Domain > baerr01.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to baerr01.com

MD5	A/V
06a63729313e674192412a4134678371	[W32.ScarboLTE.Trojan] [Trojan.Win32.Krap.2!O] [PWS-Zbot-FBDR!06A63729313E] [Worm.Dorkbot] [Trojan.Win32.NgrBot.bxpmdm] [W32/A-9610a4de!Eldorado] [W32.IRCBot.NG] [Dorkbot.GUU] [Win32/Dorkbot.ADFTMXC] [TrojWare.Win32.Kryptik.BDBB] [BackDoor.IRC.NgrBot.42] [Worm.Dorkbot.Win32.927] [Possible_DORKBOT] [Backdoor/Androm.rq] [Trojan[Backdoor]/Win32.Androm] [Win32.Troj.Undef.(kcloud)] [Worm:Win32/Dorkbot.I] [Worm/Win32.Luder] [BScope.Backdoor.Andr.3113] [Trj/Dtcontx.E] [Win32/Dorkbot.B] [PE:Worm.Dorkbot!6.B3E] [Worm.Win32.Dorkbot] [W32/Zbot.AOV!tr]
3e8cc36e0c1a6fda3cd17d79a827e2d1	[W32.Salterio.Trojan] [Backdoor/W32.Androm.135168] [Trojan.Win32.Krap.2!O] [PWS-Zbot-FGD!3E8CC36E0C1A] [Trojan/Dorkbot.b] [Trojan.Win32.Androm.bxpgtv] [W32/A-b6ffb83e!Eldorado] [WS.Reputation.1] [Dorkbot.GUU] [Win32/Dorkbot.TDCCNAB] [Backdoor.Androm!vhSTKXm+qCw] [PE:Worm.Dorkbot!6.6AF] [Mal/EncPk-AKC] [TrojWare.Win32.Kryptik.BDBB] [Trojan.Packed.24326] [Backdoor.Androm.Win32.753] [TR/Kazy.aiwt] [Backdoor/Androm.oe] [Trojan[Backdoor]/Win32.Androm] [Win32.Hack.Androm.s.(kcloud)] [Worm:Win32/Dorkbot.I] [Trojan/Win32.Androm] [W32/Trojan.WXNS-5611] [BScope.Backdoor.Andr.3113] [W32/Dorkbot.A.worm] [Win32/Dorkbot.B] [Win32.Backdoor.Androm.xrw] [Worm.Win32.Luder] [W32]
497b25ea944d382e5a6fa5ccd8d447c6	[W32.CyqoiLTL.Trojan] [Backdoor/W32.Androm.129024] [Trojan.Win32.Krap.2!O] [Worm.Dorkbot] [Trojan/Dorkbot.b] [Trojan.Win32.NgrBot.bxpgjt] [W32.IRCBot.NG] [Dorkbot.GUU] [Win32/Dorkbot.DSWOBZC] [TROJ_FORUCON.BMC] [Win.Trojan.Dorkbot-356] [Backdoor.Androm!YzVx7IxA1h8] [TrojWare.Win32.Kryptik.BDTC] [BackDoor.IRC.NgrBot.42] [Worm.Dorkbot.Win32.934] [BehavesLike.Win32.Backdoor.cc] [W32/Dorkbot-JF] [Backdoor/Androm.oz] [BDS/Androm.sic] [Trojan[Backdoor]/Win32.Androm] [Win32.HeurC.KVMH004.a.(kcloud)] [Worm:Win32/Dorkbot.I] [Worm.Win32.S.Luder.129024.S[h]] [Worm/Win32.Luder] [PWS-Zbot-FBDR!497B25EA944D] [BScope.Backdoor.Andr.3113] [Trj/Dtcontx.E] [Win32.Backdoor.Androm.Pdwl] [Worm.Win32.Dorkbot] [W32/Zbot.AOV!tr]
