Domain > downloadapp.ballet.com

More information on this domain is in AlienVault OTX

DNS Resolutions

Date	IP Address
2024-12-22	13.227.37.7 (ClassC)
2025-11-19	3.169.173.59 (ClassC)

HTTP/1.1 302 Moved TemporarilyContent-Type: application/xmlTransfer-Encoding: chunkedConnection: keep-aliveDate: Wed, 19 Nov 2025 23:32:03 GMTServer: AmazonS3Location: https://www.ballet.com/app/X-Cache: Error from cloudfrontVia: 1.1 8af7e76489ae9222af2304e63d2c0520.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: _FjJqSvRp7Bj7JAZXFBgvLJTuJnx-dHMzHGUknoBD36IMy75ZhbyTg

?xml version1.0 encodingUTF-8?>Error>Code>SignatureDoesNotMatch/Code>Message>The request signature we calculated does not match the signature you provided. Check your key and signing method./Message>AWSAccessKeyId>AKIAJ6YPLSIMMH7EUT5A/AWSAccessKeyId>StringToSign>AWS4-HMAC-SHA25620251119T233203Z20251119/us-east-1/s3/aws4_request97c18e9e327e8ed398a756b554bd76d0187375ca897b6657aed2706d735d3a48/StringToSign>SignatureProvided>ee291750f7174fd8861d75ddeb790288d653294931f6b98bb2bb5f57588e4012/SignatureProvided>StringToSignBytes>41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 0a 32 30 32 35 31 31 31 39 54 32 33 33 32 30 33 5a 0a 32 30 32 35 31 31 31 39 2f 75 73 2d 65 61 73 74 2d 31 2f 73 33 2f 61 77 73 34 5f 72 65 71 75 65 73 74 0a 39 37 63 31 38 65 39 65 33 32 37 65 38 65 64 33 39 38 61 37 35 36 62 35 35 34 62 64 37 36 64 30 31 38 37 33 37 35 63 61 38 39 37 62 36 36 35 37 61 65 64 32 37 30 36 64 37 33 35 64 33 61 34 38/StringToSignBytes>CanonicalRequest>GET//host:downloadapp.ballet.comx-amz-content-sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855x-amz-date:20251119T233203Zhost;x-amz-content-sha256;x-amz-datee3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855/CanonicalRequest>CanonicalRequestBytes>47 45 54 0a 2f 2f 0a 0a 68 6f 73 74 3a 64 6f 77 6e 6c 6f 61 64 61 70 70 2e 62 61 6c 6c 65 74 2e 63 6f 6d 0a 78 2d 61 6d 7a 2d 63 6f 6e 74 65 6e 74 2d 73 68 61 32 35 36 3a 65 33 62 30 63 34 34 32 39 38 66 63 31 63 31 34 39 61 66 62 66 34 63 38 39 39 36 66 62 39 32 34 32 37 61 65 34 31 65 34 36 34 39 62 39 33 34 63 61 34 39 35 39 39 31 62 37 38 35 32 62 38 35 35 0a 78 2d 61 6d 7a 2d 64 61 74 65 3a 32 30 32 35 31 31 31 39 54 32 33 33 32 30 33 5a 0a 0a 68 6f 73 74 3b 78 2d 61 6d 7a 2d 63 6f 6e 74 65 6e 74 2d 73 68 61 32 35 36 3b 78 2d 61 6d 7a 2d 64 61 74 65 0a 65 33 62 30 63 34 34 32 39 38 66 63 31 63 31 34 39 61 66 62 66 34 63 38 39 39 36 66 62 39 32 34 32 37 61 65 34 31 65 34 36 34 39 62 39 33 34 63 61 34 39 35 39 39 31 62 37 38 35 32 62 38 35 35/CanonicalRequestBytes>RequestId>QHDRPHJC8EVW0WTK/RequestId>HostId>pH8WTc9llWWNZfGAg3MVu657U8Dy0wPyP/z7q5jbhgK7RN/icWukipRy4SPKzPRDAofyZqdhus0/HostId>/Error>

Port 443

HTTP/1.1 302 Moved TemporarilyContent-Type: application/xmlTransfer-Encoding: chunkedConnection: keep-aliveDate: Wed, 19 Nov 2025 23:32:03 GMTServer: AmazonS3Location: https://www.ballet.com/app/X-Cache: Hit from cloudfrontVia: 1.1 3caf9df4ca497afd40efb87f8957a7fa.cloudfront.net (CloudFront)X-Amz-Cf-Pop: HIO52-P4X-Amz-Cf-Id: JeG4AFd4WFVG5P4hCUI2ZkFupDYVvRrOxiaLwHnFIAeb-ZO7Xhbj5g

Subdomains

Date	Domain	IP
genuine.ballet.com	2024-08-30	3.163.165.61
api.ballet.com	2024-08-25	3.163.24.40
bitcoin.ballet.com	2024-11-02	18.161.6.53
app.ballet.com	2025-04-22	204.246.191.8
downloadapp.ballet.com	2025-11-19	3.169.173.59
ach-webview.ballet.com	2024-05-02	99.84.66.3

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]

Domain > downloadapp.ballet.com

Is this malicious?

DNS Resolutions

Port 80

Port 443

Subdomains