home

nktorr.net

Domain Information

Server location:
Victoria, Australia (AU)

ASN:
AS133618 TRELLIAN-AS-AP Trellian Pty. Limited,AU

The domain nktorr.net has been seen to resolve to the following IP address.

103.224.182.241
lb-182-241.above.com
September 18, 2016

File downloads found at URLs served by nktorr.net.

0 / 68
https://nktorr.net/JTdDRCUwQyVDNCU4OCVGMCVGRCUxMSUxOW4lRTglQzhiJUZEJTIwJTlDJUI5JTNEJUZDJURCJTBEJTg0JUIzJTAweCVDMiU4NSUwNCU4QyUyMiUyRiU4Q2olRjglQURtbDIlOEUlOUIlQjQlMjUlRDI1JUE0JTFGJThBJUQ1JUQ1ciVGNSVBMCU4OUFCJUREJThGJTk0JTg1JUI5TFglOUQlMUElREElM0IlQ0MlQzJ4JUVCJURBJTBCJTAwJTBEJUE4XzclMTclOEIlQjElOUMlRDElMDUlQUFPTW0lMTBaJUNBJTE5JTlDSiVBMSUwMiU3RiU4MDIlQTIlQzMlQUMlMDclMkN5JUQzJTlCaE8lQ0F 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  (finding_nemo__720p_brrip_x264_-_yify.zip)

1 / 68      (PUP)
https://nktorr.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 JUJFJTNBJUUwJUM1QTAlRjglRjkwJTBEJTE4JUU0JUQ2JUJDJUFBJUVFJTI4JUY4JTBCJTNEJThDRyUyMG4lNUUlQ0ElMDElQzglRjglMTQwJThEJUNCbVglQkQlQ  (marauders.2016.hdrip.xvid-etrg.exe)

0 / 68
https://nktorr.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  (5e220900-3edd-e519-e559-3020a4533659_1d1e431ca0900fb)

The following 12 files have been seen to comunicate with nktorr.net in live environments.

TCP » 103.224.182.241:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 103.224.182.241:80
uplus.exe (LoadMoneyWebSite)

TCP » 103.224.182.241:80
7tkkmsa v1.5.1.exe (KMS Activator by 7pm Tech)

TCP » 103.224.182.241:80
y03fd24.tmp

TCP » 103.224.182.241:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 103.224.182.241:80
torrent-search.exe (torrent-search)

TCP » 103.224.182.241:3000
dopipjen.exe

TCP » 103.224.182.241:80
online-guardian-v2.0.9.exe

TCP » 103.224.182.241:80
rlvknlg.exe (Relevant-Knowledge by TMRG)

TCP » 103.224.182.241:80
skype_addon.crx

TCP » 103.224.182.241:3000
fzegwzshmv.exe (Mmradpzyxy nasxbzmaqh epdrtoxayhvufidy xwldikaaz fvfm by Yyqlkf gweeginvoxdfd dcaliect mmvqzaspb ryitflkjseyc zsiydrsyv)

TCP » 103.224.182.241:3000
fuheabyq.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.