00aff4f4a88345b3c79b46efbed55371	[W32.InjectAdwaredDwnA1.PE] [Win32.Ramnit.N] [Virus/W32.SpyEye] [Virus.Win32.Ramit.1!O] [W32.Ramnit.BA] [W32/Ramnit.a] [Virus.Ramnit] [Virus.Nimnul.Win32.2] [Virus.Win32.Nimnul.bqjjnb] [W32/Ramnit.E] [W32.Ramnit.B!inf] [Ramnit.O] [Win32/Ramnit.C] [Win32:RmnDrp] [W32.Ramnit-1] [Virus.Win32.Nimnul.a] [Win32.Nimnul.A] [Virus.Win32.Ramnit.K] [BackDoor.IRC.NgrBot.42] [W32/Ramnit.C] [PE_RAMNIT.DEN] [Heuristic.LooksLike.Win32.SuspiciousPE.C] [W32/Ramnit-A] [Win32/IRCNite.wi] [Virus/Win32.Nimnul.a] [Win32.Ramnit.lx.30720] [Virus:Win32/Ramnit.J] [Win32/Ramnit.G] [Virus.Win32.Nimnul.b] [W32/Cosmu.E] [Win32/Ramnit.H] [PE:Win32.Mgr.b!1594784] [Worm.Win32.Dorkbot] [Win32/Zbot.F] [Virus.Win32.Nimnul.$a] [Virus.Win32.Ramnit.A]
30f4176601688fe8762140f132942db1	[W32.InjectAdwaredDwnA1.PE] [Win32.Ramnit.N] [Virus/W32.SpyEye] [Virus.Win32.Ramit.1!O] [W32.Ramnit.BA] [W32/Ramnit.a] [Virus.Ramnit] [W32/Ramnit.E] [W32.Ramnit.B!inf] [Ramnit.O] [Win32/Ramnit.C] [PE_RAMNIT.DEN] [Win32:RmnDrp] [W32.Ramnit-1] [Virus.Win32.Nimnul.a] [Virus.Win32.Nimnul.bqjjnb] [Win32.Nimnul.A] [PE:Win32.Mgr.b!1594784] [W32/Ramnit-A] [Virus.Win32.Ramnit.K] [BackDoor.IRC.NgrBot.42] [Virus.Nimnul.Win32.2] [W32/Ramnit.C] [Heuristic.LooksLike.Win32.SuspiciousPE.F] [Win32/IRCNite.wi] [Virus/Win32.Nimnul.a] [Win32.Ramnit.lx.30720] [Virus:Win32/Ramnit.J] [Win32/Ramnit.G] [Virus.Win32.Nimnul.b] [W32/Cosmu.E] [Win32/Ramnit.H] [Virus.Win32.Dropper.k] [Worm.Win32.Dorkbot] [Win32/Zbot.F] [Virus.Win32.Nimnul.$a] [Virus.Win32.Ramnit.A]
5f9f45e78421d58968e17603b85ed050	[W32.ChirBPE] [Win32.Runouce.B@mm] [Virus.Worm.Win32.Runouce.1!O] [W32.Runouce.B] [W32/Chir.b@MM] [Worm.Dorkbot] [Worm.Runouce.Win32.2] [W32/Chir.b.dannado] [I-Worm.Chir.B] [W32/Thecid.B@mm] [W32.Chir.B@mm] [Obfuscated_FA] [Win32/Chir.B] [PE_Chir.B] [Win32:Oncer] [Worm.Runouce.b] [Email-Worm.Win32.Runouce.b] [Virus.Win32.Runouce.bxafx] [Win32.Chir.B] [W32/Chir-A] [TrojWare.Win32.Kryptik.BDTC] [BackDoor.IRC.NgrBot.42] [W32/Chir.B] [Heuristic.LooksLike.Win32.SuspiciousPE.F] [Win32/cnPeace.b] [Worm[Email]/Win32.Runouce.b] [Win32.Type.b.6637] [Virus:Win32/Chir.B@mm] [Win32/ChiHack.6652] [Virus.Win32.Chur.A] [PE:Worm.ChineseHacker-2!23772] [Worm.Win32.Dorkbot] [W32/Chir.B@mm] [Win32/Chir.B@mm] [Virus.Win32.Runouce.$a] [Virus.Win32.CNHacker.C]

Whois

Property	Value
Email	mbakerh@yeah.net
NameServer	NS2.2FREEHOSTING.COM
Created	2014-08-12 00:00:00
Changed	2015-08-13 00:00:00
Expires	2016-08-12 00:00:00
Registrar	SHANGHAI YOVOLE NETW

DNS Resolutions

Date	IP Address
2017-04-13	116.193.77.110 (ClassC)
2019-06-07	109.236.89.60 (ClassC)
2025-01-14	54.244.188.177 (ClassC)

Subdomains

Date	Domain	IP
t.baerr01.com	2017-04-03	116.193.77.110

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]