Domain > backaviation.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to backaviation.com

MD5	A/V
d2f2c9e7b5d32c5114a2f8511d9efcc2
a472f9d1a78fa6cb3eb6896d9c319726	[TrojanDownloader.Cutwail.bs] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btelgd] [WS.Reputation.1] [BKDR_PUSHDO.FC] [Backdoor.Win32.Pushdo.qgz] [Backdoor.Pushdo!+jNmAzmKgNc] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.RMSR-3833] [Trojan.CryptHWZ] [W32/Pushdo.QGZ!tr.bdr] [Crypt.CHWZ] [Trj/Pushdo.L]
e9a5bc168334d1c8371468d3e033ad32
6bd3a60b66efb707e894f2717cccf17b
2263766e2732eb5e6eb78b5d35423883	[Crypt2.BTUL] [TrojanDownloader*Win32/Cutwail.BS]
34961ffc0f75d89da0b9464a4c7a02b1	[Backdoor.Win32.Pushdo.qag] [BackDoor.Bulknet.893] [Win32.Heur.KVMF58.hy.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Trojan-Downloader.Win32.Cutwail]
2ba1c7eb19cc61d8cfb858e81b613787	[Crypt2.BVGD] [RDN/Downloader.a!nu] [TrojanDownloader*Win32/Cutwail.BS]
8b7c5fe0eaad467bb999a2c1f7dd7486	[TrojanDownloader.Cutwail] [Backdoor.Bot] [Riskware] [Trojan.Win32.Pushdo.btaipu] [W32.Pilleuz] [TROJ_CUTWAIL.CNA] [Win32.Trojan] [Backdoor.Win32.Pushdo.qhe] [UnclassifiedMalware] [BackDoor.Bulknet.893] [Win32.HeurC.KVMH004.a.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [W32/Backdoor.IQVD-6602] [Trojan.CryptILH] [W32/Pushdo.QHE!tr.bdr] [Crypt.CILH] [Trj/Pushdo.L]
7e265cfaa3a92f9b07c518dcbe577262	[Crypt_s.BOF] [TrojanDownloader*Win32/Cutwail.BS]
e3346adfbe598fe8dacfcf07debecc50	[TrojanDownloader*Win32/Cutwail.BS]
622bf7ba2317ae03b0682a650bac03d8	[TrojanDownloader.Cutwail] [Cutwail-FBPN!622BF7BA2317] [W32.Pilleuz] [Pushdo.I] [TROJ_SPNR.1ADR13] [Backdoor.Win32.Pushdo.pyz] [Backdoor.Pushdo!kokJ8DxObyw] [Heur.Suspicious] [BackDoor.Bulknet.893] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor.Win32.U.Pushdo.41472] [Backdoor/Win32.Pushdo] [W32/Backdoor.PJEO-2224] [Backdoor.Pushdo] [Malware.Pilleuz!rem] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PYZ!tr.bdr] [SHeur4.BGUF] [Trj/OCJ.D]
680438c58773658c1905d58c040f78d4	[VirTool*Win32/Injector.CL]
b7d2d2a8a4d14b8b74cc88009e28ae66	[Trojan/W32.Small.41984.VJ] [Backdoor.Win32.Pushdo!O] [TrojanDownloader.Cutwail.BS5] [Downloader-FKK!B7D2D2A8A4D1] [Suspicious.Cloud.5] [Pushdo.J] [BKDR_PUSHDO.SMP] [Backdoor.Win32.Pushdo.pvu] [Trojan.Win32.Pushdo.cramya] [Backdoor.Win32.Pushdo.41984.B] [Trojan.Inject1.19222] [Backdoor/Pushdo.yv] [Win32.Hack.Pushdo.p.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor/Win32.Pushdo] [Backdoor.Pushdo] [Win32/Wigon.PH] [Trojan-Downloader.Win32.Cutwail] [W32/Pushdo.PVU!tr.bdr]
06d40abb65ee157ff2574df8d24743f1
9377d78f1f97104f41a6b42b195c8e51	[SHeur4.BLZU]
ea5a2c72517c76e822324540ec9f1f7a	[TrojanDownloader.Cutwail] [Trojan/Wigon.ph] [Riskware] [Trojan.Win32.XPACK.bgffjt] [W32.Pilleuz] [TROJ_WIGON.AW] [UnclassifiedMalware] [BackDoor.Bulknet.739] [Heuristic.BehavesLike.Win32.Suspicious.D] [Troj/WIGON-A] [TrojanDownloader:Win32/Cutwail.BW] [W32/Trojan.JDWF-4093] [Dropper/Win32.Dorifel] [Malware.Pilleuz!rem] [Win32/Wigon.PH] [Trojan.SuspectCRC] [W32/Wigon.PH] [SHeur4.AZVH]
82d62080e472af17170f4752ebd4ebd1	[W32.Pilleuz] [Pushdo.G] [Backdoor.Win32.Pushdo.pwz] [Heur.Suspicious] [BackDoor.Bulknet.847] [TrojanDownloader:Win32/Cutwail.BS] [Backdoor.Win32.S.Pushdo.36864] [W32/Backdoor.SFNI-6924] [Malware.Pilleuz!rem] [Win32/Wigon.PH] [Trojan.Crypt] [W32/Pushdo.PWZ!tr.bdr] [SHeur4.BFXO]
a423bbddf78450753f1a239711408b91	[Crypt_c.ABJD] [TrojanDownloader*Win32/Cutwail.BS]
ed3e876d7a262ce652521ec12ed5cd5d	[PWS-Zbot-FAOE!ED3E876D7A26] [Backdoor.Bot] [W32.Pilleuz] [TROJ_SPNR.14C513] [Backdoor.Win32.Ruskill.rgr] [Heur.Suspicious] [BackDoor.Bulknet.846] [TR/Dldr.Cutwail.BS.76] [Mal/EncPk-AFN] [Win32.Hack.Ruskill.r.(kcloud)] [TrojanDownloader:Win32/Cutwail.BS] [Trojan/Win32.Inject] [W32/Backdoor.GGHQ-3653] [Malware.Pilleuz!rem] [Suspicious] [Trojan.Win32.Inject] [W32/EncPk.AFN!tr] [Trj/OCJ.D]
e4fac37c735dcccfffd80373bcf31985

Whois

Property	Value
Name	UBM Aviation Worldwide Limited
Organization	UBM Aviation Worldwide Limited
Email	dnsmaster@ubmaviation.com
Address	450 Capability Green
Zip Code	LU1 3LU
City	Luton
State	Beds
Country	GB
Phone	+1582.600111
NameServer	ns2.oag.com
Created	2000-05-11 20:03:24
Changed	2015-05-08 08:20:59
Expires	2016-05-11 00:00:00
Registrar	CSC CORPORATE DOMAIN

DNS Resolutions

Date	IP Address
2013-08-27	193.23.116.131 (ClassC)

Subdomains

Date	Domain	IP
backmir2.backaviation.com	2025-12-08	193.23.116.138
www.backaviation.com	2025-12-12	193.23.116.131

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]