Help RSS API Feed Maltego Contact                        

Domain > www.msnet.proxydns.com

This indicator is referenced in AlienVault OTX pulse ""

Is this malicious?
Most users have voted this as MALICIOUS

Reports
https://raw.githubusercontent.com/citizenlab/malwa...    
https://raw.githubusercontent.com/fireeye/pivy-rep...    
https://www.fireeye.com/resources/pdfs/fireeye-poi...    

Files that talk to www.msnet.proxydns.com
MD5A/V
05c00705a5d3b62bec3b3777a9933673
026871ea3d6cbbeb90fea6bf2906cc12[W32.Clodd5f.Trojan.97c0] [Trojan.Inject.HH] [Backdoor.Win32.Poison!O] [Backdoor/Poison.ckqm] [Trojan.Win32.Poison.cqrsq] [Backdoor.Darkmoon] [BKDR_POISON.ZA] [Backdoor.Win32.Poison.ckqm] [Backdoor.Poison.AGXN] [Backdoor.Win32.A.Poison.10752.S] [UnclassifiedMalware] [BackDoor.Poison.767] [Mal/Resin-A] [Trojan/Pincav.hid] [Trojan[Backdoor]/Win32.Poison] [Backdoor:Win32/Poison.E] [Trojan/Win32.Injector] [BackDoor.Poison] [Backdoor.Win32.Poison] [W32/Krypt.F!tr] [Backdoor.Win32.Poison.AII] [BackDoor!dpw]

Whois
PropertyValue
NameNetwork OperationsZZZ, ChangeIP
Email noc@changeip.com
Address 1200 Brickell Avenue
Zip Code 33131
City Miami
State FL
Country US
Phone +1.8007913367
Fax +1.7862246593
NameServer NS3.CHANGEIP.ORG
Created 2005-05-05 02:00:00
Changed 2014-01-23 01:00:00
Expires 2015-01-16 00:00:00
Registrar NETWORK SOLUTIONS, L

DNS Resolutions
DateIP Address
2012-02-22202.65.222.45 (ClassC)
2013-05-03127.0.0.1 (ClassC)
2014-04-26127.0.0.1 (ClassC)
2015-01-0259.188.237.176 (ClassC)
2025-10-27192.241.211.213 (ClassC)

