Help RSS API Feed Maltego Contact                        

Domain > www.virustotal.com

More information on this domain is in AlienVault OTX

Is this malicious?

Reports
https://otx.alienvault.com/pulse/569229ca67db8c057...    
https://otx.alienvault.com/pulse/56accf974637f2355...    
https://www.virustotal.com/en/ip-address/104.28.11...    
https://www.virustotal.com/en/ip-address/212.70.65...    

Files that talk to www.virustotal.com
MD5A/V
BF42B59BE70069A2309FDB3E3625196A
d0a82e88f968fe4661c24f70ea46dda6[HW32.Packed.A784] [PCK/MSIL.Confuser]
a4a42170007d74cc026edd4e4b780610[Trojan/W32.Badur.5120.C] [Trojan/Flooder.Tiny.a] [Trojan.Win32.XPACK.dbpklq] [W32/A-98306f38!Eldorado] [Suspicious.AD] [Downloader.HKMZ] [Win32/Tnega.GHUXfLD] [TROJ_VFLOOD.SMCF] [Trojan.Win32.Badur.ilcp] [PE:Trojan.Win32.Vflooder.b!1075355856] [TrojWare.Win32.VTFlooder.A] [Trojan.Flood.22062] [BehavesLike.Win32.VTFlooder.zh] [Trojan/Badur.ebk] [Trojan/Win32.Badur] [Win32.Troj.ADClicker.(kcloud)] [Trojan:Win32/Vflooder.A] [Trojan.Badur] [Trojan.Win32.Badur.aPoT] [Win32.Trojan.Badur.Lmue] [Trojan.Win32.TrojanClicker] [Clicker.BGOU]
28D91305F127A7AB8F2731A7E7C20233[Note:]
5CEDF5BECC9BCA3B1A5F3F44098FDA83
d4bfb8672037e91663655415b18ef17b
910D84E3C03BE29F366A69A66CCD8FB4[HW32.Packed.4371] [BehavesLike.Win32.Backdoor.dc]
c83bce5338e46065bd8ca29e126bc240
f3f18ae9279ded8d5873e08b95c909d7[PUP.Optional.LiveSoft]
7d3424f7b569267988a37ce2f23035ed[PCK/MSIL.Confuser] [Win32.SuspectCrc]
dd3186eec247fc4f35ccbcba27c43f2d[Trojan/W32.Vtflooder.4096] [Trojan.Poison.SM] [Trojan.Win32.XPACK.dchhcu] [W32/S-a4f8b1c8!Eldorado] [Flooder.EZ] [Win32/Tnega.HHQSIEB] [Trojan.Flood.22061] [Adware.iBryte.Win32.1062] [TROJ_VFLOOD.SM] [BehavesLike.Win32.VTFlooder.xm] [Trojan/Vtflooder.a] [Trojan:Win32/Vflooder.A] [SScope.Trojan.Flooder.4614] [Trojan.Win32.Vtflooder] [Flooder.LYI]
db95c38b9a0d79ff97554227da508042[Trojan/W32.Vtflooder.4096] [Trojan.Poison.SM] [Trojan.Win32.XPACK.dchhcu] [W32/S-a4f8b1c8!Eldorado] [Flooder.EZ] [Win32/Tnega.HHQSIEB] [Trojan.Flood.22061] [TROJ_VFLOOD.SM] [BehavesLike.Win32.VTFlooder.xm] [Trojan/Vtflooder.a] [Trojan:Win32/Vflooder.A] [SScope.Trojan.Flooder.4614] [Trojan.Win32.Vtflooder] [Flooder.LYI]
d8d28f1a88db51523e6badcfeefd2e05
c04034e059e0d2d7dbb382ffa6d886cd[Trojan.Poison.SM] [Posible_Worm32] [Trojan.Win32.XPACK.dbcsdj] [WS.Reputation.1] [Flooder.EZ] [Flooder.LYI]
c298dcd013756409643daf309b8c0d7e[W32.FamVT.Badur.C.Trojan] [Trojan/W32.Badur.5120.B] [Trojan.Tiny.Win32.1455] [Posible_Worm32] [Trojan.CL.Tiny!+1dbnR4NgtU] [W32/S-a4f8b1c8!Eldorado] [Suspicious.AD] [Downloader.HKMZ] [Win32/Tnega.IWJUcbD] [Trojan.Win32.Badur.ilcp] [Trojan.Win32.XPACK.dlnpqg] [Win32.Trojan.Badur.Sxoa] [TrojWare.Win32.VTFlooder.A] [Trojan.Flood.22062] [TROJ_VFLOOD.SMCF] [BehavesLike.Win32.Spybot.zh] [W32/S-a4f8b1c8!Eldorado] [Trojan/Badur.ebk] [Win32.Troj.ADClicker.(kcloud)] [Trojan:Win32/Vflooder.B] [Trojan.Badur] [Trojan.Win32.Badur.ilcp] [Win32/TrojanClicker.Tiny.NAM] [PE:Trojan.Win32.Vflooder.b!1075355856] [Trojan.Crypt] [Clicker.BGOU] [Win32/Trojan.Flooder.987]
c222ddbe5af51fcad51d861e5c27184f[Trojan/W32.Vtflooder.4096] [Trojan.Poison.SM] [Adware.iBryte.Win32.1062] [W32/S-a4f8b1c8!Eldorado] [WS.Reputation.1] [Flooder.EZ] [Win32/Tnega.HHQSIEB] [TROJ_VFLOOD.SM] [Trojan.Win32.Vtflooder.b] [Trojan.Win32.XPACK.dchhcu] [Trojan.Flood.22061] [TROJ_VFLOOD.SM] [BehavesLike.Win32.AdwareRBlast.xm] [W32/S-a4f8b1c8!Eldorado] [Trojan/Vtflooder.a] [Trojan:Win32/Vflooder.A] [SScope.Trojan.Flooder.4614] [Trojan.Win32.Flooder.bNAS] [PE:Trojan.Win32.Vflooder.a!1075355849] [Trojan.Win32.Vtflooder] [Flooder.LYI] [Win32/Trojan.Flooder.0d1]
c0249c1636127b6c025cffe931d34813[Trojan.Downloader.JQUM] [Trojan/W32.Badur.5120.B] [VTFlooder!D49A7B886385] [Posible_Worm32] [Trojan.CL.Tiny!+1dbnR4NgtU] [Suspicious.AD] [Trojan.Downloader.JQUM] [Trojan.Win32.XPACK.dbpklq] [Trojan.Downloader.JQUM] [TrojWare.Win32.VTFlooder.A] [Trojan.Downloader.JQUM] [Trojan.Flood.22062] [TR/Crypt.Xpack.82312] [Trojan/Badur.ebk] [Win32.Troj.ADClicker.(kcloud)] [Trojan:Win32/Vflooder.B] [Trojan.Downloader.JQUM] [Trojan.Badur] [Win32/TrojanClicker.Tiny.NAM] [Trojan.Crypt] [W32/TrojanClicker_Tiny.NAM!tr] [Clicker.BGOU]
c37ba365a1c3f438759c7a019a745097[Trojan/W32.Vtflooder.4096] [Trojan.Poison.SM] [W32/S-a4f8b1c8!Eldorado] [Flooder.EZ] [Win32/Tnega.HHQSIEB] [TROJ_VFLOOD.SM] [Trojan.Win32.Vtflooder.b] [Trojan.Win32.XPACK.dchhcu] [PE:Trojan.Win32.Vflooder.a!1075355849] [Trojan.Flood.22061] [Adware.iBryte.Win32.1062] [TROJ_VFLOOD.SM] [BehavesLike.Win32.AdwareRBlast.xm] [W32/S-a4f8b1c8!Eldorado] [Trojan/Vtflooder.a] [Trojan:Win32/Vflooder.A] [SScope.Trojan.Flooder.4614] [Trojan.Win32.Vtflooder] [Flooder.LYI]
c34b3de3857100bbe8eb989ef34a730e[Trojan/W32.Vtflooder.4096] [Trojan.Poison.SM] [Trojan.Win32.XPACK.dchhcu] [W32/S-a4f8b1c8!Eldorado] [WS.Reputation.1] [Flooder.EZ] [Win32/Tnega.HHQSIEB] [TROJ_VFLOOD.SM] [Trojan.Win32.Vtflooder.b] [PE:Trojan.Win32.Vflooder.a!1075355849] [Trojan.Flood.22061] [Adware.iBryte.Win32.1062] [TROJ_VFLOOD.SM] [BehavesLike.Win32.AdwareRBlast.xm] [W32/S-a4f8b1c8!Eldorado] [Trojan/Vtflooder.a] [Trojan:Win32/Vflooder.A] [SScope.Trojan.Flooder.4614] [Trojan.Win32.Vtflooder] [Flooder.LYI] [Trojan.Win32.Flooder.bNAS] [Win32/Trojan.Flooder.09c]
c5a42bd879ed3d185b8b6b2ab700fc6f[Trojan/W32.Badur.5120.C] [Trojan.Tiny.Win32.1455] [Trojan/Flooder.Tiny.a] [Trojan.Win32.XPACK.dmcnyt] [W32/A-98306f38!Eldorado] [Suspicious.AD] [Downloader.HKMZ] [Win32/Tnega.GHUXfLD] [Trojan.Win32.Badur.ilcp] [Win32.Trojan.Badur.Szbg] [TrojWare.Win32.VTFlooder.A] [Trojan.Flood.22062] [TROJ_VFLOOD.SMCF] [BehavesLike.Win32.Spybot.zh] [Trojan/Badur.ebk] [Trojan/Win32.Badur] [Win32.Troj.ADClicker.(kcloud)] [Trojan:Win32/Vflooder.A] [Trojan.Badur] [Trojan.Win32.Badur.AkJ] [Win32/Flooder.Tiny.A] [Trojan.Win32.TrojanClicker] [Clicker.BGOU] [Win32/Trojan.8d6]

