Domain > www.hq.dynssl.com

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?

Most users have voted this as MALICIOUS

Reports

https://raw.githubusercontent.com/citizenlab/malwa...

https://raw.githubusercontent.com/fireeye/pivy-rep...

https://www.fireeye.com/blog/threat-research/2013/...

https://www.fireeye.com/resources/pdfs/fireeye-poi...

Files that talk to www.hq.dynssl.com

MD5	A/V
05c00705a5d3b62bec3b3777a9933673
1f43738b1f67266fdafd73235acbf338	[Trojan/Poison.nfu] [Trojan] [Trojan.Poison.cjwro] [Backdoor.Darkmoon] [Win.Trojan.Dropper-128] [Backdoor.Win32.Poison.ckqm] [Trojan.Inject!XYvzznRebWY] [Backdoor.Win32.A.Poison.140288] [Heur.Suspicious] [BackDoor.Poison.767] [Mal/Resin-A] [Trojan/Sasfis.okr] [Win32.Hack.Poison.(kcloud)] [Trojan/Win32.Npkon] [Backdoor.Poison.chkf] [Backdoor.Darkmoon!rem] [Win32/Poison.NFU] [Backdoor.Win32.Poison]
026871ea3d6cbbeb90fea6bf2906cc12	[W32.Clodd5f.Trojan.97c0] [Trojan.Inject.HH] [Backdoor.Win32.Poison!O] [Backdoor/Poison.ckqm] [Trojan.Win32.Poison.cqrsq] [Backdoor.Darkmoon] [BKDR_POISON.ZA] [Backdoor.Win32.Poison.ckqm] [Backdoor.Poison.AGXN] [Backdoor.Win32.A.Poison.10752.S] [UnclassifiedMalware] [BackDoor.Poison.767] [Mal/Resin-A] [Trojan/Pincav.hid] [Trojan[Backdoor]/Win32.Poison] [Backdoor:Win32/Poison.E] [Trojan/Win32.Injector] [BackDoor.Poison] [Backdoor.Win32.Poison] [W32/Krypt.F!tr] [Backdoor.Win32.Poison.AII] [BackDoor!dpw]
4713557e3ed2ced62ceccbe4d07314b4	[W32.Clod5e9.Trojan.98df] [Backdoor.Win32.Poison!O] [Backdoor.Poison.ckqm] [Trojan/Poison.nfu] [Trojan.Win32.Poison.cqrsq] [Backdoor.Darkmoon] [Win.Trojan.Dropper-128] [Backdoor.Win32.Poison.ckqm] [Backdoor.Poison.AGXN] [Backdoor.Win32.A.Poison.140288] [UnclassifiedMalware] [BackDoor.Poison.767] [Mal/Resin-A] [Trojan/Sasfis.okr] [Trojan[Backdoor]/Win32.Poison] [Win32.Hack.Poison.(kcloud)] [Backdoor:Win32/Poison.E] [Trojan/Win32.Npkon] [BackDoor.Poison] [Win32/Poison.NFU] [PE:Trojan.Win32.FakeAlert.ny!1075348125] [Trojan-Dropper.Win32.Malf] [Win32/Trojan.8cf]
cd151586b11090878fc495f3cea59525	[Script.SWF.Cxx] [Exploit] [PDF/Obfuscated.JS] [Expl_ShellCodeSM] [PUA.Script.PDF.EmbeddedJavaScript] [Exploit.JS.Pdfka.dqv] [Script.SWF.Cxx] [Exploit.JS.ShellCode!IK] [Script.SWF.Cxx] [SCRIPT.Virus] [EXP/CVE-2011-0611.J] [Expl_ShellCodeSM] [Heuristic.BehavesLike.PDF.Suspicious.O] [Troj/PDFJs-RQ] [Exploit:Win32/Pdfdrop.E] [Script.SWF.Cxx] [Exploit.JS.ShellCode] [PDF/Pdfka.EQK!tr] [Exploit]

Whois

Property	Value
Name	Network OperationsZZZ, ChangeIP
Email	noc@changeip.com
Address	1200 Brickell Avenue
Zip Code	33131
City	Miami
State	FL
Country	US
Phone	+1.8007913367
Fax	+1.7862246593
NameServer	NS3.CHANGEIP.ORG
Created	2005-05-28 02:00:00
Changed	2013-04-23 02:00:00
Expires	2015-05-28 00:00:00
Registrar	NETWORK SOLUTIONS, L