Subdomains
DateDomainIP
srv001.proxydns.com2025-10-11173.252.255.214
ns01.proxydns.com2025-09-2767.215.255.139
c567.7df34df9bb80d491.proxydns.com2014-01-31209.208.4.53
3a20.50e940659e818bb2.proxydns.com2014-01-30209.208.4.53
www2.proxydns.com2025-10-2259.188.196.172
ftp.www2.proxydns.com2025-10-0259.188.196.172
yqeln3.proxydns.com2025-09-2343.153.176.66
microsoft14.proxydns.com2025-10-03137.175.36.31
ftp.microsoft14.proxydns.com2025-10-02137.175.36.31
www.microsoft14.proxydns.com2025-10-15137.175.36.31
uwovf4.proxydns.com2025-09-09204.16.169.54
grgsdgf055.proxydns.com2025-08-3166.232.121.44
socks5.proxydns.com2014-10-27210.209.86.145
dvfsdvbgsdg178.proxydns.com2025-10-02209.190.19.20
heuorvner79.proxydns.com2025-10-2743.163.233.79
amazon-bnfkjda.proxydns.com2025-08-20155.94.129.17
terrda.proxydns.com2025-09-11122.10.88.26
wdqgregdfa.proxydns.com2025-08-17204.16.169.54
dwefsa.proxydns.com2025-09-23156.236.74.86
htrhdsfsa.proxydns.com2025-10-03198.55.123.185
proxyweb.proxydns.com2015-05-1881.166.122.234
ljhgkyub.proxydns.com2025-08-10198.55.123.185
eujrc.proxydns.com2025-09-18172.217.24.15
gfjyjgfgfd.proxydns.com2025-08-28198.55.123.185
4fsdtgd.proxydns.com2025-08-25198.55.123.185
pwqsdsd.proxydns.com2025-10-24204.16.169.54
gwk97e.proxydns.com2025-09-12156.236.74.86
kukcne.proxydns.com2025-10-03204.16.169.54
www.windowsupdate.proxydns.com2025-10-22204.16.169.54
state.proxydns.com2013-12-12127.0.0.1
ftp.state.proxydns.com2025-09-10192.241.211.213
www.state.proxydns.com2015-01-0258.64.153.157
sdewsfsdf.proxydns.com2025-10-06204.16.169.54
amazon-tmgfdsf.proxydns.com2025-10-03198.55.103.15
amazon-mfdsf.proxydns.com2025-10-03198.55.103.15
jythfgsf.proxydns.com2025-08-20204.16.169.54
king.proxydns.com2013-12-28114.248.108.58
stone.king.proxydns.com2015-01-05172.16.100.18
rouji.king.proxydns.com2013-08-06114.248.108.58
ftp.king.proxydns.com2013-12-28114.248.108.58
www.king.proxydns.com2013-12-28114.248.108.58
xsafdsdsg.proxydns.com2025-10-04198.55.123.185
vgjfyfug.proxydns.com2025-09-12204.16.169.54
dsafregdfh.proxydns.com2025-10-17198.55.123.185
nrutovrtv80rtvmi.proxydns.com2025-09-03204.16.169.54
cuhk.proxydns.com2015-06-2459.188.0.195
facebook.proxydns.com2013-10-0165.249.95.104
vxyr0l.proxydns.com2025-08-25204.16.169.54
consilium.proxydns.com2013-09-2758.64.153.157
www.consilium.proxydns.com2010-08-2150.7.244.10
european.proxydns.com2015-07-1858.64.153.157
ftp.european.proxydns.com2025-09-26192.241.211.213
www.european.proxydns.com2013-12-12127.0.0.1
garmin.proxydns.com2025-10-11210.61.233.110
verizon.proxydns.com2014-03-1059.188.0.197
www.verizon.proxydns.com2013-09-0558.64.153.157
www.Verizon.ProxyDNS.com2013-08-27103.31.241.110
dirco.proxydns.com2025-10-27108.177.97.148
astaro.proxydns.com2019-07-19153.155.242.73
webserver.proxydns.com2015-01-02188.226.194.251
www.webserver.proxydns.com2013-05-10202.65.220.64
wwww.webserver.proxydns.com2025-10-04204.16.169.54
flashplayer.proxydns.com2013-09-05198.96.92.108
setinfor.proxydns.com2013-12-19192.241.149.43
www.setinfor.proxydns.com2013-08-07192.241.149.43
amazon-yudas.proxydns.com2025-08-20198.55.103.15
fergtfdds.proxydns.com2025-09-28204.16.169.54
rgthgfds.proxydns.com2025-10-02204.16.169.54
vcdfnrfds.proxydns.com2025-10-0847.91.11.190
hytrgdsfds.proxydns.com2025-10-05198.55.123.185
www.jnnytrfjhfdgds.proxydns.com2025-08-08198.55.123.185
grtejfgds.proxydns.com2025-10-04198.55.123.185
microsoftservices.proxydns.com2015-02-11103.229.125.157
www.microsoftservices.proxydns.com2015-02-11103.229.125.157
uhytrhdgs.proxydns.com2025-08-31198.55.123.185
ewgrehfgs.proxydns.com2025-09-24204.16.169.54
microsoftbooks.proxydns.com2025-10-27195.123.241.252
ftp.dnstrans.proxydns.com2016-08-02114.147.110.191
proxychains.proxydns.com2014-03-03151.236.18.81
yourself-yours.proxydns.com2025-09-27204.16.169.54
poker-hollywood-online-ts.proxydns.com2025-09-2894.198.97.203
voanews.proxydns.com2013-12-12127.0.0.1
ftp.voanews.proxydns.com2025-08-16192.241.211.213
www.voanews.proxydns.com2012-02-23202.65.222.45
mohamedfarahat.ProxyDNS.com2025-10-03198.98.104.16
act.proxydns.com2025-09-2469.12.87.130
connect.proxydns.com2025-10-02199.15.113.28
ftp.connect.proxydns.com2025-10-06199.15.113.28
www.connect.proxydns.com2025-10-02199.15.113.28
www.fconet.proxydns.com2015-07-31103.245.209.24
msnet.proxydns.com2025-09-25192.241.211.213
ftp.msnet.proxydns.com2025-09-22192.241.211.213
ww.msnet.proxydns.com2025-10-20192.241.211.213
www.msnet.proxydns.com2012-02-22202.65.222.45
microsoft.proxydns.com2013-04-01202.65.220.64
www.microsoft.proxydns.com2013-12-12127.0.0.1
e2qhpt.proxydns.com2025-09-09204.16.169.54
t6b7rt.proxydns.com2025-10-03204.16.169.54
support.proxydns.com2025-10-0198.137.149.56
ftp.support.proxydns.com2025-10-0998.137.149.56
www.support.proxydns.com2025-10-0298.137.149.56
googlesupport.proxydns.com2016-02-09213.183.56.230
svchost.proxydns.com2025-10-09192.241.211.213
ftp.svchost.proxydns.com2025-10-24192.241.211.213
ctx-eu.proxydns.com2025-10-21204.16.169.54
7gbpsu.proxydns.com2025-10-05156.236.74.86
vevbyeiv7e9rv.proxydns.com2025-10-0743.163.201.174
enuroverwerv.proxydns.com2025-10-02204.16.169.54
www.proxydns.com2025-09-28204.16.169.54
swengdfdsd5y.proxydns.com2025-10-0143.163.201.174
ftp.newsdaily.proxydns.com2014-04-06209.208.4.53
www.newsdaily.proxydns.com2014-04-06209.208.4.53
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information