Domain > gerardbalian.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to gerardbalian.com

MD5	A/V
828f34161f77fa88449e8ccd39416c84
23389de5677d2f7dcc53c4c55b9aef83	[JS.Downloader] [JS_NEMUCOD.XYZJ]
635ebc401cfbd089cc6d8252786c7387	[JS.Downloader] [TrojanDownloader:JS/Gamarue] [Trojan-Downloader.JS.Gamarue] [Win32/Trojan.Exploit.b4f]
a10742e3de0804cb05339bc9e4d8e919	[Trojan/W32.Yakes.115712.N] [Trojan.Downloader] [Trojan.Win32.Xpack.dztugt] [Backdoor.Trojan] [Win32/TrojanDownloader.Wauchos.BD] [TROJ_DLOADER.YMNHR] [Trojan.Win32.Yakes.otem] [Trojan.Yakes!9sZTJUwctME] [Troj.W32.Yakes!c] [Trojan.DownLoader19.6415] [TROJ_DLOADER.YMNHR] [BehavesLike.Win32.Ramnit.ch] [Trojan.Yakes.gad] [TR/Crypt.Xpack.419126] [Worm:Win32/Gamarue!rfn] [Trojan.Razy.D10C5] [Trojan/Win32.Crypt] [Artemis!A10742E3DE08] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [W32/Yakes.ELIE!tr] [Crypt5.ADOU] [Win32/Trojan.c80]
4d9e25c037ac8ae0ca6548f2d7ad613f	[JS.Downloader] [JS_NEMUCOD.XYZJ] [JS_NEMUCOD.XYZJ]
fed68e37488a9ad3a481b4fafb4d1f4d
dc9db6042cb6ee9509a7fb845866b1b7	[Artemis!DC9DB6042CB6] [Trojan.MalPack] [Uds.Dangerousobject.Multi!c] [Suspicious.Cloud.7.F] [Win32/TrojanDownloader.Wauchos.BD] [Backdoor.Win32.Androm.jcqx] [BehavesLike.Win32.Backdoor.ch] [TR/Crypt.Xpack.443614] [Trojan[Backdoor]/Win32.Androm] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [PossibleThreat.P0] [Crypt5.AGPG]
d4ca874c4ad075a187a774011a0a1ff8
73f1ca61660f590720deb00c86c40259
dbb574abbebda62bfc601dac4a558fc4
0787b4bbd1adeabf4a18c6a15b712ae5	[Backdoor.Win32.Androm.jcqk] [Win32.Trojan.Crypt.Frz] [BehavesLike.Win32.Backdoor.ch] [TR/Crypt.Xpack.443418] [Trojan[Backdoor]/Win32.Androm] [Backdoor.W32.Androm!c] [W32/Androm.EMZI!tr.bdr] [Crypt5.AGPG]
2d2ae1c8d3859315d6fa66c6891d5a8f	[Artemis!2D2AE1C8D385] [Worm.Gamarue] [Backdoor.W32.Androm] [Trojan.Razy.D3C4E] [Trojan.Win32.Xpack.eagmau] [Suspicious.Cloud.9] [Backdoor.Win32.Androm.jdlq] [Trojan.Win32.Z.Razy.105984.A[h]] [Trojan.DownLoader19.23928] [BehavesLike.Win32.Ramnit.ch] [TR/Crypt.Xpack.395642] [Trojan[Backdoor]/Win32.Androm] [Worm:Win32/Gamarue] [Win32.Trojan.Inject.Auto] [Trojan.Win32.Crypt] [W32/Androm.ENUQ!tr.bdr] [Crypt5.AIIJ]
2e6509b54f41b4f70d56a1da3ce63379	[JS/Nemucod.br] [JS.Downloader] [JS/TrojanDownloader.Nemucod.DJ] [JS_CRYPLOD.YYSJO] [JS.S.Downloader.2397[h]] [JS/DwnLdr-NBW] [JS.DownLoader.709] [JS_CRYPLOD.YYSJO] [BehavesLike.JS.Exploit.xv] [JS/Nemucod.DJ!tr.dldr] [HEUR.JS.Trojan.b] [JS/Downloader] [TrojanDownloader:JS/Nemucod] [Js.Trojan-downloader.Nemucod.Htmj] [Trojan-Downloader.JS.Nemucod]
d77fe23d98c90052230b12a4d647590a	[Worm.Gamarue] [Backdoor.Androm.Win32.32287] [Trojan.Win32.Xpack.eagmau] [Backdoor.Win32.Androm.jdln] [Backdoor.Androm!p//6TMFByb4] [Backdoor.W32.Androm] [Win32.Backdoor.Androm.Wrql] [BackDoor.Andromeda.1407] [BehavesLike.Win32.Multiplug.ch] [Backdoor.Androm.dyy] [TR/Crypt.Xpack.395551] [Trojan[Backdoor]/Win32.Androm] [Worm:Win32/Gamarue] [Trojan.Razy.D3C4E] [Worm/Win32.Gamarue] [Trojan.Win32.Crypt] [W32/Androm.JDLN!tr.bdr] [Crypt5.AIIJ]

Whois

Property	Value
NameServer	NS28.DOMAINCONTROL.COM
Created	2013-06-11 00:00:00
Changed	2015-06-12 00:00:00
Expires	2017-06-11 00:00:00
Registrar	GODADDY.COM, LLC

DNS Resolutions

Date	IP Address
2016-01-26	192.34.23.48 (ClassC)
2017-06-17	184.168.221.93 (ClassC)
2017-06-24	50.63.202.93 (ClassC)
2017-07-01	50.63.202.81 (ClassC)
2017-07-10	50.63.202.68 (ClassC)
2017-07-18	50.63.202.83 (ClassC)
2017-07-18	50.63.202.85 (ClassC)
2017-08-02	52.84.63.240 (ClassC)
2017-08-08	54.230.90.163 (ClassC)
2017-08-15	52.84.63.175 (ClassC)
2017-08-29	54.174.104.141 (ClassC)
2017-10-01	50.63.202.63 (ClassC)
2026-01-16	184.105.192.2 (ClassC)

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]