184.10.142
txdal11mx03.parsons.com	2014-07-08	206.219.199.111
appsetra.parsons.com	2025-01-23	3.163.158.128
jobs.parsons.com	2024-06-28	44.242.99.40
investors.parsons.com	2024-07-07	23.46.17.5
www.parsons.com	2025-07-14	141.193.213.21
investorday.parsons.com	2024-07-04	104.70.127.4

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]