Domain > ftp.gratisweb.com

More information on this domain is in AlienVault OTX

Is this malicious?

Files that talk to ftp.gratisweb.com

MD5	A/V
bc3af0341ea6818229de715b47bf37b5	[W32.Clodde6.Trojan.5492] [Trojan-Banker.Win32.Banker!O] [Win32.Trojan-Spy.Banker.fgw.10] [Trojan/Spy.Banker.vfv] [TrojanSpy.Banker!92ASzafjIMw] [W32/Banker.BDYK] [Infostealer.Bancos] [Banker.CIDA] [Mal_Banker4] [Trojan-Banker.Win32.Banker.kts] [Trojan.Win32.Banker.mfsz] [Trojan.Win32.S.Banker.2962944] [PE:Trojan.Spy.Win32.Banker.lzc!1075096696] [Trojan.PWS.Banker.9287] [Mal_Banker4] [Mal/Behav-188] [Trojan/Banker.bbj] [Trojan[Banker]/Win32.Banker] [Win32.Troj.Banker.(kcloud)] [W32/Banker.FLUH-7188] [Win-Trojan/Banker.2962944] [TrojanBanker.Banker] [Trj/Banbra.FQX] [Win32.Trojan-banker.Banker.Pgcw] [Trojan-Banker.Win32.Banker] [Luhe.Boxed.G] [Trojan.Win32.Banker.AZe]
b16a5c7d680283daf3a19acacb1f115b	[W32.Clod729.Trojan.2e20] [Trojan-Banker.Win32.Banker!O] [Artemis!B16A5C7D6802] [W32/Behav-Heuristic-066] [Trojan.Win32.Banker.phye] [Banker.EDNM] [Trojan-Banker.Win32.Banker.ion] [TrojanSpy.Banker!n2BRo5wzan4] [Trojan.Win32.A.Banker.2663424.B] [Trojan.PWS.Banker.27934] [Trojan.Banker.Win32.2194] [Heuristic.LooksLike.Win32.Suspicious.N!89] [Trojan/Banker.Banker.afjd] [Trojan[Banker]/Win32.Banker] [Win32.Troj.Banker.(kcloud)] [Trojan/Win32.Banker] [Trojan-Spy.Win32.Banker.anv] [Win32/DH{gQwuIA8DfIESJCI}] [Trojan.Win32.Banker.AXKV] [Win32/Trojan.a88]
2e910f33aef0c5a7d8a5e29852522b01	[W32.Clod0bc.Trojan.16f3] [Trojan.Crypt.Delf.B] [Trojan-Spy/W32.Banker.2654720] [TrojanBanker.Banker.jpj] [PWS-Banker] [Trojan/Spy.Banker.jpj] [Trojan.Win32.Banker.tqla] [W32/Banker.CEIO] [Infostealer.Gampass] [Banker.COST] [TROJ_SHEUR.HF] [Trojan-Banker.Win32.Banker.jpj] [Trojan.Crypt.Delf.B] [TrojanSpy.Banker!P5t67BiNWmI] [Trojan.Crypt.Delf.B] [Trojan.Crypt.Delf.B] [Trojan.PWS.Banker.15437] [TROJ_SHEUR.HF] [Heuristic.LooksLike.Win32.Suspicious.N!89] [Trojan/Banker.Banker.ahwx] [Win32.Troj.Banker.(kcloud)] [Trojan.Crypt.Delf.B] [W32/Banker.XHSD-6061] [TrojanBanker.Banker] [Trj/CI.A] [Trojan-Spy.Win32.Banker.anv] [Win32/DH{LiAPA3wkIg}] [Trojan.Win32.Banker.AREg]

Whois

Property	Value
Email	internet@isern.com
NameServer	NS2.SOFTLAYER.COM
Created	1997-08-21 00:00:00
Changed	2014-07-21 00:00:00
Expires	2015-08-20 00:00:00
Registrar	ENTORNO DIGITAL, S.A

DNS Resolutions

Date	IP Address
2013-07-17	50.23.244.196 (ClassC)
2019-05-11	158.85.35.88 (ClassC)
2024-08-13	54.36.87.194 (ClassC)
2025-08-10	185.53.177.31 (ClassC)

Port 80

Subdomains

Date	Domain	IP
perso.gratisweb.com	2013-07-03	50.23.244.196
ftp.gratisweb.com	2013-07-17	50.23.244.196
www.gratisweb.com	2014-08-19	50.23.244.196

View on OTX | View on ThreatMiner

Data with thanks to AlienVault OTX, VirusTotal, Malwr and others. [Sitemap]