Whois
PropertyValue
Email bernardo@virustotal.com
NameServer NS2.GOOGLE.COM
Created 2002-09-18 00:00:00
Changed 2014-01-08 00:00:00
Expires 2020-09-18 00:00:00
Registrar MARKMONITOR INC.

DNS Resolutions
DateIP Address
2014-10-2974.125.34.46 (ClassC)
2021-09-19172.16.17.18 (ClassC)
2022-09-1511.23.33.44 (ClassC)
2022-09-22104.244.42.193 (ClassC)
2022-09-22104.244.42.65 (ClassC)
2022-09-28104.244.42.1 (ClassC)
2023-02-01104.244.42.129 (ClassC)
2024-11-1574.125.34.46 (ClassC)
2026-01-0834.54.88.138 (ClassC)

Subdomains
DateDomainIP
blog.virustotal.com2013-11-2574.125.194.121
auth-autopush.proactive-autopush.virustotal.com2025-10-31142.250.99.129
avs-control.virustotal.com2025-10-21142.250.217.83
docs.virustotal.com2025-11-2834.117.229.111
developers.virustotal.com2025-12-1834.36.48.223
www.virustotal.com2014-10-2974.125.34.46
View on OTX | View on ThreatMiner








Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]



� Copyright 2019 AlienVault, Inc. | Legal| Status| Do Not Sell My Personal Information