Domain > galeon.com

More information on this domain is in AlienVault OTX

Property	Value
Email	dominios@corp.hispavista.com
NameServer	NS2.HISPAVISTA.COM
Created	1998-01-06 00:00:00
Changed	2014-04-30 00:00:00
Expires	2020-01-05 00:00:00
Registrar	ARSYS INTERNET, S.L.

DNS Resolutions

Date	IP Address
2013-05-23	64.211.66.196 (ClassC)
2013-05-31	64.211.69.210 (ClassC)
2013-10-08	64.211.69.210 (ClassC)
2014-08-02	208.49.56.182 (ClassC)
2014-08-02	64.211.66.244 (ClassC)
2015-01-14	64.211.66.69 (ClassC)
2019-12-13	149.12.64.157 (ClassC)
2020-02-05	149.36.226.191 (ClassC)
2020-11-20	172.67.133.51 (ClassC)
2020-11-20	104.28.16.83 (ClassC)
2020-11-20	104.28.17.83 (ClassC)
2021-01-14	104.21.5.82 (ClassC)
2022-01-31	188.114.96.19 (ClassC)
2022-01-31	188.114.96.3 (ClassC)
2022-03-22	188.114.97.3 (ClassC)
2022-04-29	188.114.96.0 (ClassC)
2022-04-29	188.114.97.0 (ClassC)
2022-05-07	188.114.97.6 (ClassC)
2022-06-06	188.114.96.2 (ClassC)
2022-08-10	188.114.97.2 (ClassC)
2024-05-08	188.114.96.7 (ClassC)
2024-05-08	188.114.97.7 (ClassC)
2026-01-08	104.21.24.191 (ClassC)
2026-01-26	172.67.220.28 (ClassC)

HTTP/1.1 200 OKDate: Sun, 13 Aug 2023 20:18:34 GMTContent-Type: text/html; charsetUTF-8Transfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/8.0.30X-Powered-By: PleskLinLast-Modified: Sun,

!DOCTYPE html>html classno-js langen-US>head itemscope itemtypehttp://schema.org/WebSite>meta charsetUTF-8>script>if(navigator.userAgent.match(/MSIE|Internet Explorer/i)||navigator.userAgent.match(/Trident/7..*?rv:11/i)){var hrefdocument.location.href;if(!href.match(/?&nowprocket/)){if(href.indexOf(?)-1){if(href.indexOf(#)-1){document.location.hrefhref+?nowprocket1}else{document.location.hrefhref.replace(#,?nowprocket1#)}}else{if(href.indexOf(#)-1){document.location.hrefhref+&nowprocket1}else{document.location.hrefhref.replace(#,&nowprocket1#)}}}}/script>script>class RocketLazyLoadScripts{constructor(){this.v1.2.3,this.triggerEventskeydown,mousedown,mousemove,touchmove,touchstart,touchend,wheel,this.userEventHandlerthis._triggerListener.bind(this),this.touchStartHandlerthis._onTouchStart.bind(this),this.touchMoveHandlerthis._onTouchMove.bind(this),this.touchEndHandlerthis._onTouchEnd.bind(this),this.clickHandlerthis._onClick.bind(this),this.interceptedClicks,window.addEventListener(pageshow,t>{this.persistedt.persisted}),window.addEventListener(DOMContentLoaded,()>{this._preconnect3rdParties()}),this.delayedScripts{normal:,async:,defer:},this.trash,this.allJQueries}_addUserInteractionListener(t){if(document.hidden){t._triggerListener();return}this.triggerEvents.forEach(e>window.addEventListener(e,t.userEventHandler,{passive:!0})),window.addEventListener(touchstart,t.touchStartHandler,{passive:!0}),window.addEventListener(mousedown,t.touchStartHandler),document.addEventListener(visibilitychange,t.userEventHandler)}_removeUserInteractionListener(){this.triggerEvents.forEach(t>window.removeEventListener(t,this.userEventHandler,{passive:!0})),document.removeEventListener(visibilitychange,this.userEventHandler)}_onTouchStart(t){HTML!t.target.tagName&&(window.addEventListener(touchend,this.touchEndHandler),window.addEventListener(mouseup,this.touchEndHandler),window.addEventListener(touchmove,this.touchMoveHandler,{passive:!0}),window.addEventListener(mousemove,this.touchMoveHandler),t.target.addEventListener(click,thi

Subdomains

Date	Domain	IP
www.galeon.com	2025-11-26	104.21.24.191

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

MD5	A/V
918d4e0a0b7da57ec634dc7d23cd3897	[Trojan.Spy.Banker.ACZC] [Trojan] [Trojan/Jorik.Vobfus.ezmk] [Win32/Bancos.ABNA] [TROJ_SPNR.0BHH12] [Win32.Trojan] [Trojan.Win32.Jorik.Vobfus.ezmk] [Trojan.Vobfus!QYOqsUxJBb0] [UnclassifiedMalware] [Trojan.DownLoader6.31424] [TR/Strictor.3705.1] [Heuristic.LooksLike.Win32.EPO.F] [Mal/Behav-374] [Trojan/Jorik.fmzz] [Win32.Troj.Jorik.(kcloud)] [TrojanDownloader:Win32/Banload.DD] [Trojan/Win32.Banload] [Trojan.Jorik.Vobfus.ezmk] [Win32/TrojanDownloader.Banload.RKO] [Trojan.Win32.FakeAV] [W32/Banload.RKO!tr] [FakeAV.AFQY] [Trj/Thed.A]
667533ba27af807df2dcc4f5126d7c92	[Win32/TrojanDownloader.Banload.VXB] [Troj/Mdrop-GTA] [Trojan.DownLoader13.45795] [Trojan.Win32.Downloader.aa]

Domain > galeon.com

Is this malicious?

Files that talk to galeon.com

Whois

DNS Resolutions

Port 443

Subdomains