Help RSS API Feed Maltego Contact                        

Domain > dns.dubkill.com

Welcome! Right click nodes and scroll the mouse to navigate the graph.
More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to dns.dubkill.com
MD5A/V
0af5e4dc1bd8c8f010f301fca98f4441[Exploit.Shellcode.BM] [Exploit.ComObj.CVE-2012-0158.hzuf] [Shellcode.B] [HEUR_RTFEXP.A] [Win32.Exploit.Cve-2012-0158.Rino] [MSWord/Toolbar.A!exploit] [virus.exp.20120158]
dda14a21e790cb5fcc5fe7bca6667253
bc4fecb110142ad8769b0ea229ed799b
067074a1ba02a9520fe027a54f7af8f0
6f3ff872c95f73a331d0735ca47c4189
db6a2c838a1beedbd3751bdddb63470b
ff67076dff1dad9daf6ac5551815a409
d25f6ad50ebace15bea66410849b8fea
1ef2dd6a1e020cb3ab293f0dd49bf968
03a8aeaa954ccb11ef2a5d7bb7f0805a
500449d5bd1b05b4f0c4127987416996
0f0c9e1dfc278687d00cffeef7d3f942[Exploit.CVE-2012-0158.Heur] [Exp.RTF.CVE-2012-0158] [Shellcode.B] [MX97:ShellCode-AD]
d0e5322989634947434de78c8905b57a[Exploit.ComObj.CVE-2012-0158.hzuf] [Trojan.Mdropper] [Exploit.CVE2012-0158.49] [TROJ_ARTIEF.HVE] [Troj/RTFExp-BF] [Exploit.CVE-2012-0158.d] [MSOffice/CVE20120158.fam!exploit]
4caf2ad48b35dcf339640971a7f57ba1
9d52aabcba7d259fdbc0cfdd77ac0043
dcd9ae18989d6644c94d7879c1f7b304
9cbf9b6726865d73b739915a909b9368

Whois
PropertyValue
Email [email protected]
NameServer NS2.MYHOSTADMIN.NET
Created 2013-12-12 00:00:00
Changed 2013-12-12 00:00:00
Expires 2015-12-12 00:00:00
Registrar CHENGDU WEST DIMENSI

DNS Resolutions
DateIP Address
2014-06-29112.175.79.57 (ClassC)
2014-07-01127.0.0.1 (ClassC)
2014-11-04112.175.79.57 (ClassC)
2015-04-07194.14.179.119 (ClassC)
2015-06-0964.185.231.66 (ClassC)
2015-07-07115.23.172.232 (ClassC)
2015-08-1064.185.229.141 (ClassC)
2015-09-0761.195.97.202 (ClassC)
2015-12-10127.0.0.1 (ClassC)
2016-05-12141.8.226.14 (ClassC)
2016-05-26208.91.197.197 (ClassC)
2016-07-14199.83.131.93 (ClassC)
2016-08-03192.230.66.93 (ClassC)
2016-11-13192.230.92.93 (ClassC)
2017-01-31104.130.124.96 (ClassC)
2017-02-2545.33.9.234 (ClassC)
2017-04-05204.11.56.37 (ClassC)
2017-05-13-
2018-05-11204.11.56.48 (ClassC)
2018-06-20208.91.197.46 (ClassC)
2018-09-13153.148.104.226 (ClassC)
2018-09-28114.147.100.59 (ClassC)
2018-10-12153.148.89.140 (ClassC)
2018-10-19153.148.100.79 (ClassC)
2018-11-180.0.0.0 (ClassC)
2018-12-26153.148.21.134 (ClassC)
2019-01-12153.159.238.151 (ClassC)
2019-01-20153.249.14.225 (ClassC)
2019-02-25153.158.115.67 (ClassC)
2019-04-13153.250.171.0 (ClassC)
2019-05-13153.155.81.110 (ClassC)
2019-07-18153.155.242.73 (ClassC)
2019-08-08153.154.107.186 (ClassC)
2019-08-27153.154.68.166 (ClassC)
2019-10-16153.147.117.138 (ClassC)
2019-10-27153.155.24.145 (ClassC)
2019-11-06153.251.227.136 (ClassC)
2019-12-09153.234.210.49 (ClassC)

Port 80

Subdomains
DateDomainIP
ww4.dubkill.com2016-05-0469.64.147.12
ww7.dubkill.com2016-09-14192.230.92.93
asia.dubkill.com2016-05-05141.8.226.14
data.dubkill.com2016-10-16192.230.92.93
web.dubkill.com2014-09-1159.188.87.103
home.dubkill.com2014-03-20112.175.79.49
monre.dubkill.com2016-05-16141.8.226.14
update.dubkill.com2014-05-02127.0.0.1
website.dubkill.com2014-11-06112.175.79.55
cig.dubkill.com2016-05-16141.8.226.14
sexgai.dubkill.com2014-08-1859.188.87.103
cgi.dubkill.com2016-05-16141.8.226.14
offplanet-porn.randy-malware-maugans-addthis-wordpress-book.dubkill.com2016-09-06192.230.92.93
imm.dubkill.com2016-05-04141.8.226.14
air.dubkill.com2016-08-07192.230.92.93
images.dubkill.com2015-04-0361.195.97.204
dns.dubkill.com2014-11-04112.175.79.57
iss.dubkill.com2016-05-04141.8.226.14
news.dubkill.com-112.175.79.56
moveit.dubkill.com2016-12-27104.130.124.96
moit.dubkill.com2014-11-20112.175.79.53
lqmt.dubkill.com2016-05-05141.8.226.14
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status